Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/lNA1RPOXaZqOvEomflHUh2ZW0-A.roa
File: lNA1RPOXaZqOvEomflHUh2ZW0-A.roa (raw, json)
Hash identifier: 47qUOnrt1I8LWsmQMadlm43QptqFBN8ntjHNkmsXcWE=
Subject key identifier: 94:D0:35:44:F3:97:69:9A:8E:BC:4A:26:7E:51:D4:87:66:56:D3:E0
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01891F4425103FD721686ADE355184825EBD
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/lNA1RPOXaZqOvEomflHUh2ZW0-A.roa
Signing time: Tue 04 Jul 2023 04:58:26 +0000
ROA not before: Tue 04 Jul 2023 04:58:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 212.46.37.0/24 maxlen: 24
45.155.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1f:44:25:10:3f:d7:21:68:6a:de:35:51:84:82:5e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jul 4 04:58:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94d03544f397699a8ebc4a267e51d4876656d3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:9e:1f:f0:0a:a0:55:76:8d:5d:41:b2:b0:
00:f1:60:52:be:d2:4d:a1:56:ae:54:73:69:20:f3:
df:01:6d:47:6c:3e:a6:fc:8a:22:23:19:cf:1e:ca:
d9:9a:ec:c7:66:52:1c:43:2b:95:f2:6a:01:a0:34:
da:e8:cf:09:ee:f3:75:3d:00:fe:37:4e:a5:84:05:
15:15:2e:be:5d:80:f6:d0:b0:3b:79:9d:a4:96:7a:
a2:c8:ff:a1:fb:6d:54:38:ee:cd:b7:9b:39:95:45:
6a:51:0e:a9:bc:79:2b:50:30:ac:52:ff:27:0c:63:
7f:d5:13:4f:10:8f:a5:dc:9c:db:4e:f2:82:3e:ed:
58:fa:2d:8b:da:73:d8:53:92:1e:93:25:6d:65:94:
4c:68:e3:08:0f:8b:1c:7f:a3:49:ca:0a:df:11:28:
4f:dd:f7:61:a8:44:b2:49:b2:5e:09:02:df:4f:ec:
0d:01:a1:44:a3:f0:0c:2f:a9:11:85:73:a0:0f:f6:
a4:f6:b8:41:5e:49:cf:f8:ea:a6:8e:ec:dc:18:c7:
d0:9e:ff:45:60:87:3f:27:99:ff:27:ee:4a:8f:03:
0e:60:6c:fe:83:79:35:99:c6:8e:08:fe:1f:89:c4:
15:86:b4:72:47:a3:b3:f8:28:17:20:53:21:83:1c:
d5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:35:44:F3:97:69:9A:8E:BC:4A:26:7E:51:D4:87:66:56:D3:E0
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/lNA1RPOXaZqOvEomflHUh2ZW0-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.66.0/23
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:6b:fc:3b:24:36:8f:cd:95:03:c0:a7:f8:d6:70:e2:0a:c0:
f2:2d:77:9a:d9:86:c1:11:84:cd:bb:5f:3e:97:f1:e1:21:61:
7f:83:2f:2d:a4:65:9d:fb:ff:c6:6a:06:b2:22:37:40:ef:62:
83:b4:d3:8c:eb:0c:e2:18:40:00:a7:eb:87:13:13:99:0c:5b:
2f:78:24:a7:3e:7c:65:47:9b:7d:f4:2b:58:b1:25:9a:e5:d5:
e5:42:70:ca:96:17:ed:67:9e:ec:30:e9:3f:9e:b5:c8:66:93:
ff:7d:81:58:c4:0f:44:e9:e4:59:f5:a9:21:d0:10:cf:4e:17:
f5:8b:1f:ca:ad:06:d3:88:9b:6d:4f:71:2f:51:fa:a9:6f:14:
45:9f:a7:7a:3a:99:f3:9f:3f:ab:33:0b:7e:d6:f8:1e:d3:93:
81:96:61:0e:f3:e2:c1:f7:c1:8a:ea:7b:01:d6:2b:e1:2d:c7:
1b:c7:53:52:6b:98:ec:04:57:20:97:d2:71:53:e7:47:52:27:
fd:71:97:25:8a:e9:e2:43:fd:6b:6d:20:40:73:1e:de:15:3d:
61:a3:87:04:17:92:54:5a:c0:a0:09:01:8c:c3:5c:83:91:d9:
4e:e4:42:38:f5:a1:f6:22:35:4f:16:4d:73:82:e1:b3:0a:10:
c0:e7:03:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org