Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/a9wwIh01bpEwEhAN70-rqknj22c.roa
File: a9wwIh01bpEwEhAN70-rqknj22c.roa (raw, json)
Hash identifier: OakZGEb+c8gk5hTUgh0RFkhLllJF92ozO8L4ZUQkw0E=
Subject key identifier: 6B:DC:30:22:1D:35:6E:91:30:12:10:0D:EF:4F:AB:AA:49:E3:DB:67
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03848491
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/a9wwIh01bpEwEhAN70-rqknj22c.roa
Signing time: Wed 09 Feb 2022 12:20:19 +0000
ROA not before: Wed 09 Feb 2022 12:20:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26636
IP address blocks: 45.153.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59016337 (0x3848491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 9 12:20:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6bdc30221d356e913012100def4fabaa49e3db67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:e2:b0:34:95:99:bd:15:80:cb:b9:28:db:
ee:96:4c:82:68:a4:a0:12:3b:73:75:77:5e:9e:89:
d1:76:0d:38:8b:f4:d4:40:41:45:8a:30:99:72:d6:
17:bb:10:2b:22:54:9b:38:b3:b1:1a:ba:9c:fe:58:
05:a8:90:b4:0f:ab:6c:57:03:f1:f3:b8:73:1c:1f:
a4:70:76:d7:1f:82:b5:c4:df:2e:42:8e:d7:86:ca:
9a:cf:b1:30:7b:c5:52:0c:e6:84:f7:04:fd:d3:fe:
fb:b9:d2:46:88:7c:7e:fb:8f:7d:fc:d0:e7:34:92:
fd:ee:9f:6c:45:9b:1b:cd:53:d5:b2:9a:47:dd:08:
c5:62:01:06:dc:2d:cf:d3:e6:9e:5f:a2:df:62:33:
45:80:83:0c:e1:ef:6a:93:97:eb:b1:36:59:49:dd:
d0:52:51:24:5c:cf:e6:2b:5d:e1:f3:f2:26:fa:4b:
69:09:f2:11:0a:f2:9c:96:6e:99:40:1e:76:a2:ae:
d1:bc:65:6b:2b:e9:11:e7:44:38:f9:77:c4:a3:6e:
45:6e:c2:c0:25:ce:4f:b5:7b:53:f7:f1:28:9f:ad:
05:30:09:2d:15:ca:88:27:f7:98:a0:79:1c:6d:be:
8e:2a:28:13:dd:c6:0b:1c:1b:98:93:d6:35:ef:f4:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DC:30:22:1D:35:6E:91:30:12:10:0D:EF:4F:AB:AA:49:E3:DB:67
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/a9wwIh01bpEwEhAN70-rqknj22c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.4.0/24
Signature Algorithm: sha256WithRSAEncryption
92:44:7d:80:ed:14:17:b1:88:1d:ac:b9:c8:69:2b:86:08:13:
97:93:f0:0f:10:f8:b8:bf:e6:58:2e:78:69:04:e1:48:d9:ad:
9b:ec:7e:88:e3:18:8e:7f:37:36:13:d3:57:bf:24:e5:9c:51:
a7:c0:0c:55:13:79:4a:6e:03:c5:62:1b:bf:8b:9f:c6:f6:b5:
96:d2:f7:ca:d8:5b:26:62:d0:8e:bb:b1:34:a5:3b:32:c6:69:
4a:83:a8:2f:40:03:3e:8e:d0:ff:28:3b:c6:c2:f2:5e:da:43:
5d:31:59:b1:25:ba:5c:a8:fe:06:c1:bf:42:5b:e0:e4:2f:4b:
0a:21:dd:59:6c:f4:ca:a6:61:0d:61:75:79:34:0f:67:1a:4c:
c4:3c:27:cd:d2:6d:c1:34:6b:53:07:5f:66:21:32:f6:8d:86:
d8:94:54:6f:68:35:02:15:a5:82:f9:19:f4:18:1d:cc:7e:80:
4e:f2:90:83:fc:8b:7a:03:7a:35:07:38:45:93:c4:07:83:93:
72:26:b9:f6:8f:c9:a6:88:f2:93:5f:b2:9a:7a:2f:fb:c6:ac:
16:60:81:4a:f0:4e:72:93:17:12:5d:b4:0b:7e:6b:7f:40:2c:
b5:aa:9c:c4:61:b8:e6:67:63:9b:17:b2:80:e3:2c:ac:40:46:
56:c5:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org