Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/1-qNKkL5HZZZOwetmOMf4ms1-o_o.roa
File: 1-qNKkL5HZZZOwetmOMf4ms1-o_o.roa (raw, json)
Hash identifier: LQGRSM//gaYCXm5Ya5a21IZjzADS1Z+8kfVYoyVDvOw=
Subject key identifier: FA:A3:4A:90:BE:47:65:96:4E:C1:EB:66:38:C7:F8:9A:CD:7E:A3:FA
Certificate issuer: /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial: 0183A2D0F0CDBDA5878D0CFDFD20A2EBE7EC
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/1-qNKkL5HZZZOwetmOMf4ms1-o_o.roa
Signing time: Tue 04 Oct 2022 11:45:45 +0000
ROA not before: Tue 04 Oct 2022 11:45:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.9.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:d0:f0:cd:bd:a5:87:8d:0c:fd:fd:20:a2:eb:e7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
Validity
Not Before: Oct 4 11:45:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faa34a90be4765964ec1eb6638c7f89acd7ea3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:d3:fb:c0:00:b0:e7:07:c5:27:e7:56:28:
18:92:a9:59:b0:a5:d1:16:96:9e:79:65:80:b8:e6:
5e:c4:28:e1:dc:5a:a8:1f:37:0a:e1:f1:32:85:c9:
38:a7:48:f4:5e:37:1e:86:19:12:55:c8:6d:bb:b7:
ad:9e:02:e0:1d:5c:30:4d:17:fb:37:47:06:e5:c7:
7f:08:a0:a8:10:b2:15:8a:7c:b0:0d:7a:91:f0:fb:
d9:cd:e8:4d:91:3b:50:39:b4:3e:91:52:9c:c5:41:
4c:b2:ee:97:4f:05:9c:5e:ec:35:4e:11:60:ab:0f:
73:1b:48:49:cf:57:a3:67:25:26:1b:94:be:01:b2:
a5:da:35:d4:44:f9:97:fc:4d:05:f7:d2:02:33:17:
92:ba:a2:c9:d0:c0:30:8f:b4:6e:10:ea:0b:d0:aa:
a0:b7:e9:93:72:f1:90:c2:de:9c:bc:65:e0:46:7e:
c7:26:58:3b:c3:d7:74:f1:50:1c:91:3d:5f:67:9e:
09:b2:28:fb:5c:33:ce:d4:b8:ff:9d:cf:94:2b:81:
f7:23:53:bf:20:58:65:b0:79:6c:59:34:13:0c:0b:
19:d7:47:e5:3e:57:da:5d:30:8d:91:59:1e:58:2a:
41:09:e9:b1:27:04:d5:aa:ba:a7:c5:cd:ec:b9:5d:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A3:4A:90:BE:47:65:96:4E:C1:EB:66:38:C7:F8:9A:CD:7E:A3:FA
X509v3 Authority Key Identifier:
keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/1-qNKkL5HZZZOwetmOMf4ms1-o_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/22
Signature Algorithm: sha256WithRSAEncryption
10:c6:56:b0:ca:a4:22:35:76:db:04:14:7e:5e:82:6c:ca:8e:
1b:fe:d1:2b:b6:e7:60:73:e4:fd:2a:99:e9:80:e6:73:53:a6:
18:11:52:fc:c5:7a:7e:95:41:be:3c:41:b9:31:cd:a3:a6:61:
1c:ca:cd:3d:c0:c9:78:7a:c4:2b:16:c3:a3:1d:22:33:b9:17:
8d:4b:e1:cf:fa:9f:a5:a4:0c:36:95:32:fe:92:48:d2:e1:ed:
09:51:80:23:d1:d7:4f:cc:56:83:d0:a2:ef:37:04:12:6c:99:
b0:44:9f:d3:64:1d:68:5b:61:0f:cc:a4:86:5e:77:33:b8:c7:
f8:6c:7e:3c:5b:26:49:67:3d:48:09:5c:c8:7b:8c:a3:33:82:
29:ba:e2:ca:5e:5c:a5:e6:3f:cd:8b:cf:42:e0:24:3b:c1:8b:
11:62:7a:2b:84:9c:9b:95:d6:49:42:59:8f:7f:d0:83:35:5f:
50:33:95:59:a4:4d:38:74:04:79:e5:41:9c:f6:b2:f3:30:fe:
66:52:30:25:f3:d0:33:0e:2d:b7:f8:e7:fe:ee:7d:fa:ac:fd:
71:cc:26:54:05:69:ea:0f:a0:ef:53:a0:cf:85:21:7d:36:9e:
e8:5b:38:4a:06:01:13:80:1f:a8:c4:20:63:bf:9f:e5:95:74:
ea:93:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org