Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/lxazbnZmJmZCWUmJtJmBhx3gzgw.roa
File: lxazbnZmJmZCWUmJtJmBhx3gzgw.roa (raw, json)
Hash identifier: Q1cshA7BLVNmNVAbDqO6aBh2WAEd5vi4HebQaAJTPaw=
Subject key identifier: 97:16:B3:6E:76:66:26:66:42:59:49:89:B4:99:81:87:1D:E0:CE:0C
Certificate issuer: /CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Certificate serial: 042B307A
Authority key identifier: 16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/lxazbnZmJmZCWUmJtJmBhx3gzgw.roa
Signing time: Sat 01 Jan 2022 02:55:24 +0000
ROA not before: Sat 01 Jan 2022 02:55:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36352
IP address blocks: 45.159.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69939322 (0x42b307a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Validity
Not Before: Jan 1 02:55:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9716b36e7666266642594989b49981871de0ce0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:72:a6:cc:eb:b7:41:54:0f:26:1a:cc:32:
2a:c6:7b:c7:d4:dc:a6:d2:58:6e:c0:cc:2b:61:9d:
1a:80:06:71:a8:82:f8:7e:aa:c3:22:56:c8:79:f0:
67:2c:d7:7f:0a:c7:05:5b:8c:df:88:eb:89:9b:07:
d3:c4:9d:63:ca:5f:5b:68:9b:ae:4e:12:53:47:92:
00:2d:ba:b6:5b:03:5c:60:2a:1e:21:ce:9f:71:22:
19:dd:33:ac:f6:9c:80:ed:46:5f:03:57:2d:5b:c3:
ee:5d:7a:b9:92:18:0b:d2:8d:8f:f1:0a:6e:2d:97:
69:2f:9c:d9:95:8d:ef:46:e3:7a:e8:2f:1d:37:ae:
71:37:6b:32:cb:28:1a:4c:4f:12:4d:a1:ee:1c:94:
0b:4e:73:97:7e:69:a1:d9:24:64:35:8b:e3:93:76:
50:32:f1:42:39:fe:15:c2:7c:03:9a:e1:1d:e5:bd:
01:a1:e0:d2:63:4e:f5:15:4b:19:9d:39:f4:89:12:
64:f1:00:62:cd:28:84:2e:48:c9:e6:6a:51:cc:d6:
e3:ed:bb:1d:25:1f:d2:38:d1:e7:8d:12:7e:74:1f:
0c:f7:af:8d:a7:6b:b9:97:af:2c:3a:41:48:f3:72:
f1:ef:58:93:bd:55:c0:a3:10:4e:a2:43:bd:e1:d8:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:B3:6E:76:66:26:66:42:59:49:89:B4:99:81:87:1D:E0:CE:0C
X509v3 Authority Key Identifier:
keyid:16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/lxazbnZmJmZCWUmJtJmBhx3gzgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/FsWxYidw22bWbKAg7QBzfVxs6cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:54:fc:e2:e1:64:bb:d8:45:8d:32:4d:95:d4:0a:66:d2:dc:
3b:7e:9d:1a:ee:e5:f3:95:0b:c0:69:1f:52:c0:2c:53:8b:1b:
62:b6:d5:6d:e3:19:19:4d:e0:71:26:a7:ee:d1:e8:d7:9e:08:
5e:03:fd:d1:ef:c6:e7:bd:89:bb:f4:c1:6e:4b:0d:89:44:8e:
07:4d:aa:ef:70:19:67:cb:5a:8f:b2:3f:44:a7:d5:73:bb:a8:
9e:50:a1:73:45:69:f7:52:6d:9d:0d:59:33:74:b5:8a:68:82:
e4:40:0d:96:aa:d1:12:0f:2b:12:0b:18:98:29:4a:67:f2:ce:
4a:bf:60:9f:28:a0:63:81:fa:7b:08:b4:db:a5:e1:3d:d9:c2:
e8:43:99:c1:e8:7d:64:6d:d8:74:8b:de:b8:2b:1d:9a:c3:19:
30:36:f0:62:d4:ef:95:95:15:65:2e:05:c4:e0:cc:7a:dd:ba:
68:71:3c:a1:62:f5:e7:2a:bd:54:18:cd:53:2e:cd:1b:95:aa:
64:5f:89:9e:63:94:f0:13:9b:9e:25:ea:98:7b:a6:ac:41:84:
9d:6f:9f:42:37:b0:63:98:37:8c:aa:e2:fa:70:2b:88:e1:af:
65:11:74:18:79:a7:52:3e:ab:36:98:63:23:ec:0a:9d:b0:27:
34:b2:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org