Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/abG89RC27Esi4XqOEO3uNPqCQmk.roa
File: abG89RC27Esi4XqOEO3uNPqCQmk.roa (raw, json)
Hash identifier: GyDToUzK9XEFFJawY9ZvEnVUuUbT9jgXLL13okDoXKM=
Subject key identifier: 69:B1:BC:F5:10:B6:EC:4B:22:E1:7A:8E:10:ED:EE:34:FA:82:42:69
Certificate issuer: /CN=16b38d300957fa15b3a802d38ff059cab2796c5a
Certificate serial: 018CC26CFD67571534BE76C76C1D71979043
Authority key identifier: 16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/abG89RC27Esi4XqOEO3uNPqCQmk.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.92.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fd:67:57:15:34:be:76:c7:6c:1d:71:97:90:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b38d300957fa15b3a802d38ff059cab2796c5a
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b1bcf510b6ec4b22e17a8e10edee34fa824269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f7:d2:6e:43:b8:ab:65:e8:43:23:48:34:b4:
4a:18:9f:b5:b7:ff:4a:84:33:62:b6:09:00:b6:6b:
1a:37:5b:48:d0:a3:70:0c:de:7b:f1:6b:98:e9:d4:
e7:99:f2:0a:fb:39:1c:88:d0:75:44:f3:55:ad:32:
bb:6e:5d:16:a2:f3:0a:e9:75:c5:1e:03:84:cf:d3:
0b:d8:1a:6b:73:28:2a:21:83:4e:df:77:1e:39:59:
7f:9c:dd:1d:85:fe:9a:d5:8b:89:b8:3c:21:ad:70:
bd:94:14:9b:7a:50:56:83:55:8b:36:1d:f1:23:04:
eb:69:27:1d:b9:d7:06:0f:06:2e:14:7e:3e:1f:57:
f0:5b:19:44:0f:65:1c:0d:4a:5d:ee:22:4a:bb:97:
c0:f5:22:1a:32:0b:05:0c:a7:6a:2a:76:04:fc:34:
32:4c:6b:fb:da:0a:26:95:1a:60:51:78:7a:2d:0a:
1c:a7:e6:34:c8:af:96:16:ed:d7:69:f7:b2:a2:b2:
1d:31:89:f8:3a:ad:3c:b2:cb:b1:6b:8f:31:f8:e3:
30:84:e3:3d:31:ee:61:18:d5:32:7f:fa:c1:5b:72:
71:a9:ec:9d:7a:54:30:31:ed:8a:57:b9:03:97:4c:
63:7e:1d:87:56:7f:81:03:f3:ed:32:fd:2d:f4:66:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:BC:F5:10:B6:EC:4B:22:E1:7A:8E:10:ED:EE:34:FA:82:42:69
X509v3 Authority Key Identifier:
keyid:16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/abG89RC27Esi4XqOEO3uNPqCQmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:ea:03:c4:62:b6:c9:fa:55:e8:f7:8c:4b:90:be:93:cf:d8:
80:64:d7:5b:d5:83:a1:b5:a3:ce:b6:15:65:fd:6b:cf:72:54:
4b:8c:7b:32:eb:81:4b:bd:fb:3b:3d:52:0a:a0:08:c4:53:41:
95:84:5f:28:1d:37:3f:a9:54:69:3f:60:23:ab:f7:ad:c1:7a:
d2:b6:48:7e:1f:25:d4:dc:0b:73:65:1c:fa:2a:92:a3:de:d1:
92:37:dc:57:b0:11:c9:f7:9b:01:d1:aa:75:3e:45:72:9b:11:
c0:d3:fd:2a:09:4a:d5:48:f2:04:4a:b9:57:5e:2c:a5:ba:8b:
8f:a3:e0:d4:1b:30:3f:18:14:e9:ff:4c:d1:81:29:7c:d0:e5:
32:b5:f8:aa:51:bd:90:e5:41:00:ef:f8:5a:77:93:99:4b:ce:
9b:2c:0f:6a:53:28:db:8a:4b:4c:65:ff:12:cc:8b:02:d7:04:
76:4e:da:bc:50:d5:e6:d2:52:4a:5a:0d:59:08:20:c0:c7:4a:
4d:c0:4d:85:93:a6:61:73:b1:4e:41:29:30:2f:09:fa:9c:3f:
8d:45:e1:f3:ed:cb:65:11:d8:23:dc:e1:e4:1a:0f:08:39:a0:
aa:d1:6c:7f:63:6a:f0:7a:ad:86:bc:ab:63:da:93:b7:df:91:
18:ba:09:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:07 2024 by rpki-client on console-fra.rpki-client.org