Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/03X_RCcWb2QESILK9u3LVqrTJFw.roa
File: 03X_RCcWb2QESILK9u3LVqrTJFw.roa (raw, json)
Hash identifier: AcKyecs9NyR2FJTuzOu6F0czbTyfhPy40SObAeZutis=
Subject key identifier: D3:75:FF:44:27:16:6F:64:04:48:82:CA:F6:ED:CB:56:AA:D3:24:5C
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018AA399F3613C40CA321BAE65488A5BA346
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/03X_RCcWb2QESILK9u3LVqrTJFw.roa
Signing time: Sun 17 Sep 2023 14:44:50 +0000
ROA not before: Sun 17 Sep 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151609
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a3:99:f3:61:3c:40:ca:32:1b:ae:65:48:8a:5b:a3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Sep 17 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d375ff4427166f64044882caf6edcb56aad3245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:27:68:75:d9:05:31:fc:ed:84:ee:35:35:
40:ba:a3:31:99:02:2f:60:ca:80:91:e5:fb:2b:57:
24:6a:2c:42:9f:97:f5:92:02:aa:6b:a5:f9:54:df:
c9:1f:2a:4e:97:a6:2e:dc:4a:0c:8b:10:5c:a3:0b:
47:cf:fb:85:6a:01:61:7e:08:4c:e7:0f:7e:92:62:
c8:10:3c:4a:41:17:97:de:81:14:c2:54:11:cf:ff:
c1:a1:66:9d:99:2b:ba:38:46:22:45:f2:6d:9a:d1:
5e:ac:0b:23:1a:62:90:b8:98:70:21:15:ec:2f:3f:
e3:85:a7:47:4c:04:f1:1b:f9:9e:25:cc:96:02:e0:
29:91:96:24:7d:dc:af:7e:91:b3:ba:92:dd:6f:dc:
1e:9b:07:54:06:93:5f:2e:01:fe:98:fa:e9:9a:f9:
23:52:e5:53:c4:b0:cd:3d:ba:18:65:89:3d:29:12:
d1:16:48:3f:5a:07:c8:cd:e2:c2:41:f5:70:a8:22:
96:1b:01:82:82:34:57:75:76:d4:7e:e2:a1:28:be:
b3:5d:23:c6:bf:46:a8:42:65:14:f3:67:1c:1f:67:
90:53:35:69:bd:a9:49:af:f2:a4:4b:39:52:d6:b3:
7b:5b:53:8c:95:01:99:a9:7e:94:14:35:68:63:87:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:75:FF:44:27:16:6F:64:04:48:82:CA:F6:ED:CB:56:AA:D3:24:5C
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/03X_RCcWb2QESILK9u3LVqrTJFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/24
45.149.18.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:04:ad:2f:98:c8:e3:9b:76:3c:84:65:e4:75:d6:66:f7:93:
56:61:cd:b5:50:d3:ef:99:f7:0b:c8:b4:b5:18:e3:fe:13:7f:
ac:2d:0c:d2:d7:d5:48:d7:ec:88:69:62:4a:23:e4:84:33:bc:
fe:60:fa:85:72:10:0f:8b:f9:bc:2e:c2:1d:7f:e3:69:34:7c:
67:d9:bd:96:eb:e8:78:30:38:cb:a8:1a:cb:44:e4:63:b7:e3:
39:0a:ab:ef:cb:65:2c:9b:b5:a3:c0:bd:81:b7:e3:a9:ab:74:
56:52:82:6d:06:02:30:8d:c9:b6:95:41:ed:6f:6b:8c:79:d7:
1d:be:00:fe:7c:e9:24:0e:ec:ec:68:20:34:33:ee:fa:1e:ba:
d9:cd:2f:37:1f:77:9a:24:b5:c8:fb:a3:57:1b:9f:db:7b:a9:
26:07:01:65:a0:a6:1a:60:23:1d:ac:6b:51:5b:cf:5a:75:a2:
99:3f:3d:d2:da:8a:79:70:42:a3:68:2c:03:a9:4b:b3:a1:ce:
23:a9:d1:65:ef:e9:a0:13:05:f2:ba:25:0b:ad:b6:c3:2f:c1:
ce:b5:59:7f:c4:a2:7b:4a:3c:71:ca:d6:9f:fe:45:42:71:9b:
2e:81:03:ef:ad:ef:84:40:56:73:6f:c9:f4:0a:d9:b2:cc:a7:
93:fe:ef:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org