Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/29bzbHvWnDslANyYyI8Wt1u4pPM.roa
File: 29bzbHvWnDslANyYyI8Wt1u4pPM.roa (raw, json)
Hash identifier: JJKlaNM8cGpUVIJ2wRuig1EZD8bLEa6oCenwLxsnmgg=
Subject key identifier: DB:D6:F3:6C:7B:D6:9C:3B:25:00:DC:98:C8:8F:16:B7:5B:B8:A4:F3
Certificate issuer: /CN=307e7e276a7df580dfb70731d489ede447e07d06
Certificate serial: 01856F4B615E20D251F277B2DFCA6AD05379
Authority key identifier: 30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/29bzbHvWnDslANyYyI8Wt1u4pPM.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29423
IP address blocks: 45.144.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:61:5e:20:d2:51:f2:77:b2:df:ca:6a:d0:53:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307e7e276a7df580dfb70731d489ede447e07d06
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbd6f36c7bd69c3b2500dc98c88f16b75bb8a4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:eb:06:ae:c7:1f:11:f2:df:73:6c:dc:54:
00:18:2e:70:8e:1d:aa:9b:bb:d4:7b:bf:3b:ed:ac:
ae:ca:6b:43:0d:7a:cb:84:b6:59:7a:b2:22:59:b2:
f0:05:5d:fb:f8:a4:c2:a1:89:d8:a6:a4:43:ff:27:
26:aa:c5:9c:9c:97:4c:56:40:7f:ec:a5:b0:64:28:
a8:cb:53:0d:f7:87:97:bb:6b:6d:f3:20:b2:bf:6a:
7e:cb:e9:79:16:5e:58:c4:07:bb:fa:e5:f7:d2:83:
8d:46:f8:61:8f:f9:e7:59:46:18:3e:f5:c5:7e:61:
4a:22:83:a2:35:fc:f7:9c:46:2b:42:13:d6:16:c7:
05:94:cb:63:1d:9b:6e:40:30:cd:c6:d9:90:65:31:
97:47:20:89:94:c1:38:50:a1:1a:72:88:47:93:a5:
3e:a6:d7:c2:a3:af:51:50:b0:cc:96:c4:91:1e:cf:
6b:ae:de:f0:87:5f:85:29:80:75:16:ea:5d:2c:31:
8e:4f:15:4d:6a:ed:28:c1:06:b5:33:e6:d7:f6:40:
9e:92:49:3e:fc:75:ac:0a:87:26:e2:de:9b:8c:65:
50:87:40:e4:10:2f:2b:8b:02:33:31:c9:14:96:f3:
5e:69:59:37:d4:13:aa:43:19:08:51:33:2f:a5:8b:
a3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D6:F3:6C:7B:D6:9C:3B:25:00:DC:98:C8:8F:16:B7:5B:B8:A4:F3
X509v3 Authority Key Identifier:
keyid:30:7E:7E:27:6A:7D:F5:80:DF:B7:07:31:D4:89:ED:E4:47:E0:7D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH5-J2p99YDftwcx1Int5EfgfQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/29bzbHvWnDslANyYyI8Wt1u4pPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ab056-4bbe-484a-9352-8ac58f273756/1/MH5-J2p99YDftwcx1Int5EfgfQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.132.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:45:a4:66:90:dd:f9:ad:35:af:d8:57:3d:6d:45:59:4e:7f:
e2:c7:9c:c6:cd:69:e9:38:ae:e0:68:cd:b5:c8:1a:5f:49:c1:
3e:73:1d:bc:b1:48:f7:6c:68:48:ed:b7:1e:38:97:25:e3:52:
d6:40:10:51:48:94:b7:91:7c:36:e0:8b:e9:55:46:94:63:b9:
48:da:d6:b5:c8:5f:a3:a8:d7:06:ba:9e:7d:44:5f:ad:e5:f7:
bc:1b:13:af:d5:8d:f3:f1:9a:aa:05:4e:e0:05:07:f8:46:dc:
79:f3:22:1d:90:82:19:b0:0b:dd:6a:5f:d0:01:43:0b:f9:72:
1e:b2:8f:03:68:d1:3c:58:17:4e:18:e0:e1:8c:89:1c:05:86:
53:07:63:41:34:b1:59:3a:c7:49:26:06:c2:6f:38:41:86:6f:
0b:03:9a:42:89:ff:f7:f8:fa:a2:ea:4f:1a:3d:89:35:37:cc:
04:8f:2e:db:42:2c:15:7d:e0:7a:ee:a2:b6:8e:67:81:ba:eb:
9a:50:37:f8:1b:ac:2c:d9:71:d9:17:d5:8a:d6:21:b4:fe:52:
ab:f7:df:1c:a8:3d:c8:57:55:e3:ba:56:7d:7f:c6:0d:1d:f1:
f8:0e:a5:c2:fc:e3:1b:f6:39:44:0e:f9:b8:87:37:f0:28:36:
44:f1:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:01 2024 by rpki-client on console-fra.rpki-client.org