Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/CB6Z9Cn2XZCqdycJI-aiIawcmYA.roa
File: CB6Z9Cn2XZCqdycJI-aiIawcmYA.roa (raw, json)
Hash identifier: dm/SpIfuacMS26EabD/Zd0fYT7MUnlgz5sDZtmxXRZo=
Subject key identifier: 08:1E:99:F4:29:F6:5D:90:AA:77:27:09:23:E6:A2:21:AC:1C:99:80
Certificate issuer: /CN=ad2d243b56f01d79c31e6e851696c3fb102b83cf
Certificate serial: 052EEE99
Authority key identifier: AD:2D:24:3B:56:F0:1D:79:C3:1E:6E:85:16:96:C3:FB:10:2B:83:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS0kO1bwHXnDHm6FFpbD-xArg88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/CB6Z9Cn2XZCqdycJI-aiIawcmYA.roa
Signing time: Sat 01 Jan 2022 14:07:34 +0000
ROA not before: Sat 01 Jan 2022 14:07:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57530
IP address blocks: 45.132.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86961817 (0x52eee99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d243b56f01d79c31e6e851696c3fb102b83cf
Validity
Not Before: Jan 1 14:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=081e99f429f65d90aa77270923e6a221ac1c9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:e6:d0:ba:12:62:2b:7d:86:19:95:8b:f4:
0e:db:f7:69:5d:23:73:0d:ca:73:2c:6f:d2:42:46:
cd:57:4b:72:1c:f1:7a:bd:cc:ea:93:a6:d3:71:0c:
b6:90:e5:c8:08:8f:bf:ae:c1:26:c0:1d:b0:ad:24:
24:77:63:0e:f2:51:0e:0e:c0:57:18:3c:32:64:57:
4d:59:5a:fe:0c:87:78:84:57:4b:d0:55:7f:f9:8c:
59:54:09:7e:49:54:bd:27:ae:3f:a0:2d:40:a4:e5:
70:18:21:42:1d:63:5b:89:1f:f3:c0:73:a7:e4:7c:
0b:24:53:af:46:f4:f7:ac:c1:10:d4:75:7c:64:c6:
67:75:5f:3b:9f:08:1e:d2:dd:38:c1:9b:7c:36:6e:
03:a5:ae:cf:ec:cd:84:fe:31:4d:ee:64:0f:8e:39:
5a:ce:b5:92:f4:5b:2f:e3:76:ca:c2:6d:e3:15:14:
ae:e3:91:79:3c:ce:53:da:b7:98:7e:0f:59:b6:af:
a7:d8:25:cc:30:bd:3b:66:9f:76:1c:fc:2f:30:d2:
57:1d:84:cf:cf:f3:9c:09:48:02:54:47:94:6d:e7:
d2:1d:ef:d5:17:6c:08:7f:c9:d3:df:81:a0:a6:61:
6b:2e:43:ee:02:f1:2a:01:db:a2:d0:15:07:c3:4b:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:99:F4:29:F6:5D:90:AA:77:27:09:23:E6:A2:21:AC:1C:99:80
X509v3 Authority Key Identifier:
keyid:AD:2D:24:3B:56:F0:1D:79:C3:1E:6E:85:16:96:C3:FB:10:2B:83:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS0kO1bwHXnDHm6FFpbD-xArg88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/CB6Z9Cn2XZCqdycJI-aiIawcmYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0a4501-9c97-421b-a144-bf8a8147028c/1/rS0kO1bwHXnDHm6FFpbD-xArg88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.204.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5a:04:41:50:15:6f:1e:af:39:0b:ba:43:00:e0:0d:27:c6:
ea:06:7b:be:b7:db:fa:9e:27:9c:c7:10:d7:fa:7a:1a:b6:0c:
08:09:7d:43:65:e7:98:ca:55:92:b9:00:34:e1:2c:8a:42:d3:
63:c1:af:e2:51:bd:18:b2:f6:9e:ed:c1:e7:95:8d:e0:4b:d8:
81:c3:ea:48:f1:db:cd:bc:7c:63:9c:3c:ec:20:50:74:30:65:
e9:44:a2:0a:4f:50:88:aa:9b:65:95:67:10:e3:e7:3a:dc:ad:
09:f2:b8:11:8d:1e:84:ac:87:49:02:50:ad:ab:32:ab:7e:1a:
a1:76:b1:19:6e:6c:39:c7:44:2e:5b:54:0a:28:fb:81:1a:3c:
2a:60:54:70:5d:9e:5b:a3:ad:15:e1:d1:b2:84:e6:6b:20:d5:
bf:aa:51:31:00:ab:0c:0b:5a:b6:0c:99:a2:84:69:32:1d:de:
62:0c:e4:57:50:c9:69:1c:22:75:6d:1c:bb:cc:98:f9:2b:71:
bc:d3:f1:ea:9f:89:e3:9d:40:b1:06:e0:af:7d:9b:3a:73:a9:
af:fb:32:45:98:3c:ec:a1:a1:81:a6:c0:08:ec:61:85:46:a3:
fc:dd:19:d6:03:95:e4:43:04:2c:f7:47:94:94:31:d6:30:86:
f2:a9:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org