Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/A05Qxi2t62OC6lc_R11DCSeiz9k.roa
File: A05Qxi2t62OC6lc_R11DCSeiz9k.roa (raw, json)
Hash identifier: 9I2CoEpHeHvUNr7T9pdWP+DK64YfoKmjJR/60QesJkY=
Subject key identifier: 03:4E:50:C6:2D:AD:EB:63:82:EA:57:3F:47:5D:43:09:27:A2:CF:D9
Certificate issuer: /CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
Certificate serial: 2F126D
Authority key identifier: 5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/A05Qxi2t62OC6lc_R11DCSeiz9k.roa
Signing time: Sat 01 Jan 2022 03:55:40 +0000
ROA not before: Sat 01 Jan 2022 03:55:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201986
IP address blocks: 45.153.212.0/23 maxlen: 23
45.153.212.0/22 maxlen: 22
45.153.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084909 (0x2f126d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b016b00711429c6bc31b03833f2f5e14d8d3049
Validity
Not Before: Jan 1 03:55:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=034e50c62dadeb6382ea573f475d430927a2cfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3a:06:b4:71:cb:23:0b:37:ef:2b:d7:16:5e:
26:99:bb:4b:44:3c:99:be:8c:d6:cc:fa:c0:a5:f0:
b2:ab:a6:e0:23:72:f1:89:9a:e5:eb:ea:aa:96:bb:
f1:a1:0d:73:d9:3f:7f:04:1a:84:cf:d1:4d:6d:c8:
36:a5:c3:81:e1:9b:be:18:aa:fe:a9:eb:2f:ee:63:
23:5e:8e:71:72:06:a2:ea:bc:ff:6d:8d:6b:ff:4d:
0c:b0:5c:4c:c7:97:91:2e:26:4d:76:c6:f7:91:7a:
36:8e:e4:82:17:a7:c7:30:17:09:f1:3e:46:e8:41:
ec:2d:2a:d8:01:82:11:cd:65:93:1e:67:b4:d9:e4:
40:f4:48:ff:fc:cd:24:09:ad:8c:02:09:a0:6a:82:
5d:de:8b:7e:6c:0f:53:7c:e6:aa:3d:32:ff:6a:ae:
db:3c:cf:58:6a:17:7d:15:90:7a:0f:de:5f:c9:a9:
9c:2d:e4:6d:2e:64:fc:97:30:8a:2f:93:a9:02:b0:
94:f9:75:b9:6f:4d:70:42:08:32:2c:68:48:4d:bd:
0b:a5:9c:cf:b7:01:a3:67:c8:e2:56:f2:c5:db:5a:
44:0c:54:46:a0:53:43:98:ac:47:63:ed:69:e6:e6:
d5:ae:2e:0d:22:cf:57:fc:68:07:39:27:b1:40:6f:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4E:50:C6:2D:AD:EB:63:82:EA:57:3F:47:5D:43:09:27:A2:CF:D9
X509v3 Authority Key Identifier:
keyid:5B:01:6B:00:71:14:29:C6:BC:31:B0:38:33:F2:F5:E1:4D:8D:30:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwFrAHEUKca8MbA4M_L14U2NMEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/A05Qxi2t62OC6lc_R11DCSeiz9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d0de72-ebc2-4dce-8af8-4ab3350709e9/1/WwFrAHEUKca8MbA4M_L14U2NMEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.212.0/22
Signature Algorithm: sha256WithRSAEncryption
18:52:a3:ec:f3:d7:2b:cf:5e:88:da:d4:2d:0f:c1:4b:88:dc:
29:47:b9:10:62:90:69:e8:28:9a:ad:34:19:b0:1b:eb:91:cf:
ef:32:8d:6c:33:77:ff:7c:d0:0e:f8:01:b4:96:0a:43:54:8f:
ad:d3:40:18:bc:bd:8a:58:9d:e0:3c:19:d1:af:c4:2c:9d:4b:
cf:f7:18:bf:c2:63:d2:17:a6:0c:0a:4e:05:1d:ca:f8:6d:52:
a2:ab:6a:5c:ea:77:bb:d5:f3:89:81:34:05:fa:b6:06:1c:a2:
b3:af:2c:34:cb:a9:18:91:b7:b1:9e:27:7e:1b:b3:d8:26:0b:
8a:7c:cc:98:fd:e1:47:b1:eb:01:a9:d9:d2:50:ca:81:3b:8a:
81:3a:9d:3b:ec:f6:46:28:75:a0:9b:cd:55:b5:6d:c3:1b:4d:
32:c9:37:06:d1:6a:e9:c3:84:75:fe:5b:d3:9c:b7:a2:3e:94:
05:03:ed:2c:5a:c3:58:16:b8:16:e0:58:d8:48:b3:4b:88:e8:
a0:33:33:e1:4f:05:64:66:ef:7f:e4:f3:54:b2:79:fa:25:44:
4d:62:83:b3:fc:a8:16:a4:e0:d3:5f:dc:4c:ea:2e:8c:0d:bb:
e7:32:d7:b0:2c:6f:bf:4d:43:bb:47:79:bb:18:c6:2f:41:4a:
3a:be:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:58 2024 by rpki-client on console-ams.rpki-client.org