Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/S0kyWO8Waqipei-kr0Vv9s--2dw.roa
File: S0kyWO8Waqipei-kr0Vv9s--2dw.roa (raw, json)
Hash identifier: xrhZCMJ4qYqwdlZVcL6xo9PZz+9IQHxboktyluoZh0A=
Subject key identifier: 4B:49:32:58:EF:16:6A:A8:A9:7A:2F:A4:AF:45:6F:F6:CF:BE:D9:DC
Certificate issuer: /CN=a4b002e0cd28ca1051e02c9d21dbaa38fe4dee07
Certificate serial: 018CC86EEC786A2C90C176A2892910720B5C
Authority key identifier: A4:B0:02:E0:CD:28:CA:10:51:E0:2C:9D:21:DB:AA:38:FE:4D:EE:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLAC4M0oyhBR4CydIduqOP5N7gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/S0kyWO8Waqipei-kr0Vv9s--2dw.roa
Signing time: Tue 02 Jan 2024 04:29:21 +0000
ROA not before: Tue 02 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213122
IP address blocks: 45.143.145.0/24 maxlen: 24
45.143.144.0/24 maxlen: 24
45.143.146.0/24 maxlen: 24
45.143.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ec:78:6a:2c:90:c1:76:a2:89:29:10:72:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b002e0cd28ca1051e02c9d21dbaa38fe4dee07
Validity
Not Before: Jan 2 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b493258ef166aa8a97a2fa4af456ff6cfbed9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:44:3d:35:ef:f6:04:46:25:e7:2e:e8:9c:60:
db:fa:af:e7:1b:42:bc:62:0a:29:5e:9d:02:68:db:
83:0d:48:96:6b:79:65:6b:a3:a5:21:b1:a4:c5:ff:
1d:1c:dc:f7:90:13:d5:ee:a7:5d:e0:c0:36:3c:3c:
a4:e8:ec:08:88:94:ce:9f:ff:8e:3f:de:6b:a2:cc:
ae:0b:a9:86:88:be:9f:9b:e7:a6:b2:5e:c3:df:02:
3c:df:06:47:b4:2e:3d:13:ea:a2:20:a4:7d:a8:01:
aa:f7:5b:c2:f0:3a:61:db:1f:b9:e7:20:97:f1:7d:
51:d5:be:3f:38:29:11:01:ae:d1:2f:11:98:5b:c6:
71:17:28:bf:14:2e:cd:44:32:a3:94:a2:66:f1:c3:
57:d6:81:4c:88:1d:cc:b6:dd:fb:32:01:c4:fe:0a:
41:f4:f6:0e:7f:ba:89:dd:79:29:e6:33:b7:9a:c1:
e0:9c:61:02:14:e7:75:4a:fc:a6:73:56:dc:d0:59:
ac:66:e3:f4:00:f8:ca:98:dd:a5:29:89:35:51:08:
84:62:96:e2:e7:64:7a:26:f1:a4:cb:91:df:ac:00:
62:ed:7e:15:f9:a3:f7:b0:01:e2:d1:63:8a:8d:54:
f9:50:45:01:39:3d:39:7c:93:ba:b2:12:aa:dd:37:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:49:32:58:EF:16:6A:A8:A9:7A:2F:A4:AF:45:6F:F6:CF:BE:D9:DC
X509v3 Authority Key Identifier:
keyid:A4:B0:02:E0:CD:28:CA:10:51:E0:2C:9D:21:DB:AA:38:FE:4D:EE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLAC4M0oyhBR4CydIduqOP5N7gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/S0kyWO8Waqipei-kr0Vv9s--2dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6419af-a23c-4219-9a2b-0463b252bd1a/1/pLAC4M0oyhBR4CydIduqOP5N7gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.144.0/22
Signature Algorithm: sha256WithRSAEncryption
06:73:82:fc:e0:41:4a:5e:e8:2f:28:8d:ce:f5:80:83:e1:6a:
7a:17:76:c7:77:09:52:b8:0c:c6:b2:ce:b5:54:9e:ec:44:02:
21:08:88:a6:e3:ea:e1:dd:30:77:04:47:bc:0e:6b:b0:df:01:
33:93:25:11:2c:ee:e9:3b:47:d1:20:ef:05:f2:54:43:a5:71:
b4:1c:62:41:64:18:a8:3e:33:83:4e:b7:72:44:4d:8f:69:45:
83:90:b7:ea:b5:09:f0:3f:52:c2:59:8d:ea:c0:c2:3c:b5:d7:
c4:b2:db:b1:51:ff:bb:98:02:53:27:e2:86:c4:74:16:87:a0:
2a:43:b0:1f:97:5f:b7:19:89:1e:d8:8b:db:cf:c9:a7:00:cd:
e4:f6:84:f4:f4:93:5d:05:ec:01:cd:b6:54:4f:4a:c8:7d:61:
14:91:5d:17:a3:1b:43:c0:40:ed:b7:90:04:a8:c4:85:8e:ae:
32:2f:40:ac:44:84:46:8c:64:52:0d:57:df:5e:fe:7e:62:39:
50:e1:a4:b7:e9:5c:9f:a4:26:39:ae:af:29:ae:59:ee:31:96:
4b:8c:ee:44:63:da:80:18:2c:8e:cf:40:50:dc:a1:a1:86:75:
c5:ad:f1:6d:e5:63:85:6d:d0:cf:12:f0:a9:5a:84:79:0c:89:
5b:b4:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:53 2024 by rpki-client on console-fra.rpki-client.org