Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/3JxtgI4DjHC4rnV6pRDI9B7ogY4.roa
File: 3JxtgI4DjHC4rnV6pRDI9B7ogY4.roa (raw, json)
Hash identifier: 17rXX9IHs0k1CZGtoiHz7Em04ebq7gG8IB8YMniK4yQ=
Subject key identifier: DC:9C:6D:80:8E:03:8C:70:B8:AE:75:7A:A5:10:C8:F4:1E:E8:81:8E
Certificate issuer: /CN=a4b002e0cd28ca1051e02c9d21dbaa38fe4dee07
Certificate serial: 01856C0A69DB66E817B85D2C7E1FACBFA3F8
Authority key identifier: A4:B0:02:E0:CD:28:CA:10:51:E0:2C:9D:21:DB:AA:38:FE:4D:EE:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLAC4M0oyhBR4CydIduqOP5N7gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/3JxtgI4DjHC4rnV6pRDI9B7ogY4.roa
Signing time: Sun 01 Jan 2023 06:34:59 +0000
ROA not before: Sun 01 Jan 2023 06:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213122
IP address blocks: 45.143.145.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:69:db:66:e8:17:b8:5d:2c:7e:1f:ac:bf:a3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b002e0cd28ca1051e02c9d21dbaa38fe4dee07
Validity
Not Before: Jan 1 06:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc9c6d808e038c70b8ae757aa510c8f41ee8818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:d1:57:b3:50:a7:07:0a:4d:d6:43:f4:2d:
88:ce:9a:a8:c1:39:05:3c:02:a2:fa:c1:b9:c4:d1:
09:4c:29:bc:86:26:1e:c0:49:71:1a:1a:f4:1e:cc:
c4:27:5a:40:83:dd:30:8f:a5:22:cf:69:9a:60:5d:
86:88:7d:85:ac:cd:15:ee:90:96:e4:82:fe:c1:40:
cd:19:e1:c6:ab:ef:cf:88:e7:23:94:62:87:3c:5d:
49:d6:f1:66:3d:ad:a6:37:7b:6f:5b:e6:cc:78:c2:
93:7a:ad:0b:16:0d:86:1a:87:c6:95:a0:3c:bb:4d:
5c:97:39:61:71:69:fa:02:8a:90:87:bb:6a:7d:c5:
f7:64:0f:69:2f:ab:a3:f3:35:a6:69:85:c9:77:56:
4f:08:2b:9b:6e:1f:32:ba:39:bc:90:a5:f8:65:71:
84:aa:c6:a8:cf:9b:36:5d:2d:24:94:2e:b7:cc:a6:
f9:3d:b3:ec:bd:f4:99:51:ea:ef:32:8d:4e:f3:05:
7c:a8:ca:22:5f:72:e7:c6:1c:24:c6:eb:86:ed:5b:
37:b5:27:35:7a:32:1d:60:92:d3:c4:e8:ff:0b:e8:
8d:5c:b2:bc:4d:5c:cb:e8:9c:af:76:d1:76:89:32:
e7:2f:d1:e2:9b:e8:d7:31:2f:5f:08:df:43:59:2f:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9C:6D:80:8E:03:8C:70:B8:AE:75:7A:A5:10:C8:F4:1E:E8:81:8E
X509v3 Authority Key Identifier:
keyid:A4:B0:02:E0:CD:28:CA:10:51:E0:2C:9D:21:DB:AA:38:FE:4D:EE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLAC4M0oyhBR4CydIduqOP5N7gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/3JxtgI4DjHC4rnV6pRDI9B7ogY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/pLAC4M0oyhBR4CydIduqOP5N7gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.144.0/22
Signature Algorithm: sha256WithRSAEncryption
67:a1:f5:24:96:c7:09:1e:4b:ec:b0:2b:2e:ff:33:eb:35:12:
3d:60:45:65:68:49:4d:ac:80:c5:1d:a3:d6:d8:e8:03:19:ea:
7a:ef:94:46:35:15:04:63:0e:14:36:73:57:aa:f7:b7:f0:e2:
a1:85:c0:e7:68:33:42:87:97:14:e9:eb:f5:a3:78:29:8e:19:
c4:4d:a2:ff:e5:71:70:43:0e:dc:4d:7d:40:ad:c7:87:e3:9f:
7e:48:6b:18:10:fa:06:c0:ab:52:07:72:7d:2e:9a:3c:f9:6c:
6e:ab:09:16:61:6a:65:c4:d0:a6:20:64:91:ad:82:89:54:c0:
e8:0e:48:f4:f9:89:55:d0:51:20:da:d8:4c:1b:31:9d:b5:3c:
8b:d3:e6:7a:8d:68:5e:70:28:11:a3:0f:7a:c8:2f:a3:b8:6a:
ae:70:cf:44:85:56:b0:10:9e:e9:98:82:83:53:88:a7:33:5c:
d7:1d:cc:9f:c2:43:e1:62:a8:95:59:a9:4e:bb:51:4e:e5:07:
3e:cf:1f:23:7a:0c:5c:93:48:9f:04:d4:45:4d:21:4c:e7:2e:
31:e5:dc:28:bb:b3:0d:50:27:1f:d5:bf:ce:46:f4:c8:c3:e9:
bd:9f:ea:71:20:24:da:96:fd:14:77:94:fd:89:ed:9f:88:d1:
cd:e3:9a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:04 2024 by rpki-client on console-ams.rpki-client.org