Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/8obZFhOnXrfl2Dd_AYnnOtKOpE0.roa
File: 8obZFhOnXrfl2Dd_AYnnOtKOpE0.roa (raw, json)
Hash identifier: NFsU2jSgr410ZdRmIVRQFqMWFisBYFQ2J9innZR/ANc=
Subject key identifier: F2:86:D9:16:13:A7:5E:B7:E5:D8:37:7F:01:89:E7:3A:D2:8E:A4:4D
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 0187285BFB12550D623C6796092529E99F7F
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/8obZFhOnXrfl2Dd_AYnnOtKOpE0.roa
Signing time: Tue 28 Mar 2023 13:15:29 +0000
ROA not before: Tue 28 Mar 2023 13:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.17.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:5b:fb:12:55:0d:62:3c:67:96:09:25:29:e9:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Mar 28 13:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f286d91613a75eb7e5d8377f0189e73ad28ea44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:da:06:61:9d:e2:2d:5f:1e:db:41:39:b4:
76:61:4f:30:8b:e4:80:e4:55:a2:46:c1:10:3d:49:
43:10:26:b7:78:fd:37:62:ed:cb:52:1f:ef:df:aa:
2b:63:24:d4:2a:31:2e:32:be:6a:84:02:b1:27:01:
50:9c:cf:69:ac:05:a0:d0:a0:84:5b:71:5b:80:eb:
a1:11:9c:9b:1a:15:e4:ee:47:c1:f1:ad:bb:c5:b0:
eb:2c:96:d8:b8:c0:5a:f7:b9:2d:24:cf:8e:84:43:
85:5c:2e:2f:fc:e8:ab:86:42:19:64:7c:ac:9c:f6:
ba:0b:9f:f5:be:2d:8c:89:6c:ae:fb:99:e7:51:05:
34:10:33:21:1a:12:86:78:f0:f0:09:86:c4:9d:53:
df:03:35:79:2f:22:7e:3d:1c:77:7d:21:a9:7c:f4:
c4:95:98:df:0c:db:78:06:0d:16:17:3e:87:8f:ea:
ff:e7:90:ff:5c:d8:18:9f:dd:b4:9c:bd:73:91:b5:
9c:f2:c4:fe:6e:ba:32:66:f1:e3:97:82:da:e2:5d:
62:8f:54:a1:9e:c6:55:37:35:77:49:0c:46:e4:12:
20:76:8d:cc:d7:6b:a3:96:75:ce:80:0f:50:8f:e8:
09:08:3a:8f:ab:c8:0e:6d:9d:e4:25:04:13:f5:98:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:86:D9:16:13:A7:5E:B7:E5:D8:37:7F:01:89:E7:3A:D2:8E:A4:4D
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/8obZFhOnXrfl2Dd_AYnnOtKOpE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
79:fd:a4:94:7d:72:36:6d:43:84:d3:1d:e0:30:e4:63:bc:d1:
a1:86:5c:8a:12:94:e9:bc:1e:09:d3:b6:31:b2:4b:27:e3:49:
05:b8:22:69:9f:60:a7:1d:0f:c9:37:ee:32:4d:62:f7:b3:ae:
cd:67:7e:5b:96:f7:0f:a1:bb:f0:f5:dc:e1:de:b1:84:5a:52:
11:f8:c9:39:a0:37:69:c6:41:8b:0a:4f:ac:f4:7d:65:50:97:
d5:a1:34:98:82:c3:fc:dd:eb:fb:ba:c9:93:f1:de:64:1a:f1:
90:39:e1:f6:dc:fa:80:5b:0e:68:1b:58:50:79:e7:73:d0:2f:
95:33:63:31:28:75:ae:41:11:fa:06:52:62:3f:6d:84:42:ef:
f3:15:e3:a4:99:c8:a2:a7:5b:2a:11:9c:9b:c0:33:2a:cf:c7:
42:7d:c6:65:3c:b3:62:30:5d:3a:0a:42:eb:7e:aa:e9:23:5f:
70:5c:5c:d8:e7:83:98:7e:d1:ab:7f:fd:f3:8e:d0:c0:46:06:
02:1c:5b:a6:f8:bf:db:2f:19:ef:81:6d:5f:85:ce:02:b0:60:
66:ca:3f:71:7b:1c:db:ac:f2:d4:cc:9c:d0:ba:79:9b:08:1a:
4c:25:41:8d:ae:cb:6c:ec:2d:47:21:cf:e7:5d:5e:df:f5:29:
6a:12:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org