Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/4IUOEdWF2jlO60XBVjtiOd3d8KQ.roa
File: 4IUOEdWF2jlO60XBVjtiOd3d8KQ.roa (raw, json)
Hash identifier: jgWeDmk4w4W+v03wCRBTVXqu0FHRD/kdZppEczGYgWg=
Subject key identifier: E0:85:0E:11:D5:85:DA:39:4E:EB:45:C1:56:3B:62:39:DD:DD:F0:A4
Certificate issuer: /CN=289661d289b03a6e2b0551f853a5dc8f1968f6ad
Certificate serial: 0791A5BC
Authority key identifier: 28:96:61:D2:89:B0:3A:6E:2B:05:51:F8:53:A5:DC:8F:19:68:F6:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJZh0omwOm4rBVH4U6Xcjxlo9q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/4IUOEdWF2jlO60XBVjtiOd3d8KQ.roa
Signing time: Sat 01 Jan 2022 13:57:40 +0000
ROA not before: Sat 01 Jan 2022 13:57:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 45.140.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126985660 (0x791a5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=289661d289b03a6e2b0551f853a5dc8f1968f6ad
Validity
Not Before: Jan 1 13:57:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0850e11d585da394eeb45c1563b6239ddddf0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:d0:8e:f3:28:6c:19:c1:a7:ac:53:68:09:
b9:15:a9:f2:09:81:76:bb:60:37:4a:13:78:0a:82:
d3:49:47:ef:4e:44:e6:12:a6:25:52:85:a0:30:f1:
f2:97:45:8c:48:48:bc:80:30:83:3c:e1:84:a7:f1:
b9:d1:b6:19:c2:e3:63:28:07:01:c3:e9:57:7c:18:
77:3f:de:05:09:e2:8c:6d:fa:e2:9f:20:8d:31:4f:
b5:e6:ad:0c:41:5e:ee:e9:f4:31:b1:a7:a4:3a:1f:
55:4e:b1:cf:3a:8e:7e:13:6f:7f:28:95:cb:2b:2b:
ea:ba:c2:ca:59:6f:8d:8a:d9:1e:c3:9f:36:31:ec:
16:c8:8b:6e:af:d8:e9:58:ee:58:be:74:0d:dc:ed:
6a:3f:b8:2f:b0:e8:1a:0b:9c:f6:a0:40:a9:55:5c:
d0:cc:26:6d:58:00:ba:9a:eb:80:de:42:da:a3:30:
79:6b:d9:f2:28:86:15:26:6e:c5:9b:9d:b1:07:43:
24:7f:9c:dd:e9:6d:12:d3:e6:98:05:4c:6d:07:66:
19:7a:e0:76:e4:65:91:f0:ac:d2:db:d2:35:41:bc:
17:25:94:d8:1d:6c:91:dc:49:5e:8d:1e:12:a6:31:
cb:b8:14:14:58:70:c4:c9:d1:fa:5a:42:c4:fb:ff:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:0E:11:D5:85:DA:39:4E:EB:45:C1:56:3B:62:39:DD:DD:F0:A4
X509v3 Authority Key Identifier:
keyid:28:96:61:D2:89:B0:3A:6E:2B:05:51:F8:53:A5:DC:8F:19:68:F6:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJZh0omwOm4rBVH4U6Xcjxlo9q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/4IUOEdWF2jlO60XBVjtiOd3d8KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/KJZh0omwOm4rBVH4U6Xcjxlo9q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.228.0/22
Signature Algorithm: sha256WithRSAEncryption
42:99:0a:b8:69:1e:7e:fa:15:77:1a:46:e2:9c:76:51:c9:80:
b2:32:99:2b:68:54:69:a8:6f:27:24:94:6d:b2:fd:1a:0f:fd:
8f:cf:d2:f0:e8:0f:3c:f0:5b:b4:55:cb:f5:b5:53:48:82:37:
53:7d:c7:e9:06:ea:a2:4f:99:40:a1:4b:c8:e0:f5:37:d4:11:
ec:67:a7:ac:31:a3:aa:c5:cf:bf:ac:23:16:1e:86:ae:ea:61:
42:e5:07:2f:33:c3:ba:05:87:cf:90:f6:52:ad:61:08:7b:b8:
b1:9c:ba:8b:33:e4:ed:c7:a4:ed:e9:70:63:16:09:d0:cb:92:
36:6e:af:dd:9b:c5:32:9f:e9:f0:44:23:00:de:26:9a:07:54:
9e:3e:15:7d:0b:bd:b2:0d:11:89:cf:a4:ec:48:c3:5a:54:57:
ac:cc:0f:18:e6:f3:25:41:a5:bf:46:c0:df:24:e3:2d:b8:ab:
f7:da:81:39:d7:7e:85:ed:f3:49:99:92:17:dc:f5:39:ba:17:
f8:d3:ee:e4:00:f5:41:d6:47:d7:90:c7:7e:fb:a5:ac:8f:33:
9a:57:16:2c:b4:47:25:31:2d:cd:08:68:c9:4b:20:1d:e7:b9:
ca:39:a3:f6:09:8a:af:76:ea:de:42:ec:de:6d:b5:8d:9d:24:
df:0d:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:07 2024 by rpki-client on console-ams.rpki-client.org