Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/boHTckpSKWH8wZiqWiTPY45HJcA.roa
File: boHTckpSKWH8wZiqWiTPY45HJcA.roa (raw, json)
Hash identifier: DSXnLM8iNAqzWwC+AjrsbbhewShPWXhx888+I2T25Gw=
Subject key identifier: 6E:81:D3:72:4A:52:29:61:FC:C1:98:AA:5A:24:CF:63:8E:47:25:C0
Certificate issuer: /CN=12608e7181a303df044911ab4f2d51c2887ef278
Certificate serial: 018A469D8BB07EF957E21840130E0BF0C439
Authority key identifier: 12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/boHTckpSKWH8wZiqWiTPY45HJcA.roa
Signing time: Wed 30 Aug 2023 13:24:04 +0000
ROA not before: Wed 30 Aug 2023 13:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151609
IP address blocks: 45.149.16.0/24 maxlen: 24
45.149.18.0/24 maxlen: 24
45.149.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:9d:8b:b0:7e:f9:57:e2:18:40:13:0e:0b:f0:c4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12608e7181a303df044911ab4f2d51c2887ef278
Validity
Not Before: Aug 30 13:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e81d3724a522961fcc198aa5a24cf638e4725c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:63:dc:25:cc:66:3a:d2:52:67:39:94:f3:
2c:70:35:c5:23:6a:b2:57:a4:a4:e9:8c:67:58:0d:
35:1e:6b:76:08:9e:53:28:8f:8f:84:ad:fd:b7:76:
42:ed:93:d0:b0:f1:e9:20:a6:36:35:74:e0:12:6a:
51:2e:82:01:fd:92:df:64:02:f5:9f:c7:80:cd:44:
21:51:d1:30:3b:b8:7a:71:1f:1a:e9:97:8a:f4:e7:
69:b4:13:f8:77:1b:c2:09:e6:2a:37:29:23:32:92:
0c:6e:90:0c:09:a3:a3:83:b9:97:f1:65:50:17:4e:
63:80:4b:ba:07:4e:ee:d0:2e:3b:0f:37:ce:84:80:
6b:a3:56:7b:02:e2:2f:bf:5f:69:32:cf:86:7c:61:
a9:94:1b:9e:84:56:1f:7a:17:69:dd:d1:31:1c:6e:
c3:3d:88:fe:09:4e:54:44:aa:dc:96:fb:47:4d:c5:
76:82:e1:07:b0:d4:a3:9a:36:bf:05:bd:cb:03:2f:
e2:2a:2f:d2:84:ce:3b:5f:21:e3:82:d6:22:e8:90:
02:bb:04:65:b4:6a:7b:80:86:f8:13:df:0b:70:2f:
7c:21:26:60:74:0a:77:85:a2:6d:04:7c:dd:3a:78:
dc:f1:a8:eb:05:63:76:7d:3a:f2:a8:0b:9d:a6:d5:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:81:D3:72:4A:52:29:61:FC:C1:98:AA:5A:24:CF:63:8E:47:25:C0
X509v3 Authority Key Identifier:
keyid:12:60:8E:71:81:A3:03:DF:04:49:11:AB:4F:2D:51:C2:88:7E:F2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCOcYGjA98ESRGrTy1Rwoh-8ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/boHTckpSKWH8wZiqWiTPY45HJcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4a22bb-2862-421c-b071-da99251b1328/1/EmCOcYGjA98ESRGrTy1Rwoh-8ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.16.0/24
45.149.18.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:fb:8d:4f:a1:cb:06:15:c1:85:b4:ee:dd:42:78:a4:91:e2:
58:05:35:90:a9:a5:b7:21:2b:c3:f0:4a:ed:e4:b5:2f:79:4b:
6d:50:31:80:7a:a7:9d:91:e6:85:86:62:2d:1e:ef:66:49:27:
ab:be:5c:54:b2:3f:b6:e7:f8:66:31:60:f9:21:4b:73:c0:8e:
b1:f0:69:80:ab:a7:be:05:da:a9:a5:e7:f9:3d:19:f8:ea:13:
e0:fc:ab:90:12:bd:c2:67:79:b1:ec:48:44:3f:b5:7b:38:0b:
a8:c1:37:bc:66:d5:58:db:00:d4:d7:d2:1b:c7:a5:0f:a7:93:
12:7f:77:a4:7b:89:a1:d0:76:a3:32:42:f3:ab:04:06:23:ef:
54:69:9a:94:ea:f2:55:87:77:e5:1c:da:0d:c5:82:bc:04:24:
30:14:fe:2d:fd:94:62:26:2f:14:aa:45:4a:1f:a1:21:be:f7:
bf:b7:01:8c:29:58:17:5f:5d:5f:8a:ea:ec:4e:48:c8:ba:84:
5b:2a:bd:ea:60:20:cf:3a:b4:b8:e5:c8:56:68:b2:8f:be:5e:
8e:b5:9b:1d:ae:0f:c3:b6:8b:6a:a4:a6:5f:a4:fb:40:28:ca:
15:78:10:43:db:72:83:c3:d8:68:96:0c:ed:62:46:a7:3d:24:
bc:d2:73:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:53 2024 by rpki-client on console-ams.rpki-client.org