Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/clhlgmsASbN2FKdJqzBg_rSR1I4.roa
File: clhlgmsASbN2FKdJqzBg_rSR1I4.roa (raw, json)
Hash identifier: 8hm26iYGG/d726fWdRKlJnaa3+NmfwoxycgX+SyQrF0=
Subject key identifier: 72:58:65:82:6B:00:49:B3:76:14:A7:49:AB:30:60:FE:B4:91:D4:8E
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 01AF8A32
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/clhlgmsASbN2FKdJqzBg_rSR1I4.roa
Signing time: Mon 13 Jun 2022 02:23:02 +0000
ROA not before: Mon 13 Jun 2022 02:23:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136038
IP address blocks: 45.142.152.0/24 maxlen: 24
45.142.153.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28281394 (0x1af8a32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Jun 13 02:23:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=725865826b0049b37614a749ab3060feb491d48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:c1:37:ad:9b:74:32:7f:9f:5b:04:01:d5:
45:25:42:95:f6:7d:91:f6:59:75:bf:e4:af:c9:1a:
48:9f:70:cd:05:a4:54:3e:57:0b:1a:62:d3:68:15:
a8:9a:e0:3b:7a:c8:bd:ea:9c:2d:36:c0:98:06:c3:
cf:9e:e0:36:ad:e8:12:93:d2:df:91:f1:c8:94:68:
d5:35:a0:a5:11:a3:29:fa:80:f5:2a:6f:eb:33:95:
db:06:f2:7f:46:c5:73:f4:d9:08:b1:f4:f4:15:48:
b4:cf:84:3a:89:43:37:8f:04:e6:b1:5d:54:ff:cd:
f7:59:2e:ba:1c:ee:04:8a:64:66:66:ea:54:a9:16:
97:a9:31:49:55:d5:b4:59:c3:9e:82:4a:ab:bf:c0:
b6:d4:c8:7a:a3:11:70:17:05:20:94:e2:18:bc:94:
d9:24:ed:c4:a0:65:5d:ab:11:d2:24:aa:58:7f:25:
a6:96:db:3d:cb:3a:c5:de:04:6f:08:8e:06:14:ee:
07:6c:2a:f7:2d:14:40:e6:59:8b:d9:0e:8b:78:44:
cc:63:6b:16:69:a5:7b:93:d3:52:90:37:76:9d:6b:
5b:3a:ad:ea:6c:1e:ad:fa:c6:81:45:df:ba:7e:40:
3e:79:a6:4e:a1:d2:d9:80:55:f4:03:1b:9d:4d:e7:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:58:65:82:6B:00:49:B3:76:14:A7:49:AB:30:60:FE:B4:91:D4:8E
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/clhlgmsASbN2FKdJqzBg_rSR1I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.152.0/23
45.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
36:9e:a3:05:44:41:50:f5:2a:e7:7e:33:e4:66:19:e6:0a:1b:
a3:57:5a:b7:6e:f2:8f:56:d9:4f:5f:38:5b:bd:8a:b4:49:18:
ae:14:31:7f:25:04:38:56:97:e6:64:fc:94:4e:42:4e:aa:6e:
b1:a5:b7:fb:17:7a:24:45:17:54:b7:9a:81:fe:01:7f:64:00:
50:af:80:67:5a:ee:4c:6e:22:bd:d9:b5:04:13:fc:8c:34:6b:
b1:53:d8:f0:a8:ff:09:cd:d3:28:e7:85:7d:a0:ab:93:cc:dc:
2e:24:fd:86:0d:07:6e:27:23:49:e9:20:5a:9a:d4:88:93:23:
4f:2a:37:6d:e1:b8:b0:56:25:8c:5d:42:da:a0:1e:36:68:b1:
84:fe:f9:e5:72:92:5b:df:b6:4a:e1:3d:86:ea:15:76:0a:4d:
c3:a2:80:1a:fe:4a:7c:42:99:b4:6a:81:4e:a5:ea:9f:3c:d1:
d8:72:02:05:37:87:1c:a1:34:9b:0e:07:f8:4e:d7:12:4c:aa:
30:21:f9:d2:05:cb:0f:32:b0:01:24:04:bf:b2:9e:7f:ab:d8:
60:1a:05:be:44:80:83:67:0f:9d:15:ab:93:b9:10:81:7b:e3:
8e:a5:cd:17:00:e8:43:7f:2e:d6:21:b3:1e:b6:8a:8d:ce:b0:
2f:57:0c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:51 2024 by rpki-client on console-ams.rpki-client.org