Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa
File: zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa (raw, json)
Hash identifier: 0GeEZRYgWcFWEG9CouqM7jiI78Z2UShWHILb4xg6De8=
Subject key identifier: CD:87:BA:80:50:FE:4E:06:F8:28:B8:0F:67:02:D2:26:E7:B8:3B:99
Certificate issuer: /CN=0929ba203ac63fa2971e41070f7842c3761529c4
Certificate serial: 049B1B33
Authority key identifier: 09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa
Signing time: Sat 01 Jan 2022 07:57:35 +0000
ROA not before: Sat 01 Jan 2022 07:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.154.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77273907 (0x49b1b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0929ba203ac63fa2971e41070f7842c3761529c4
Validity
Not Before: Jan 1 07:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd87ba8050fe4e06f828b80f6702d226e7b83b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7b:52:23:42:92:a9:b5:81:ba:6d:28:3b:43:
ee:ce:1d:6a:42:10:6a:8a:0a:90:92:97:e9:1e:39:
4d:cb:ff:2a:35:41:1a:ef:a5:25:4e:6c:81:d3:8a:
56:0c:60:16:45:b4:be:46:70:0c:5e:d1:1d:0a:15:
d6:c6:01:e5:d0:de:62:02:f3:5c:3c:b5:39:de:bf:
f5:df:3d:c6:c0:8a:f8:d3:30:cc:42:80:0a:ee:24:
83:2e:8a:9d:f6:63:79:fc:30:06:de:b8:74:06:db:
1c:f1:be:9d:b5:c9:2c:05:04:d5:2f:11:a3:94:3f:
99:93:10:56:ce:36:6b:88:f8:50:81:56:c2:ef:ef:
6c:c9:23:c0:d5:49:63:90:6c:d9:b7:59:8e:01:95:
2d:23:2f:87:6e:3e:6d:36:65:87:17:0d:b7:24:db:
4f:bc:4b:92:d4:06:de:a0:45:09:2e:98:aa:24:9d:
8c:fd:f1:db:15:ba:6f:d5:24:41:22:63:26:61:44:
b9:a8:c8:f0:f8:a8:2b:85:71:79:ee:83:3b:5a:58:
2c:12:f6:b0:b6:39:46:20:ad:48:ab:64:44:27:a7:
25:41:3d:95:97:7f:58:31:f8:09:31:a0:81:ff:62:
19:62:91:4f:cb:78:3d:54:9f:b2:75:48:76:8f:f8:
c3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:87:BA:80:50:FE:4E:06:F8:28:B8:0F:67:02:D2:26:E7:B8:3B:99
X509v3 Authority Key Identifier:
keyid:09:29:BA:20:3A:C6:3F:A2:97:1E:41:07:0F:78:42:C3:76:15:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/zYe6gFD-Tgb4KLgPZwLSJue4O5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a87249-f7a2-47c0-affd-a08e1b47277b/1/CSm6IDrGP6KXHkEHD3hCw3YVKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.4.0/22
Signature Algorithm: sha256WithRSAEncryption
21:b1:fd:8d:d2:5c:86:d4:00:b1:7e:da:7d:38:51:28:a3:59:
53:d6:33:3b:b7:1f:12:76:7e:c1:e9:65:47:5c:62:51:ec:db:
fe:2c:c0:21:d6:21:34:56:89:c4:db:67:49:28:f8:51:7d:e0:
a7:8e:41:c3:aa:d0:e4:ae:d9:09:fa:ff:05:78:4f:68:1a:2f:
b3:eb:48:bc:15:16:a0:c1:65:56:96:27:a5:17:9a:54:ea:d7:
e4:dd:0a:dd:f7:6d:19:4c:d0:d8:dc:e3:b7:bf:bd:82:8f:c3:
4b:b7:81:dc:2f:5d:08:2d:27:e2:f3:64:c0:fe:de:e5:ee:66:
b5:f7:56:ba:48:15:90:9e:5c:2e:cd:a2:3b:c9:88:bf:f8:23:
38:0d:3c:b1:3f:98:5f:45:c2:ff:f1:39:b8:4a:82:86:fb:e8:
da:89:a7:d8:01:ed:da:d7:99:76:22:06:66:38:d0:08:79:e1:
ee:fa:66:12:fa:16:c3:57:3b:d9:8f:0b:15:54:94:35:71:0a:
1e:0f:fa:97:91:d1:e7:0e:c4:49:ad:56:b8:aa:37:b1:86:7d:
04:98:f3:d8:0d:c7:c9:85:66:3b:e8:21:77:d1:92:ed:05:eb:
a2:43:ff:32:9e:8e:19:6f:d2:9d:3a:df:58:2b:ac:69:37:db:
ed:72:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:10 2024 by rpki-client on console-ams.rpki-client.org