Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/HYa0l0oU3wqib4Yg2CSi03ydiKY.roa
File: HYa0l0oU3wqib4Yg2CSi03ydiKY.roa (raw, json)
Hash identifier: 3ZstP0F0U+xGHsBsZtWJ6jFBivL89+VkqaNZCR/Lnts=
Subject key identifier: 1D:86:B4:97:4A:14:DF:0A:A2:6F:86:20:D8:24:A2:D3:7C:9D:88:A6
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018A469D8B27F0D3C8E02E9D00D34E0744A5
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/HYa0l0oU3wqib4Yg2CSi03ydiKY.roa
Signing time: Wed 30 Aug 2023 13:24:04 +0000
ROA not before: Wed 30 Aug 2023 13:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.149.17.0/24 maxlen: 24
45.149.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:9d:8b:27:f0:d3:c8:e0:2e:9d:00:d3:4e:07:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Aug 30 13:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d86b4974a14df0aa26f8620d824a2d37c9d88a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:3c:ac:69:81:0a:e4:1e:9b:4c:c9:8c:36:
dc:38:3c:cb:c4:8f:ae:40:8f:7d:19:4d:99:2a:65:
b0:31:c1:26:e0:4a:c6:cd:05:19:cc:5f:51:8b:00:
f7:2f:56:91:2a:61:25:ea:65:b5:96:38:7c:1a:a0:
89:54:1f:96:5f:ae:f9:62:a0:83:e3:1c:98:05:4d:
cf:05:6a:80:05:2d:fc:0f:e8:0f:9b:f6:c8:f7:12:
22:5d:59:62:fc:97:6f:cb:77:13:d3:6f:96:90:17:
01:b9:76:40:0c:59:9b:73:b1:12:c8:6e:86:e4:24:
d8:7b:ce:99:33:f6:c0:18:4a:da:8e:ae:74:fa:7f:
3b:ee:3f:41:1a:c9:a2:30:31:04:2c:1d:a6:79:ad:
d1:c9:a1:2b:16:73:4a:19:ba:09:00:33:7e:2b:2f:
7d:fa:d7:dc:82:fa:48:05:41:dc:88:78:e9:2d:13:
25:5e:9d:82:9f:ba:d4:77:8b:41:ce:04:a3:e9:a6:
e1:72:ec:6c:5f:36:18:2b:f5:c5:4f:a8:03:4c:6b:
a5:64:ed:2d:85:92:ea:33:e9:ca:85:f7:92:f2:99:
62:70:5e:4b:ee:b2:9d:04:a1:07:5b:ee:40:2f:90:
93:db:6f:6d:4e:9b:0b:3c:aa:3d:e4:03:26:ee:4c:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:86:B4:97:4A:14:DF:0A:A2:6F:86:20:D8:24:A2:D3:7C:9D:88:A6
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/HYa0l0oU3wqib4Yg2CSi03ydiKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/22
Signature Algorithm: sha256WithRSAEncryption
94:6a:ef:69:9d:c9:5e:af:fc:07:c6:a6:d0:c3:25:ba:3c:f3:
8e:b7:6f:f2:fc:4d:1f:bf:03:ec:4e:ea:26:45:6e:48:cc:5b:
fa:85:0b:40:96:65:60:1e:39:94:3a:8b:74:20:39:4b:fa:80:
00:df:c9:45:5f:bf:d6:f1:67:32:6e:92:95:06:23:55:46:2d:
83:f1:a7:b9:cd:4b:03:83:97:93:1e:87:e1:2c:1c:aa:bc:fe:
46:01:35:91:f7:d5:43:59:03:da:36:9b:7c:1e:16:0d:23:c4:
82:3d:61:b0:9b:9c:4d:f7:93:87:ea:6e:7a:cb:04:03:4f:6e:
27:cc:f7:bb:0e:27:f0:26:16:83:ba:f4:74:63:fb:c5:7d:bf:
dc:85:2d:25:84:73:c5:7d:74:cc:b6:fc:6d:96:6e:9d:c5:2f:
d3:8b:42:4b:ee:67:fc:79:c6:fc:49:38:e3:0c:58:bc:eb:29:
77:87:6f:c1:0f:d5:86:43:35:ca:cc:6c:6f:a8:01:b7:86:24:
b5:52:99:9c:41:df:89:e2:8a:56:64:62:00:58:36:92:23:1f:
c0:7c:2c:7e:40:ae:85:3e:69:f6:38:95:56:19:ea:1d:7b:06:
a9:99:6d:eb:8f:e6:1a:f6:5b:02:87:da:67:c4:94:1d:00:81:
29:4e:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org