Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/m8LgpFrsIKvjpp9evBKGn8sZYt4.roa
File: m8LgpFrsIKvjpp9evBKGn8sZYt4.roa (raw, json)
Hash identifier: gHdCO/CP7jruFsaN86n/z90EwNtrwNDN9cwB0272WAM=
Subject key identifier: 9B:C2:E0:A4:5A:EC:20:AB:E3:A6:9F:5E:BC:12:86:9F:CB:19:62:DE
Certificate issuer: /CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Certificate serial: 04CDFFB0
Authority key identifier: 16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/m8LgpFrsIKvjpp9evBKGn8sZYt4.roa
Signing time: Thu 10 Mar 2022 20:44:11 +0000
ROA not before: Thu 10 Mar 2022 20:44:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 45.159.20.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80609200 (0x4cdffb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16c5b1622770db66d66ca020ed00737d5c6ce9c0
Validity
Not Before: Mar 10 20:44:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bc2e0a45aec20abe3a69f5ebc12869fcb1962de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:24:24:1e:05:62:e1:f6:19:5a:03:2c:e8:
a9:86:e0:11:6b:ee:be:51:27:67:5b:94:c0:e4:1e:
5a:34:ea:7d:cf:ce:6c:9e:31:35:f8:0b:14:51:e0:
17:5a:f3:05:3d:25:c6:e7:f6:08:38:f0:33:f8:d0:
3a:33:b0:8e:78:5a:e4:9f:5e:1c:f1:c6:10:ac:0a:
f9:33:47:9d:67:35:c2:e5:28:df:e9:14:8b:a7:9b:
f9:5c:d1:99:a1:36:5d:0f:54:a4:54:29:0c:13:82:
e3:61:32:e3:e3:76:53:eb:13:0b:87:b5:2c:2b:90:
f2:ab:b6:d7:30:ca:d7:14:5f:1b:9e:6f:2d:c4:27:
c4:cc:cf:56:35:7e:38:e1:5d:2e:aa:e6:2f:b7:ef:
50:95:47:0f:6b:be:9e:4f:a1:49:9b:d4:bc:22:f3:
a6:37:73:99:bf:27:22:e7:0f:04:0a:63:4e:64:f9:
f8:b3:c3:1e:06:37:2d:6a:c3:74:08:d3:ad:02:a1:
a2:fa:14:1d:8b:47:35:df:b9:88:9a:e7:7e:41:d0:
77:62:f2:6c:dd:92:6f:d9:e8:a1:e7:91:96:06:18:
41:8e:52:de:0d:f6:44:dd:d7:d7:57:11:1a:26:1b:
77:59:a3:c4:f1:04:7f:7d:67:26:2d:bf:44:c5:00:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C2:E0:A4:5A:EC:20:AB:E3:A6:9F:5E:BC:12:86:9F:CB:19:62:DE
X509v3 Authority Key Identifier:
keyid:16:C5:B1:62:27:70:DB:66:D6:6C:A0:20:ED:00:73:7D:5C:6C:E9:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsWxYidw22bWbKAg7QBzfVxs6cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/m8LgpFrsIKvjpp9evBKGn8sZYt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2ceb1b-b85c-404f-aea3-23293779cb07/1/FsWxYidw22bWbKAg7QBzfVxs6cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.20.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:6f:3f:2d:6c:39:22:6b:71:62:cf:9e:cc:33:bd:b9:f7:43:
ba:6e:ea:62:a7:49:07:ca:cf:d8:a4:5e:d8:dd:6d:14:34:62:
58:df:1d:87:21:ce:f7:5a:d0:48:7b:10:d6:28:ca:b7:60:92:
de:d7:53:e0:7a:e2:c0:31:93:e1:20:59:bc:3e:96:1a:81:3d:
06:9b:a6:11:92:be:c1:01:79:32:60:62:21:01:93:cf:c7:e7:
0c:73:ce:b8:3c:d4:8b:43:18:52:a6:80:9d:90:6e:6a:56:8e:
cc:95:19:6e:f1:ea:eb:d9:61:60:88:f9:d7:bd:51:ce:e4:10:
15:46:9f:33:5d:ac:7f:0d:87:67:9c:d8:d0:f5:ea:ea:3c:20:
34:b2:c2:3c:f7:55:8c:cd:5a:a6:fa:6c:0e:13:91:8f:39:c7:
51:a4:fc:9c:06:28:85:52:7c:0d:5f:45:b5:d3:9d:3e:8e:d8:
93:f1:8f:14:68:bb:af:c3:11:82:2d:0a:63:2f:d7:3b:d7:96:
84:b0:e9:20:5a:82:67:74:68:61:a0:17:c9:66:9e:37:6f:ac:
d9:9c:87:0e:55:c1:05:73:7b:9e:5b:af:13:8a:ae:b8:49:22:
ca:09:d6:b5:a8:5a:aa:a6:67:f7:51:ff:02:cc:17:a8:af:cf:
2a:60:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:23 2024 by rpki-client on console-fra.rpki-client.org