Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/hlov_vTYdILK1kTosZvJfWq24w8.roa
File: hlov_vTYdILK1kTosZvJfWq24w8.roa (raw, json)
Hash identifier: Qrk7T22bUlXVwHtbTsMho7w0vxzEqghbVFk9OEuUzhY=
Subject key identifier: 86:5A:2F:FE:F4:D8:74:82:CA:D6:44:E8:B1:9B:C9:7D:6A:B6:E3:0F
Certificate issuer: /CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Certificate serial: 07C838B3
Authority key identifier: B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/hlov_vTYdILK1kTosZvJfWq24w8.roa
Signing time: Sun 30 Jan 2022 11:11:38 +0000
ROA not before: Sun 30 Jan 2022 11:11:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208254
IP address blocks: 45.150.220.0/22 maxlen: 22
45.150.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130562227 (0x7c838b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ecf9d374cc0f739671ee55055bd58c5fb767a8
Validity
Not Before: Jan 30 11:11:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=865a2ffef4d87482cad644e8b19bc97d6ab6e30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:27:fd:80:b1:8c:62:d3:d5:2e:0f:9a:b4:
45:87:bb:7b:d4:6a:b5:e2:10:d1:a9:80:8f:74:b5:
f2:3f:01:29:0b:21:7a:93:60:2c:27:7b:31:e8:21:
aa:21:75:bc:b9:99:66:b9:3c:b5:87:d6:59:9c:7a:
20:c9:d9:6b:6a:39:e1:87:05:fe:f9:0a:2f:9d:ab:
22:27:72:84:50:03:69:41:2a:9a:54:69:f6:41:ee:
df:cf:25:b3:18:e9:f5:c0:1c:0f:16:7f:ac:41:6e:
45:43:52:ab:f2:83:5f:c5:32:14:86:8b:f5:14:2b:
36:67:5c:e4:93:a3:fe:bd:70:1d:53:68:5e:75:ff:
8f:a4:a4:98:50:72:fd:a3:92:01:84:2a:02:5c:83:
97:58:9b:bd:0c:9e:9f:c7:97:e7:03:60:20:77:86:
46:da:d9:3a:37:38:cb:e2:12:eb:7f:89:ce:31:c5:
26:bf:57:57:82:0c:d2:2e:cf:d4:0e:9f:79:0b:2e:
5e:e4:cd:6d:3d:0f:bc:bc:47:fa:96:01:13:8c:11:
fe:5f:70:c0:5b:29:8d:04:21:a4:c1:46:31:fc:c9:
b9:95:cd:90:fc:af:28:59:43:ba:85:66:52:a1:3a:
2d:67:9a:46:9c:91:bc:ba:8c:f2:f6:17:b9:4b:64:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:2F:FE:F4:D8:74:82:CA:D6:44:E8:B1:9B:C9:7D:6A:B6:E3:0F
X509v3 Authority Key Identifier:
keyid:B7:EC:F9:D3:74:CC:0F:73:96:71:EE:55:05:5B:D5:8C:5F:B7:67:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-z503TMD3OWce5VBVvVjF-3Z6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/hlov_vTYdILK1kTosZvJfWq24w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51f895-7b98-4604-b4d2-5ce11d6734c0/1/t-z503TMD3OWce5VBVvVjF-3Z6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.220.0/22
Signature Algorithm: sha256WithRSAEncryption
94:40:04:39:20:07:3b:3f:4c:c8:c6:45:7f:cd:a3:d7:4e:de:
fc:08:88:c3:83:aa:6f:2c:a3:2f:c7:83:1d:2c:0f:12:6f:60:
23:a0:c0:f6:e9:de:e4:52:fa:d5:40:7d:b2:0a:cf:fc:b6:5c:
d3:30:ff:f2:d6:a9:23:d3:6c:19:0d:bf:6f:af:cd:36:6e:84:
d1:5d:52:6d:59:1a:46:0f:dc:08:6c:f7:b4:77:b1:8b:69:25:
7c:62:44:a9:6d:e4:11:ea:4b:b7:51:34:c0:e8:e6:28:47:6d:
fc:f4:fb:2d:5b:7c:5d:43:6d:a6:4e:2c:d7:c5:f2:37:05:5d:
5c:93:ad:1e:93:ed:f7:72:1a:b6:a5:da:9a:d3:24:58:c7:a7:
78:30:96:b3:78:02:19:56:84:7e:ea:a5:7c:03:74:cc:4e:c9:
44:40:a7:70:f3:29:57:21:13:ea:0e:56:13:7d:cb:7f:28:54:
eb:f3:7e:d8:41:13:29:01:78:bb:32:45:53:06:9d:db:6a:61:
65:96:fd:b2:9d:bc:dc:5b:28:b7:65:65:f7:67:28:3b:bd:4e:
e9:2f:7a:9b:d5:1a:81:c6:ce:d7:75:f4:98:0d:f5:bb:52:62:
15:02:42:e5:94:be:64:29:4d:49:13:98:2d:e4:c6:bc:46:17:
89:af:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:39 2024 by rpki-client on console-fra.rpki-client.org