Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/0jkpnu0YQzXBurG6dy9Wv9ErYrs.roa
File: 0jkpnu0YQzXBurG6dy9Wv9ErYrs.roa (raw, json)
Hash identifier: ENNnztPCkjA7KqXHnqxvrojEvdd69kOgYqmBD0b0M+U=
Subject key identifier: D2:39:29:9E:ED:18:43:35:C1:BA:B1:BA:77:2F:56:BF:D1:2B:62:BB
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018730CE73D179C8D8517924F0F5F6C31466
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/0jkpnu0YQzXBurG6dy9Wv9ErYrs.roa
Signing time: Thu 30 Mar 2023 04:37:29 +0000
ROA not before: Thu 30 Mar 2023 04:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.16.0/22 maxlen: 22
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:ce:73:d1:79:c8:d8:51:79:24:f0:f5:f6:c3:14:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Mar 30 04:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d239299eed184335c1bab1ba772f56bfd12b62bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:65:ef:ab:7e:d8:2c:be:80:35:25:30:4f:
15:98:10:58:11:27:03:2e:5c:b5:96:4d:8b:3b:56:
25:6c:b2:f6:6c:e1:02:5a:77:51:a9:e8:71:65:33:
01:93:01:d7:f3:01:22:69:a9:1f:2d:85:78:df:74:
f0:20:8a:8c:11:85:49:00:f7:72:d4:b3:36:6a:9b:
b7:f1:42:81:9f:df:d7:a5:f8:ec:84:16:82:4b:8c:
1a:a0:89:c1:3a:9c:0a:4b:99:26:06:d5:78:2d:83:
1b:5a:f4:b2:23:34:48:cf:48:9c:93:39:68:3e:13:
1c:e1:32:fe:8f:72:68:77:d4:56:cc:05:a1:fe:1e:
5b:84:cb:ee:3d:54:fc:45:ca:e8:1a:3d:6e:ec:be:
c8:6e:ac:36:5b:d1:e0:4b:1b:16:8d:7c:29:77:a2:
59:7d:99:2a:49:85:30:00:44:ec:27:a8:77:82:c3:
d5:0d:6e:b9:45:be:e6:e7:f2:d5:93:57:2b:5f:fb:
c5:10:b0:13:aa:7d:53:8d:b7:71:7c:f0:b4:17:ef:
76:41:28:b5:24:69:b3:47:73:a9:5e:bf:cb:ca:9f:
8d:c6:90:ab:33:2a:2b:6a:76:07:ca:9a:bb:d5:e6:
fa:94:cc:72:90:7b:5e:fc:5f:bf:18:5a:fc:37:ba:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:39:29:9E:ED:18:43:35:C1:BA:B1:BA:77:2F:56:BF:D1:2B:62:BB
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/0jkpnu0YQzXBurG6dy9Wv9ErYrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:12:bc:ea:b5:02:c2:d3:fb:ae:43:5c:0b:5a:3b:17:1c:1c:
9a:a1:ab:85:97:a9:a4:e4:bb:16:fe:44:8d:c6:26:fa:86:64:
29:5a:80:6b:d6:e1:e4:ee:67:96:7c:1e:21:36:8e:ca:7c:d3:
1b:59:16:d9:9f:c8:4a:3f:a2:e6:60:16:df:07:23:a8:21:fd:
39:54:bc:28:25:30:d1:fd:44:29:53:33:f2:9d:8c:78:36:a1:
49:56:31:1a:d4:ff:2c:e8:31:17:3f:f4:ae:d5:17:b8:17:4e:
02:58:25:af:da:6d:b2:c0:dd:7a:31:bb:e1:b9:4f:94:70:1c:
63:e7:23:88:fd:92:d4:9b:b3:7d:f3:c2:13:e0:8b:f2:80:d6:
5e:6f:9f:10:fa:92:30:2a:e3:6b:75:fa:fc:7d:63:68:ce:84:
34:91:4c:ad:37:ac:8c:f3:4f:27:17:88:8b:a2:ab:c2:c4:8d:
3a:13:ff:ec:68:6b:c6:f2:9c:64:0f:22:ec:06:c8:f9:62:d2:
dd:4b:0a:e4:98:9c:c0:16:cb:6f:ba:e1:c1:07:87:c7:fb:e7:
66:25:14:7c:ef:8c:3c:3c:33:9e:5b:e7:5c:b3:25:04:0c:1b:
27:c1:b3:01:56:56:36:aa:9a:9c:d4:24:f6:c0:c7:26:50:b3:
e8:12:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org