Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/VO_HkSi2Fp_im24p5_AAre8u3ws.roa
File: VO_HkSi2Fp_im24p5_AAre8u3ws.roa (raw, json)
Hash identifier: AL1XtN29bg1mmk5QFMlaoLDETxx/oASzT2mE702jKhc=
Subject key identifier: 54:EF:C7:91:28:B6:16:9F:E2:9B:6E:29:E7:F0:00:AD:EF:2E:DF:0B
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 018843B9B7B3D2B74CF37EA2961CF0AB2A35
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/VO_HkSi2Fp_im24p5_AAre8u3ws.roa
Signing time: Mon 22 May 2023 13:50:24 +0000
ROA not before: Mon 22 May 2023 13:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49478
IP address blocks: 45.8.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:b9:b7:b3:d2:b7:4c:f3:7e:a2:96:1c:f0:ab:2a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: May 22 13:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54efc79128b6169fe29b6e29e7f000adef2edf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:58:5e:7f:1a:be:33:d5:22:a6:bc:2e:20:
3f:1e:99:16:7b:2b:c8:c3:7f:e4:81:97:9e:73:34:
e0:bc:f2:cc:53:c3:72:ee:8e:7a:b1:67:0c:62:a5:
7d:67:22:72:20:ac:98:b4:a4:b3:ed:2e:35:bd:07:
b1:b0:b9:8c:e9:d2:ab:16:8b:0e:39:cf:0c:ce:f4:
1b:85:18:27:26:88:0e:79:1f:f0:d3:7d:02:62:03:
1f:78:06:44:39:bc:66:65:e1:e7:c9:6b:1d:4e:5d:
c2:d2:80:ba:dd:1b:90:1b:dd:0f:7f:07:59:d3:1b:
ee:0b:96:59:dc:c9:74:c1:b9:81:7c:3c:52:ab:53:
c5:5e:86:5a:4a:5d:72:fc:1e:7b:3b:79:21:54:32:
ef:e2:9f:5c:39:fd:32:53:0c:bf:4c:fb:29:fe:bc:
63:80:4f:8c:4f:79:c9:14:cc:8e:c0:15:ea:6a:0d:
6a:5b:f1:b8:d0:ab:60:61:42:22:1c:5f:23:f2:73:
1f:eb:e8:94:df:c4:d9:a1:31:63:c0:2a:77:fc:3b:
f0:15:fd:cb:86:06:b4:7c:7d:1f:47:7d:ae:4c:05:
fc:ca:77:12:63:f9:12:1a:fe:93:90:e8:9d:ba:b4:
22:6e:59:4c:3d:59:82:21:a2:fe:f8:3a:b4:a7:7e:
08:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:C7:91:28:B6:16:9F:E2:9B:6E:29:E7:F0:00:AD:EF:2E:DF:0B
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/VO_HkSi2Fp_im24p5_AAre8u3ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9d:8e:d1:d6:0c:39:55:e2:6e:0a:f0:80:87:95:a5:56:a5:
68:19:d3:f9:d2:d5:9d:5a:98:3e:00:ce:11:a4:94:d9:51:b2:
c3:62:39:62:b1:85:1d:bd:93:57:30:2d:9d:cc:fd:f8:f9:35:
c4:0a:f1:80:66:91:79:fb:5e:44:3f:69:51:19:88:04:90:13:
04:76:5a:34:a0:9f:b2:7d:64:37:fb:76:3d:67:6b:ff:8a:a0:
b1:3b:65:73:04:d6:0f:79:74:80:33:3c:99:8f:70:16:15:a6:
2c:b1:21:16:6f:72:c8:aa:d8:f1:d5:27:e2:c7:fc:13:7e:37:
45:c5:90:8d:e6:25:30:03:8c:9d:49:c8:6c:79:fd:d4:7e:2b:
e6:ee:b5:fb:30:80:db:53:98:01:fa:ac:77:7d:03:7c:d7:20:
77:3f:bd:73:94:2e:3e:fd:7b:3c:9e:0f:b7:f1:24:1b:34:8f:
fc:f1:01:a4:69:a1:5a:70:98:21:e8:ed:a7:5f:89:25:ea:f5:
d4:ff:23:ee:78:69:3d:29:68:9e:a0:80:87:82:1a:e8:b8:a9:
81:3b:42:c3:e2:db:21:6c:53:cf:9d:fe:78:81:21:2c:0d:39:
2d:8a:b7:87:dd:f2:fe:6c:ea:63:fe:41:f2:61:c6:a8:a1:2d:
b8:3b:76:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org