Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/tHY2dsgEX9XrSp0yFRWqbui8MZc.roa
File: tHY2dsgEX9XrSp0yFRWqbui8MZc.roa (raw, json)
Hash identifier: LQMv+lCdGkaS5WhQctP23ck+HaxLN0CesKcS9TDl41w=
Subject key identifier: B4:76:36:76:C8:04:5F:D5:EB:4A:9D:32:15:15:AA:6E:E8:BC:31:97
Certificate issuer: /CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Certificate serial: 018CC5007B04F647D2E90665DD45B758CCB2
Authority key identifier: 47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/tHY2dsgEX9XrSp0yFRWqbui8MZc.roa
Signing time: Mon 01 Jan 2024 12:29:52 +0000
ROA not before: Mon 01 Jan 2024 12:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24904
IP address blocks: 45.83.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7b:04:f6:47:d2:e9:06:65:dd:45:b7:58:cc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Validity
Not Before: Jan 1 12:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4763676c8045fd5eb4a9d321515aa6ee8bc3197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:08:e1:c6:1a:f9:62:3d:f1:34:db:be:96:
2a:89:c8:43:04:e2:f5:d7:c6:e0:3c:0a:fb:df:47:
4a:d9:c3:30:e9:2a:88:a5:83:cf:44:c4:a7:86:1f:
c0:92:cf:7a:d3:b6:5e:3f:09:6e:21:bb:72:8e:98:
f4:72:d5:b5:38:79:55:19:fa:3e:7c:3f:c2:c5:e1:
50:40:a5:e8:6d:ea:fe:51:3d:65:14:0f:fd:85:64:
58:72:ae:2f:f7:41:96:d0:f6:b2:42:1e:4b:f2:b4:
a8:bf:76:b0:d8:20:b5:7c:a1:c7:c0:f4:e6:ab:f8:
82:26:25:c8:c0:15:f7:48:ca:c7:1b:56:e4:8d:6d:
17:0e:1f:3c:f5:c9:a8:75:44:31:06:ee:99:20:eb:
90:7f:06:df:6b:1c:d9:68:cc:2d:83:f7:99:e7:d9:
a8:f8:3a:e1:d8:6a:45:02:fb:dc:66:70:d9:9c:7d:
2f:7b:37:cf:44:44:e4:d2:25:41:94:e8:c5:f4:1b:
c0:69:64:2b:25:b6:07:06:89:bf:dc:03:e5:d5:27:
20:7d:c8:4b:92:49:9d:6a:0c:4f:23:6d:b5:ed:65:
fc:07:8f:f8:a4:45:b9:9f:e3:cb:ae:af:3a:7d:d9:
76:c3:e1:4b:51:dd:bd:8e:01:1a:ee:07:67:5a:ef:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:76:36:76:C8:04:5F:D5:EB:4A:9D:32:15:15:AA:6E:E8:BC:31:97
X509v3 Authority Key Identifier:
keyid:47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/tHY2dsgEX9XrSp0yFRWqbui8MZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.228.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:b9:e6:59:72:d2:45:cd:a5:eb:a3:31:35:8c:6c:2a:8a:53:
88:59:e5:2f:df:21:d5:f9:08:e7:01:b8:88:ca:5f:97:e6:0e:
e2:ca:98:b2:51:73:46:fe:45:e3:ef:90:17:bb:d0:79:78:b0:
34:37:80:bb:7d:74:1c:34:34:ed:3a:e9:f3:a3:9d:a7:e1:d1:
23:f1:c6:1c:13:bd:86:5d:e6:d6:33:58:a3:5c:4c:5e:56:71:
ec:b8:3d:c8:a2:32:2f:db:64:9a:2b:66:e2:cc:b5:b1:56:7a:
31:dd:13:fb:d6:ea:2c:01:5b:c4:b3:f8:6e:51:70:34:77:a2:
76:ba:4e:6d:f4:86:92:10:02:4a:d3:d9:e2:01:80:f2:8b:98:
8d:14:b3:26:1d:78:79:93:57:66:4e:6b:dd:44:94:d7:88:ab:
c1:f1:08:95:90:50:94:77:57:e7:20:5d:ba:84:ef:3a:78:e7:
71:5c:9d:3c:07:8b:c9:ef:e1:ac:8a:2e:55:76:bd:37:ff:22:
94:2d:86:9d:84:a3:29:66:dc:a3:e2:00:01:35:4a:08:c9:37:
2f:f2:a7:3d:8d:9b:bf:d2:bb:41:2f:5e:41:de:2e:a2:2e:d7:
eb:76:be:13:1f:9a:0f:12:4c:c5:72:38:5c:6f:f7:a4:e1:35:
48:79:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 17:21:25 2024 by rpki-client on console-ams.rpki-client.org