Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/RaivXUVZ4VnoJHft9jXlr86jArw.roa
File: RaivXUVZ4VnoJHft9jXlr86jArw.roa (raw, json)
Hash identifier: DxyhrLgWOqv9fa4Cz5S6KgbAEbae7Ax3xft/zO78fK0=
Subject key identifier: 45:A8:AF:5D:45:59:E1:59:E8:24:77:ED:F6:35:E5:AF:CE:A3:02:BC
Certificate issuer: /CN=16b38d300957fa15b3a802d38ff059cab2796c5a
Certificate serial: 0185710C12D326FDF2398535C23C4C9B0D01
Authority key identifier: 16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/RaivXUVZ4VnoJHft9jXlr86jArw.roa
Signing time: Mon 02 Jan 2023 05:54:54 +0000
ROA not before: Mon 02 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 45.92.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:12:d3:26:fd:f2:39:85:35:c2:3c:4c:9b:0d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b38d300957fa15b3a802d38ff059cab2796c5a
Validity
Not Before: Jan 2 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a8af5d4559e159e82477edf635e5afcea302bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:48:5e:ff:65:ef:8d:53:44:b0:f2:64:ff:
a5:d8:0e:27:17:67:9c:b6:0a:1b:d0:a9:e0:36:d4:
c3:12:19:eb:a7:f3:0c:80:fe:ad:22:0b:55:35:fd:
f1:e9:35:ac:2e:c0:6b:7b:20:3a:47:24:c4:4b:ec:
1d:87:49:28:c2:20:16:78:aa:44:d5:c1:1e:17:3f:
39:cd:95:c2:89:b0:f9:3c:22:9e:c2:5c:76:f2:ac:
b9:84:94:fe:a5:34:5c:c4:a0:51:9d:a6:d8:27:cf:
b7:79:9a:81:ff:47:4d:22:01:d0:b4:23:eb:84:b8:
38:8c:d4:86:78:1c:df:bf:fb:68:88:36:fd:38:b0:
6c:ae:8e:4a:1e:6f:b8:83:92:4a:95:d3:56:e4:a4:
67:23:e6:ba:30:fd:e5:f1:94:94:8c:37:e5:a7:8c:
1d:a9:1e:99:9f:5d:34:04:e2:44:f7:e6:89:61:0f:
da:0b:a7:be:90:14:43:78:72:40:91:c7:4f:ea:00:
83:fe:49:8f:8f:46:f2:ae:e8:e0:cf:ef:e9:e0:f0:
4d:f7:77:3a:2f:9e:bc:c2:85:59:3a:26:99:7c:9d:
6a:3a:ce:e0:74:6a:80:8c:12:58:3c:9d:0e:9e:41:
1e:5c:14:29:38:75:90:60:c3:88:ab:8f:47:14:c7:
ca:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A8:AF:5D:45:59:E1:59:E8:24:77:ED:F6:35:E5:AF:CE:A3:02:BC
X509v3 Authority Key Identifier:
keyid:16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/RaivXUVZ4VnoJHft9jXlr86jArw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.78.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:02:8e:07:4d:4f:0a:85:fa:08:9b:87:37:20:70:d1:ac:96:
be:d0:d6:c3:e7:4b:51:6c:de:ef:8b:b3:aa:e9:87:02:03:4c:
78:13:84:96:71:1e:b6:71:2c:c0:d9:98:5d:c9:76:ae:0d:02:
80:b6:92:44:8e:51:c4:ea:ec:85:47:44:a4:43:66:c2:0b:29:
53:04:65:3f:c1:33:62:04:19:77:b2:d3:1e:a2:88:21:d8:93:
db:d3:96:51:9f:d0:ca:87:60:54:30:c9:cc:11:d6:c7:dc:56:
0d:ad:fe:11:61:26:6c:47:61:f5:67:3b:6e:3d:5c:38:a5:30:
15:6f:35:61:49:f9:69:17:fa:0f:29:03:b9:2b:38:60:0e:bf:
07:72:64:f0:55:76:6b:8f:c9:c9:91:42:e3:57:3f:04:f2:28:
48:2b:40:db:d9:76:60:2d:42:c8:b5:a2:5d:44:62:31:19:15:
9e:3d:09:05:73:30:94:87:92:52:f5:7e:3e:f1:05:bb:4a:d4:
8e:9c:86:53:ab:a9:4c:7e:bf:5d:44:81:82:e5:97:c7:c8:ec:
7e:9f:5d:52:fe:c6:e2:77:ac:af:49:5c:66:69:f9:f4:19:50:
45:c0:5a:22:cc:a0:8d:ef:9a:3f:c7:30:08:35:dc:e3:82:79:
05:82:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:45 2024 by rpki-client on console-fra.rpki-client.org