Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/D7bdaiJC1d2GkjVq4CeHqO0anA4.roa
File: D7bdaiJC1d2GkjVq4CeHqO0anA4.roa (raw, json)
Hash identifier: LLrLWzgBBJ3niWUnumUCUuWnezPaZrT00EnI6hH4k5g=
Subject key identifier: 0F:B6:DD:6A:22:42:D5:DD:86:92:35:6A:E0:27:87:A8:ED:1A:9C:0E
Certificate issuer: /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial: 0606920D
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/D7bdaiJC1d2GkjVq4CeHqO0anA4.roa
Signing time: Thu 16 Jun 2022 17:19:53 +0000
ROA not before: Thu 16 Jun 2022 17:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 45.154.4.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101093901 (0x606920d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
Validity
Not Before: Jun 16 17:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fb6dd6a2242d5dd8692356ae02787a8ed1a9c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:37:af:8c:49:1f:78:2f:02:45:b5:4d:08:
e9:e4:c7:a7:33:bd:91:84:d2:c0:45:c1:ef:c0:fe:
99:06:14:0c:b3:f5:90:f8:cf:41:f4:98:9b:a9:4d:
5b:04:8b:df:e3:eb:4a:62:49:30:11:86:5e:4d:d1:
32:79:af:f5:3a:3b:e0:f7:4c:e5:59:22:a2:2e:47:
37:0e:8a:bf:7b:6f:22:66:cd:40:dc:27:28:e6:f0:
0d:dc:0f:c5:d5:2b:73:3a:b9:b8:1e:c8:d1:ad:b3:
2f:79:26:c4:f4:5d:a3:6e:97:de:36:c3:27:1a:f5:
a2:eb:59:f4:0e:d3:1a:2a:66:f5:dc:8a:d7:ba:f8:
61:7c:e8:87:60:2e:dd:8a:c3:6e:78:9c:9a:27:fd:
0d:b0:65:bd:09:3c:87:e4:04:b0:84:74:49:72:49:
9e:25:eb:f4:55:6a:81:86:6f:a6:2c:b5:51:89:84:
a1:95:4a:41:48:f3:af:1c:87:83:77:c7:1d:a8:d5:
c0:36:be:b5:ff:06:8d:79:43:4d:94:c3:76:5f:4f:
60:59:f4:72:45:a2:a7:d5:29:ba:73:92:43:1f:10:
64:6e:44:a2:92:51:f4:05:74:69:01:35:56:27:93:
49:99:4e:43:bb:64:93:27:7d:a2:eb:f9:68:89:0e:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B6:DD:6A:22:42:D5:DD:86:92:35:6A:E0:27:87:A8:ED:1A:9C:0E
X509v3 Authority Key Identifier:
keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/D7bdaiJC1d2GkjVq4CeHqO0anA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.4.0/23
Signature Algorithm: sha256WithRSAEncryption
81:e4:8f:5d:0f:03:41:6e:50:76:2a:5e:85:42:97:0a:d4:9d:
bf:f5:c9:9a:c7:7d:b5:18:e6:71:12:09:7e:cf:3b:39:47:be:
ad:b2:e3:19:10:65:53:bf:43:35:ea:f1:a0:43:0d:5e:7a:ff:
e8:72:fe:60:58:3f:78:f1:e2:b6:da:6d:5c:7e:46:74:d9:fe:
93:af:fa:36:61:53:00:bb:41:d2:fd:d2:4c:cc:fe:d6:6c:fc:
04:c1:0e:b7:4a:e1:d3:79:e9:e6:5e:f9:d3:fa:cc:f6:2c:61:
29:65:87:d5:eb:2b:71:b4:be:fb:6c:68:5e:22:0c:88:d2:7d:
02:9c:f8:40:3b:98:10:74:45:e6:d5:e9:2a:d7:af:82:7f:92:
77:c9:0d:67:57:59:a6:44:97:3b:4d:be:8b:14:7c:6f:44:5e:
b9:23:9c:8d:33:dd:9a:17:0c:5b:af:9e:4e:fa:72:57:44:ea:
fe:53:69:07:7a:0c:d7:f7:69:d8:70:ba:27:af:0d:a0:f6:d2:
1c:48:ef:31:38:87:a8:11:ee:15:48:79:2b:8c:79:9a:47:43:
70:85:4d:b2:03:d1:32:c0:cb:92:1a:51:03:0b:c9:7f:33:b9:
df:b6:6c:f5:5c:09:df:58:b2:01:e5:23:29:ed:63:c0:9e:29:
ed:22:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org