Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/xd31VuQ7b0B7uPrFn8BaoA13vug.roa
File: xd31VuQ7b0B7uPrFn8BaoA13vug.roa (raw, json)
Hash identifier: 0EOiHLqZFK1DoGgjo/Fr/Fjv38fbYpinZTDT+qU+0Ms=
Subject key identifier: C5:DD:F5:56:E4:3B:6F:40:7B:B8:FA:C5:9F:C0:5A:A0:0D:77:BE:E8
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 018964895A4F47A6EE7FB3E104B6C37A3747
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/xd31VuQ7b0B7uPrFn8BaoA13vug.roa
Signing time: Mon 17 Jul 2023 15:47:50 +0000
ROA not before: Mon 17 Jul 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 45.15.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:89:5a:4f:47:a6:ee:7f:b3:e1:04:b6:c3:7a:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jul 17 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5ddf556e43b6f407bb8fac59fc05aa00d77bee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:10:9d:c5:49:cb:d2:87:08:e3:92:5e:12:
23:e1:19:d7:22:40:8c:d9:1d:a9:79:16:d0:2c:24:
70:36:13:2f:4a:0f:d5:78:89:63:77:6c:ac:42:42:
67:df:c3:64:89:f6:ca:4d:c7:bd:d0:0b:07:84:3b:
19:00:74:f3:8a:85:4c:1d:c1:42:41:36:17:21:88:
d0:40:92:b6:4c:40:8c:25:10:a0:29:22:53:34:a1:
f1:8d:86:73:51:23:09:5a:4f:f1:f7:01:b2:dc:2d:
27:e0:6c:6d:75:a9:18:42:6c:76:0a:e4:cc:c3:9a:
04:49:1e:c4:76:d0:72:b6:31:41:e5:3b:88:52:ed:
28:88:b9:c8:57:8b:0a:d2:35:b3:d9:c6:a1:3c:09:
dd:55:de:4a:0c:3a:e1:f4:e4:f4:4a:77:60:75:50:
72:35:3e:da:c0:ec:ec:db:f2:96:4a:ff:02:6e:6e:
6a:2a:45:cf:5e:8b:e8:90:c5:09:b5:f4:c2:0e:65:
4c:60:ff:53:62:b4:d0:89:c3:c9:40:99:9d:3f:55:
7b:e6:13:fe:51:62:93:dc:dd:8d:7f:65:4a:bb:bf:
59:92:6d:c5:35:00:75:8e:36:bc:e4:75:7e:7a:68:
e1:d0:74:aa:89:bc:06:c1:17:18:79:0c:b4:b3:35:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:F5:56:E4:3B:6F:40:7B:B8:FA:C5:9F:C0:5A:A0:0D:77:BE:E8
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/xd31VuQ7b0B7uPrFn8BaoA13vug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:96:5e:4d:99:b0:28:70:52:8e:c3:83:4a:78:25:7b:09:3c:
a6:d0:28:45:3a:47:42:43:25:6b:9a:84:19:82:21:91:27:38:
64:fc:50:77:c6:e3:c0:e4:0f:cc:f6:1b:9a:74:66:3b:b1:be:
07:d0:a9:3a:f3:59:ef:e7:ba:12:a2:15:92:ea:7e:9b:45:e1:
2b:93:26:07:f7:36:0a:a6:8c:3b:85:33:ed:cd:3a:91:1c:5c:
91:c8:3f:23:a7:8e:22:70:1f:73:e4:5d:99:be:82:e3:24:75:
51:04:67:8d:23:27:77:c4:77:14:65:ad:e5:ee:88:e4:d8:ff:
51:3d:ea:cc:f5:51:d3:72:c9:f0:ca:d0:be:a0:83:96:70:87:
4f:39:99:69:77:cf:4f:44:24:6a:a6:35:c5:35:f6:6c:69:b3:
b9:c4:9a:ee:8f:03:81:90:93:82:f7:2e:88:0e:20:7c:cd:bb:
ba:43:8a:95:de:81:d9:cb:80:73:6b:a6:a0:dc:20:88:1c:2e:
fe:48:38:49:9f:9b:e6:4b:43:65:10:f0:d5:be:e2:ba:23:a7:
80:28:f7:5a:1a:41:e7:2e:77:eb:6b:c1:56:b5:07:23:6a:ce:
1e:ca:af:3e:2f:a2:c0:6b:7a:5a:f8:47:3b:0f:0f:47:ce:df:
3e:12:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:59 2024 by rpki-client on console-fra.rpki-client.org