Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/1Zu5RRkNxyaNlx1yiCg7R5ufK3c.roa
File: 1Zu5RRkNxyaNlx1yiCg7R5ufK3c.roa (raw, json)
Hash identifier: ympMgv3H9uVyjNcJ46vJJgtQmlutIdREOVHsuToiS64=
Subject key identifier: D5:9B:B9:45:19:0D:C7:26:8D:97:1D:72:88:28:3B:47:9B:9F:2B:77
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 0186CEA78EDBA7D39ACC394104B2F68FBFC5
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/1Zu5RRkNxyaNlx1yiCg7R5ufK3c.roa
Signing time: Sat 11 Mar 2023 03:12:12 +0000
ROA not before: Sat 11 Mar 2023 03:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ce:a7:8e:db:a7:d3:9a:cc:39:41:04:b2:f6:8f:bf:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Mar 11 03:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d59bb945190dc7268d971d7288283b479b9f2b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:b2:78:9c:8b:a8:44:96:c9:35:35:79:4b:
3d:5e:d3:fd:27:32:9c:99:9e:0e:50:21:3a:97:ed:
ac:e1:db:d4:ef:17:05:60:d6:84:31:d5:ed:8a:f6:
f8:b2:c7:2f:8b:42:f8:76:1e:8b:ec:de:82:ff:39:
3b:dc:c1:8d:8a:15:9b:b6:68:d7:50:e2:e3:03:7d:
31:89:1f:74:8f:c0:8d:69:41:8a:af:96:dc:71:c6:
8d:d2:19:e9:8f:03:ff:3b:76:44:13:27:15:00:11:
a8:81:3a:94:4a:9f:c8:c9:57:a1:a1:3a:76:88:e2:
e0:20:ae:7c:fe:99:e8:77:3b:b1:a9:6f:68:87:98:
5c:c8:36:66:be:4c:11:35:dc:ae:82:b3:ae:af:4b:
4d:53:18:66:93:bb:81:d7:43:87:fe:51:a1:09:f6:
60:7c:38:05:2c:b3:69:8a:8f:03:1d:7b:ed:bd:3a:
df:b2:61:4d:77:ea:d8:92:23:f8:db:04:a0:a1:3a:
7d:dd:75:fd:e5:ba:33:28:18:e8:b4:79:63:b6:73:
a4:01:29:11:ed:15:1a:c7:54:91:b7:58:20:6a:42:
15:8c:5f:54:76:a1:c1:a6:15:c6:1d:c3:6b:2f:c7:
2c:88:fe:b3:ad:97:c2:6d:2e:f1:39:ad:10:ab:c6:
d1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9B:B9:45:19:0D:C7:26:8D:97:1D:72:88:28:3B:47:9B:9F:2B:77
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/1Zu5RRkNxyaNlx1yiCg7R5ufK3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
57:91:27:5a:3e:fe:ff:99:8f:47:f8:21:b0:20:f4:40:73:a8:
f3:76:16:a1:4b:b7:b7:1a:01:5a:a8:ab:0d:46:ff:7a:2f:fa:
86:80:48:29:9a:e7:1e:0f:8d:3c:25:2f:04:2a:ca:f0:c4:29:
33:41:8e:c1:27:06:58:17:3e:97:27:9f:83:9e:f8:70:f2:60:
6c:33:ad:ab:00:da:a6:f4:e5:b3:d6:e9:71:51:30:aa:4f:16:
e8:41:6e:59:9f:ee:ce:88:15:ee:45:8a:42:8d:41:33:3c:be:
07:d8:9b:64:37:75:96:0c:ee:d2:52:08:72:a6:c7:8e:ba:5d:
24:73:3e:56:b0:03:aa:b2:17:1f:c7:fe:0d:1b:50:3c:15:83:
70:6e:28:b3:77:0c:20:51:fc:12:f6:34:b6:74:d6:d1:37:15:
c8:6d:7f:1a:70:de:c9:ca:5a:03:54:97:42:94:23:7f:b1:f1:
5f:85:14:e3:a2:6e:f1:5c:fd:75:27:8c:dc:35:3b:e8:ea:28:
ea:29:6b:33:a7:95:2e:f9:2a:6b:07:93:c2:7a:f8:28:ba:b3:
d3:04:da:a6:11:63:db:8c:30:7c:86:2f:fc:bf:02:79:84:20:
87:9d:b4:07:af:2f:85:8f:e9:5b:90:59:96:11:f8:fb:ff:85:
7e:ef:d2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org