Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PwUWwX2TBwgzrxgmsxLF32QqILE.roa
File: PwUWwX2TBwgzrxgmsxLF32QqILE.roa (raw, json)
Hash identifier: l+DpJB0ExclARKgB4xpcC1OyVjgxRrpm5zHVK3sTXZM=
Subject key identifier: 3F:05:16:C1:7D:93:07:08:33:AF:18:26:B3:12:C5:DF:64:2A:20:B1
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D0CC4FC3520636ED2DE65C54C6B70
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PwUWwX2TBwgzrxgmsxLF32QqILE.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 45.80.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0c:c4:fc:35:20:63:6e:d2:de:65:c5:4c:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f0516c17d93070833af1826b312c5df642a20b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:cf:a8:0a:9c:11:3c:c7:49:69:fc:c8:27:
70:f2:dd:82:22:fd:0d:a9:02:76:47:62:ba:79:08:
d4:75:b4:14:46:b5:39:4a:74:b7:0e:1f:5a:9e:84:
cc:82:ac:c1:32:79:ae:7a:1b:16:a5:ef:98:a4:08:
18:23:1b:d8:11:2f:db:ee:94:b6:f8:ef:64:20:64:
d9:b7:73:dd:98:40:ab:c0:06:d5:55:2b:43:e0:71:
c1:99:dd:58:4d:b5:00:c9:f4:1b:83:ff:30:cc:66:
14:84:e8:69:6e:d8:12:8e:db:fe:f8:74:f0:65:04:
c6:65:4e:06:56:31:bf:7f:e8:0a:45:12:da:94:93:
53:ac:90:3b:7c:1c:43:64:38:74:5f:06:f8:3b:32:
e0:bf:63:03:50:c8:2c:6c:9f:a5:34:47:52:1a:a2:
46:47:8c:ee:77:09:6a:41:10:61:c5:cd:2e:ff:4b:
cc:9d:2a:ed:63:18:ca:7d:f4:92:b7:1f:d0:db:a0:
fd:43:21:72:cb:34:e9:62:f6:fc:0a:8d:2e:66:28:
ef:9d:34:aa:de:37:bd:d8:4e:37:06:94:1b:72:82:
a4:b0:01:22:ab:f9:8b:8f:62:c2:41:9d:29:38:82:
d1:3b:cb:9d:4e:18:14:cc:5e:70:62:56:3f:9d:47:
af:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:05:16:C1:7D:93:07:08:33:AF:18:26:B3:12:C5:DF:64:2A:20:B1
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/PwUWwX2TBwgzrxgmsxLF32QqILE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f9:b3:04:7e:9d:a3:52:07:39:bf:cb:ff:f9:c2:32:7f:f2:
4a:66:d0:58:1b:e5:af:0d:af:ec:23:82:40:89:9a:55:62:94:
71:40:0f:8f:07:34:b3:75:77:1c:16:61:5a:f8:48:72:d4:e8:
98:24:05:92:90:15:bd:c4:ae:72:47:81:ba:82:a8:25:c6:c9:
8b:4a:a2:b0:90:0e:bb:cc:3b:d2:7b:b8:cf:a8:91:19:45:39:
17:8a:ef:11:14:e7:97:4e:5b:09:46:db:73:08:d2:17:44:45:
f7:1b:a1:b1:dd:c8:fd:8c:a4:24:8b:e6:cc:a2:0b:94:2c:9e:
9c:87:f9:39:6a:62:b3:b4:4a:9c:32:2c:9f:46:c3:41:27:e0:
a2:f6:bc:8c:26:30:98:01:7d:8c:51:8a:ea:3e:ab:de:7e:9f:
76:bf:a6:92:12:b7:6a:85:97:b6:ed:a4:d0:32:19:89:18:75:
7c:90:3b:65:89:08:cb:c5:8e:d4:96:65:0f:6b:38:cc:fd:82:
cb:5b:5a:b5:85:76:69:34:f1:a5:c4:c3:ea:26:99:55:df:61:
38:64:d2:37:0f:b7:c1:0e:f6:e0:a0:e3:54:b6:4b:ae:f3:11:
6c:c2:b6:6f:08:f1:02:b5:17:bb:5b:1e:bd:8a:af:06:57:be:
dc:66:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org