Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/Gl0-IGdr7BnaHZmN4N3e1UPMrZk.roa
File: Gl0-IGdr7BnaHZmN4N3e1UPMrZk.roa (raw, json)
Hash identifier: mWZWGPeYXtLWjByuTcefSv64nIemap79iIeW0TzY3S4=
Subject key identifier: 1A:5D:3E:20:67:6B:EC:19:DA:1D:99:8D:E0:DD:DE:D5:43:CC:AD:99
Certificate issuer: /CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Certificate serial: 042B507D
Authority key identifier: 16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/Gl0-IGdr7BnaHZmN4N3e1UPMrZk.roa
Signing time: Sat 01 Jan 2022 02:55:24 +0000
ROA not before: Sat 01 Jan 2022 02:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49453
IP address blocks: 45.159.22.0/24 maxlen: 24
45.159.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69947517 (0x42b507d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Validity
Not Before: Jan 1 02:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a5d3e20676bec19da1d998de0ddded543ccad99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:47:a5:96:fd:e1:03:07:02:89:0b:19:96:
78:de:53:54:31:33:6c:90:23:a4:3e:a8:eb:de:1d:
cd:a1:0d:cc:32:a6:40:b9:a1:83:86:33:f6:8f:59:
8b:9e:3b:df:8e:3e:e9:0f:55:36:d6:37:0c:57:e3:
97:f0:04:f4:7d:bc:1d:ef:94:ff:45:64:a5:fe:28:
99:19:f4:67:8a:0d:bb:eb:2b:64:13:b2:9f:36:cb:
3d:2d:fd:27:91:c5:1d:40:f1:e3:ae:9b:5f:4d:6b:
67:b5:5f:cd:6a:e8:43:25:61:d4:f2:4f:76:57:aa:
35:e4:5d:fa:16:25:e6:be:4c:95:be:94:aa:2b:70:
1f:dd:c9:77:6a:c6:a4:22:83:a2:73:33:aa:c4:ae:
15:30:ae:3f:bc:29:69:89:69:8c:1c:71:6b:f5:ff:
36:39:df:7c:8a:a5:4f:db:34:8c:c4:aa:81:f1:fa:
e5:7c:d9:69:a8:a0:5b:53:3c:15:02:d2:99:a6:00:
9a:6d:af:49:f7:8d:09:12:22:13:80:0e:ce:c9:26:
6d:6f:74:d9:3f:6f:99:65:3f:cc:97:f7:f0:2d:b4:
f0:54:4f:9f:08:bf:9e:d0:e2:fe:1f:8c:90:81:40:
dd:93:7b:38:54:53:f8:17:66:8f:af:fa:ae:c4:e1:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:3E:20:67:6B:EC:19:DA:1D:99:8D:E0:DD:DE:D5:43:CC:AD:99
X509v3 Authority Key Identifier:
keyid:16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/Gl0-IGdr7BnaHZmN4N3e1UPMrZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/FsWxYidw22bWbKAg7QBzfVxs6cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.21.0-45.159.22.255
Signature Algorithm: sha256WithRSAEncryption
78:7b:d2:6e:71:e1:57:d7:c2:98:40:b1:08:4b:6d:b3:f6:ca:
7b:03:80:1b:f5:0a:b8:82:7f:a3:a0:b5:e1:3a:fd:56:b2:8d:
4b:e4:15:12:06:48:60:8a:8d:f3:31:eb:e9:57:0b:b0:2e:ec:
d5:16:73:73:d9:b2:62:ec:75:0d:2c:9d:3d:30:6f:25:38:19:
0a:1b:78:17:17:74:74:b6:a2:ca:0d:ec:b8:8e:10:97:c4:54:
4b:b5:57:ea:47:bd:2d:f5:dc:ef:72:af:e4:88:25:37:cd:25:
14:c6:89:b5:b3:24:82:e5:96:e8:02:ba:97:1a:b3:d4:be:35:
0a:2f:73:1d:6f:e2:f5:e7:fd:0c:8a:63:cb:fd:47:53:4f:0e:
a9:57:78:38:d0:29:84:88:04:6a:69:de:e7:f2:60:28:34:ef:
9f:62:36:51:36:28:b1:90:d2:b3:9a:ec:e5:02:0a:1f:c8:a7:
28:69:0e:6c:7c:37:1f:ed:ea:23:c4:7f:c9:8f:1e:97:3d:e2:
84:55:ca:74:14:67:62:3b:73:be:24:b0:50:85:d2:42:49:20:
ed:97:60:b1:0f:6e:96:bd:49:84:15:82:49:77:54:1e:92:a2:
56:61:aa:93:54:cb:c7:8a:87:60:6b:8c:a6:e6:35:f4:4a:e7:
ab:17:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org