Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/bL06i8iGahWydw3qJytDHfBnk-A.roa
File: bL06i8iGahWydw3qJytDHfBnk-A.roa (raw, json)
Hash identifier: 70xmLZ0HdnyPJa/xRAzQv8OD6HDf/6HlA83Q/2ORX8g=
Subject key identifier: 6C:BD:3A:8B:C8:86:6A:15:B2:77:0D:EA:27:2B:43:1D:F0:67:93:E0
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01896498F1B405A3DF604B1DB172F93B72AC
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/bL06i8iGahWydw3qJytDHfBnk-A.roa
Signing time: Mon 17 Jul 2023 16:04:52 +0000
ROA not before: Mon 17 Jul 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.93.80.0/24 maxlen: 24
45.15.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:98:f1:b4:05:a3:df:60:4b:1d:b1:72:f9:3b:72:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jul 17 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cbd3a8bc8866a15b2770dea272b431df06793e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:8c:a8:c0:57:67:08:a8:0f:46:9e:ff:0f:
c2:99:90:7b:fc:ff:cb:d9:3a:a1:19:01:0c:c5:f7:
99:78:bb:c2:88:5c:ef:63:2a:a4:2b:d9:96:79:ee:
16:f8:1c:75:a6:86:9d:16:17:7c:80:af:23:06:7f:
a5:f2:9e:1f:4f:a3:b1:1e:81:f4:13:68:ee:4a:cf:
44:4d:ef:9b:cf:18:b0:a3:9d:c8:53:12:6e:6d:e8:
e7:d1:98:45:6e:03:8b:4f:d6:3a:30:33:06:70:da:
34:f8:65:a7:6d:ae:c3:89:d1:91:6e:9c:6b:ea:5a:
f8:5a:c0:46:dd:e4:37:e7:bd:9c:a9:4d:e7:31:c3:
89:05:9c:e4:fa:1c:26:53:64:0c:d5:0c:52:58:db:
93:56:e2:f0:f3:75:7c:d8:13:ee:a5:4c:0d:29:44:
ce:0f:2e:0f:e7:94:ed:a8:80:30:d3:ba:d7:24:13:
d1:5c:61:17:0c:eb:99:4b:48:8b:13:16:13:ad:23:
da:52:16:f6:81:f7:00:06:a6:85:a6:76:c0:95:70:
b8:ca:1e:86:86:91:4f:2f:aa:a5:2c:38:f6:e1:33:
cb:0a:b4:70:a8:84:94:78:1f:76:90:ec:e8:f4:a1:
f9:a3:d2:a4:bc:25:ab:32:d4:8f:24:4f:cc:97:39:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:3A:8B:C8:86:6A:15:B2:77:0D:EA:27:2B:43:1D:F0:67:93:E0
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/bL06i8iGahWydw3qJytDHfBnk-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.238.0/24
45.93.80.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0a:7a:5b:e4:08:3c:6d:dc:2d:bc:58:41:c7:ab:5f:a8:3e:
a5:56:bf:4a:1d:42:2f:04:64:c3:c1:63:9c:be:ac:ff:b6:5c:
e1:c0:f5:3a:77:17:a2:17:b2:ce:d4:78:57:ee:d2:2f:b4:24:
84:8e:d5:90:2e:a3:fe:21:54:f1:9b:76:c3:e4:6e:64:9c:33:
f3:a8:91:d6:b8:ab:89:0c:60:85:93:6a:07:e7:66:70:2e:37:
8e:1a:62:bd:db:31:18:9b:d4:1f:5c:38:7c:31:85:1b:c7:ff:
de:f2:94:0c:4a:05:fa:90:27:1f:31:cb:1e:21:b8:bc:86:dd:
b5:00:33:d0:43:90:34:be:7b:4b:57:2d:34:55:70:41:8c:a9:
43:8b:5a:af:66:61:1a:13:0c:40:0e:ca:7b:ee:a4:ae:79:62:
47:40:36:6c:ed:bf:ef:04:39:be:34:c5:af:91:8f:74:ca:24:
62:be:72:2c:07:66:9b:80:99:79:65:5d:4c:e8:e4:67:1b:4c:
c6:8c:41:3a:01:a2:f5:fc:e2:fa:a4:41:a3:26:e4:d7:bd:aa:
a9:da:30:49:9a:b9:36:73:5f:39:df:40:95:81:97:63:da:c9:
c3:f1:24:c9:d6:33:6e:ad:5d:2f:79:1e:9b:da:c9:6c:b1:06:
3e:51:3d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org