Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/zwJQCJoyP0laFSEJioqDCboV8b4.roa
File: zwJQCJoyP0laFSEJioqDCboV8b4.roa (raw, json)
Hash identifier: ovJaqVLX3bP9BlTwKoZKX6V7hL6O0wtfruRDf4xMOFE=
Subject key identifier: CF:02:50:08:9A:32:3F:49:5A:15:21:09:8A:8A:83:09:BA:15:F1:BE
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 0168AD9F
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/zwJQCJoyP0laFSEJioqDCboV8b4.roa
Signing time: Sat 01 Jan 2022 12:56:19 +0000
ROA not before: Sat 01 Jan 2022 12:56:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 45.148.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23637407 (0x168ad9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jan 1 12:56:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0250089a323f495a1521098a8a8309ba15f1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:47:a0:57:dd:29:a0:e5:d8:57:f9:d9:85:
ab:87:ea:a1:d6:1c:2a:03:09:a8:4e:f4:5d:87:77:
40:31:af:1c:eb:94:3e:45:56:0c:9c:5c:4d:e4:c8:
25:af:5b:fa:f1:19:89:69:38:73:57:15:6d:45:c9:
14:29:9e:7c:b2:e3:cb:de:7a:f4:75:1e:84:ab:cf:
19:9d:08:66:45:65:28:9c:ec:ce:76:be:4d:9d:1e:
cb:33:48:dc:18:7f:ec:e4:41:0c:9b:2c:d1:ad:d5:
9b:be:10:aa:02:c9:60:d0:e3:8a:75:a1:b2:51:20:
a7:bb:fa:20:dc:8a:1f:3e:89:99:58:42:5f:e9:11:
4b:2a:fb:ee:18:66:67:db:96:2d:15:ab:f2:2e:82:
33:f7:ad:8b:68:e7:52:e5:8c:1e:db:da:89:4d:76:
6f:38:ab:bd:aa:86:dd:34:e3:07:73:c6:9b:4c:c8:
dd:eb:7a:a1:9b:41:79:2f:3d:90:1d:9e:16:ed:9e:
2c:8b:a1:05:c7:e7:16:fe:28:8e:bf:7c:f0:1b:15:
e5:77:c9:5c:dc:7a:5e:77:b5:11:b6:6c:f9:93:c4:
7f:91:53:14:07:8d:53:93:6b:06:99:61:1e:5a:1a:
49:4a:b5:39:8d:10:da:cd:1b:d0:f2:56:ac:12:9c:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:50:08:9A:32:3F:49:5A:15:21:09:8A:8A:83:09:BA:15:F1:BE
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/zwJQCJoyP0laFSEJioqDCboV8b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.167.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7f:a6:f8:11:91:ef:15:2b:8b:11:66:e3:5e:fc:d5:ee:a2:
7e:33:dd:d3:b9:10:ca:7c:9b:09:6f:f9:78:54:28:02:65:3f:
0e:9a:af:01:96:41:6d:44:98:5c:d4:ea:17:f0:bc:e9:58:11:
43:8f:cb:5d:91:fd:82:4d:ae:15:b9:59:f1:a4:c5:59:da:c6:
40:19:75:61:0e:85:ac:27:10:c4:de:88:85:bc:99:d7:4b:cd:
72:9b:55:38:04:f4:f9:16:98:96:ca:82:18:0a:a5:f7:ef:21:
c7:f6:c4:06:b0:19:2a:13:c8:c0:03:10:2b:fd:d6:c3:a4:e8:
6d:90:51:69:7e:89:ec:3c:ee:28:0a:1f:5f:70:a8:4c:cf:fd:
6c:07:60:a9:7e:82:6e:77:58:39:af:76:23:d5:b6:38:09:5e:
e6:48:01:d1:ee:28:e6:6e:6f:41:0a:98:8b:85:48:bd:d9:ce:
ca:f9:13:8f:ff:0c:75:00:12:93:42:c8:0d:3f:a7:4c:03:bf:
85:bf:10:f4:44:9b:8e:ef:ab:e4:88:5a:38:5f:09:20:32:f7:
43:7f:a0:42:64:d2:1a:ab:5a:87:ec:36:d6:27:f8:65:79:0c:
5e:33:ea:ee:75:ac:cc:98:da:4a:2d:ea:f1:5d:50:e5:87:fc:
ea:c5:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org