Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Aoi07lLkMrwJqSvOz302mjEdtwk.roa
File: Aoi07lLkMrwJqSvOz302mjEdtwk.roa (raw, json)
Hash identifier: ZN9cOpFAj3yTBxv8fWM53vtrmZD5wyoMPLx5G6DGNnA=
Subject key identifier: 02:88:B4:EE:52:E4:32:BC:09:A9:2B:CE:CF:7D:36:9A:31:1D:B7:09
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0309BB77
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Aoi07lLkMrwJqSvOz302mjEdtwk.roa
Signing time: Sat 01 Jan 2022 01:50:27 +0000
ROA not before: Sat 01 Jan 2022 01:50:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.146.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50969463 (0x309bb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 01:50:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0288b4ee52e432bc09a92bcecf7d369a311db709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:d1:d3:20:73:83:e0:46:03:d1:8b:33:ce:
93:a9:1f:fd:09:36:43:89:8d:e1:a4:c6:2b:91:98:
bb:48:05:27:af:f0:d1:c5:11:ab:a4:12:b1:72:c2:
ee:6e:6c:bd:e4:fb:c7:8a:f0:b7:8a:d4:21:b8:e6:
7f:8f:9b:43:85:d2:3c:cf:54:74:0c:47:43:a5:a3:
0f:60:95:c7:8d:bc:6e:73:be:7d:6b:5f:5a:3e:7d:
a2:85:1e:f0:6d:a5:7f:75:e9:37:b3:4a:e0:5b:91:
3a:4c:d3:2c:06:dc:2c:1e:56:0d:92:64:1e:57:ad:
bf:17:72:3c:b9:92:70:d9:d7:18:37:c3:ff:c3:61:
49:a0:ea:ce:1c:20:18:3a:9c:ce:09:fc:95:3f:c9:
af:e4:6d:f3:a7:98:bd:45:3c:37:ba:22:5e:5a:3b:
2d:28:fd:e7:a2:f4:48:59:e9:42:9d:38:d3:aa:40:
f2:cb:60:73:fd:cd:64:34:f4:9f:e9:80:1f:85:24:
3f:55:6a:18:d0:ed:00:61:29:59:8a:55:8d:a9:c8:
a6:88:e4:93:fd:69:11:c4:0a:8d:24:a3:bb:8d:98:
3b:5f:26:23:1a:a7:27:97:7a:f1:41:b6:f8:fe:ca:
72:7a:b7:ca:a7:18:14:22:01:eb:a8:33:0d:3d:07:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:88:B4:EE:52:E4:32:BC:09:A9:2B:CE:CF:7D:36:9A:31:1D:B7:09
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Aoi07lLkMrwJqSvOz302mjEdtwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:94:17:f1:38:d9:f5:15:4b:47:8a:c6:ff:21:06:a2:c7:44:
fa:3b:30:8c:4f:1d:11:90:5e:c4:38:c0:d4:61:1b:a0:53:d8:
e8:f3:72:c4:9c:d0:13:33:ec:98:50:e4:3c:db:ef:81:a5:92:
96:4a:e7:45:b4:f7:27:49:b5:fe:32:de:2c:03:77:35:58:5c:
88:ac:0a:a7:eb:ee:c7:d2:49:f0:1c:26:cb:34:7f:9d:ec:d1:
45:35:4d:4b:63:5a:b2:78:bc:57:79:68:91:a3:59:6c:59:6d:
9a:ae:6c:12:da:bd:fc:dd:c5:33:35:1c:9e:7f:14:fd:a4:1d:
6c:c0:e1:7a:4d:6f:17:d8:81:b1:bf:4f:a1:4a:21:8c:e4:47:
d7:01:09:2b:73:66:f9:a1:f5:d8:72:10:08:f5:cb:f3:e4:fb:
d5:2d:fb:73:18:f4:c0:aa:64:29:70:c3:5e:2e:3c:41:2b:73:
8b:eb:a6:a3:f6:d9:55:e2:88:ee:24:1b:6d:0d:36:4c:90:60:
ed:4e:5b:26:55:d6:80:b7:5b:cf:de:07:b6:84:cd:27:b0:6d:
2a:77:60:79:f1:fa:8b:31:94:27:89:7f:06:94:d5:90:45:f5:
04:4d:e1:4c:c3:fc:a5:3f:87:8e:28:7f:69:ee:55:f0:ea:de:
e9:80:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org