Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/IgUz68rtn2DUFUbgoIWrQBd3F3E.roa
File: IgUz68rtn2DUFUbgoIWrQBd3F3E.roa (raw, json)
Hash identifier: 87WoSUINxVrkTU5nlTPRWT4KWUi+1oLTFr6rmztLqYQ=
Subject key identifier: 22:05:33:EB:CA:ED:9F:60:D4:15:46:E0:A0:85:AB:40:17:77:17:71
Certificate issuer: /CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Certificate serial: 019CC43C
Authority key identifier: 33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/IgUz68rtn2DUFUbgoIWrQBd3F3E.roa
Signing time: Sat 01 Jan 2022 02:55:07 +0000
ROA not before: Sat 01 Jan 2022 02:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.15.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27051068 (0x19cc43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33918ec7f02cacafe26546be1e1980f9c3a3e890
Validity
Not Before: Jan 1 02:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=220533ebcaed9f60d41546e0a085ab4017771771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:54:b6:49:de:ad:72:7c:32:65:9c:c3:dc:
7a:0e:14:4e:ed:17:c3:94:c3:42:ed:e6:23:94:5d:
b3:e5:91:bf:20:a2:52:63:74:d1:4b:d7:69:c2:10:
8b:58:03:11:c9:91:8c:57:8b:6b:53:c3:20:c7:e9:
98:b6:5e:ea:21:5d:82:33:64:8f:32:d6:0c:93:3e:
6c:10:88:3b:a6:99:4d:08:a3:76:4d:33:69:f7:33:
a9:a2:ae:ca:43:64:b4:d8:d6:53:7c:d8:18:aa:12:
1f:5d:f7:c1:a6:1b:f3:0d:7c:56:8c:a3:10:d1:38:
99:96:e5:bb:e7:2d:c5:f4:be:b6:ea:04:34:49:30:
6b:62:e2:e8:bd:3b:8a:1b:12:fe:3e:20:74:db:fd:
a6:05:0c:12:18:d0:f6:97:8b:43:79:4d:62:1d:bf:
cb:b3:0d:09:64:32:26:4a:eb:8a:f5:d5:7d:fc:aa:
83:8c:5f:12:9c:22:c3:87:eb:7f:ed:e1:77:6c:e7:
33:2a:0d:46:0f:94:4b:05:b7:8b:c1:fd:fc:af:84:
b8:ed:0c:88:6e:a6:ec:5b:75:98:b8:18:2d:6c:e1:
4b:11:1b:a6:5b:14:1d:d3:30:31:5b:59:d3:e4:c1:
a8:7c:1a:8b:4c:7a:1c:29:69:be:d8:2d:0e:56:b4:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:33:EB:CA:ED:9F:60:D4:15:46:E0:A0:85:AB:40:17:77:17:71
X509v3 Authority Key Identifier:
keyid:33:91:8E:C7:F0:2C:AC:AF:E2:65:46:BE:1E:19:80:F9:C3:A3:E8:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5GOx_AsrK_iZUa-HhmA-cOj6JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/IgUz68rtn2DUFUbgoIWrQBd3F3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d31e85-2786-4d91-a69a-3f5355092aec/1/M5GOx_AsrK_iZUa-HhmA-cOj6JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.42.0/24
Signature Algorithm: sha256WithRSAEncryption
41:38:4e:e1:21:69:f6:06:1f:18:7e:10:39:95:dd:72:7c:d3:
c7:30:96:44:23:c5:11:c9:5e:68:ef:78:0c:ef:c4:b0:a9:51:
40:3f:6c:44:93:a9:64:f7:c8:91:eb:5f:fd:12:0c:1c:41:fc:
70:d6:9c:83:fb:34:09:9e:53:b7:f0:55:45:c9:f1:7c:e3:13:
27:ae:90:5b:37:5a:7d:6f:29:5a:d1:0c:b5:ef:c6:2f:c5:21:
e2:6b:36:99:6b:c7:ce:2b:c7:2f:e6:29:38:14:7a:6f:1c:ab:
e3:7c:4b:45:82:e5:07:95:0b:f1:87:8c:e1:49:14:94:a6:d5:
ee:12:72:81:40:78:64:e1:0a:39:9a:ce:2d:c0:2b:38:e6:b3:
80:63:6f:2e:81:c8:98:66:1c:e5:57:a7:eb:cc:70:f0:f7:b5:
22:5a:ee:6d:2c:5c:51:de:3b:c3:65:80:e7:f7:d1:d0:c2:58:
b5:61:69:9c:b7:c8:f5:87:b9:9f:0b:91:81:c6:7a:3e:9e:d5:
46:e6:1e:27:10:6d:8e:da:98:cf:c2:9f:ce:bc:a0:7b:5e:f8:
6d:7f:dc:9d:63:54:7d:2e:78:03:a4:81:2a:e8:3c:91:8d:73:
11:5a:9c:2e:d5:5d:7a:07:84:54:0c:95:0c:9a:48:dc:dc:e6:
78:a5:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:38 2024 by rpki-client on console-ams.rpki-client.org