Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/1-zBHYCSZI6Ryd-t0djaF5LOD3nc.roa
File: 1-zBHYCSZI6Ryd-t0djaF5LOD3nc.roa (raw, json)
Hash identifier: u8umy412zrt8Sg+Bn0tad3wYUaxI/bm42uVtpmiiSfU=
Subject key identifier: FB:30:47:60:24:99:23:A4:72:77:EB:74:76:36:85:E4:B3:83:DE:77
Certificate issuer: /CN=542182c611439954a68ba790f01f0358b4d30dce
Certificate serial: 018570F09182833FC8BBE4F315FE747217D4
Authority key identifier: 54:21:82:C6:11:43:99:54:A6:8B:A7:90:F0:1F:03:58:B4:D3:0D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/1-zBHYCSZI6Ryd-t0djaF5LOD3nc.roa
Signing time: Mon 02 Jan 2023 05:24:51 +0000
ROA not before: Mon 02 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211239
IP address blocks: 45.89.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:91:82:83:3f:c8:bb:e4:f3:15:fe:74:72:17:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542182c611439954a68ba790f01f0358b4d30dce
Validity
Not Before: Jan 2 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb304760249923a47277eb74763685e4b383de77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:6d:5f:be:2a:52:47:f6:c9:c6:a7:e1:7b:
9f:60:1c:ec:db:bd:9e:7e:9f:1f:56:37:f7:83:c3:
66:54:18:aa:5e:22:d0:3e:67:a7:14:69:dc:b8:68:
7b:7b:01:fd:cd:6b:cb:32:1f:19:18:4b:b3:cc:17:
fe:4b:69:8f:e0:e1:84:17:8a:59:fc:6d:68:9f:0b:
b7:16:f2:da:65:93:b3:70:99:c2:c6:cf:2b:af:11:
b8:6a:20:71:a3:df:44:c2:83:34:a1:57:37:ab:cd:
b4:7d:2b:00:3b:4e:73:b3:aa:6c:a8:49:2e:af:f3:
2c:04:01:83:a2:cf:d1:ae:b0:d3:ac:19:7d:44:9e:
1c:c4:3d:07:bf:4d:2c:e7:d5:5b:70:1b:59:2d:4f:
48:53:e2:06:95:62:46:b5:91:4f:8b:08:3c:60:f5:
54:4f:8d:70:be:07:0d:91:7a:db:34:92:71:99:58:
02:c5:86:89:a1:e7:af:b3:d6:3a:bc:db:18:58:da:
fa:3c:6e:61:69:f0:e8:9b:2a:60:7f:5d:d1:ef:82:
dd:99:62:9d:7d:34:43:60:05:45:03:4b:49:50:54:
5f:b3:92:69:b7:2e:85:73:f3:ac:42:fa:09:46:89:
43:6c:85:3c:b4:f6:20:e4:6d:b9:05:0f:59:44:65:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:47:60:24:99:23:A4:72:77:EB:74:76:36:85:E4:B3:83:DE:77
X509v3 Authority Key Identifier:
keyid:54:21:82:C6:11:43:99:54:A6:8B:A7:90:F0:1F:03:58:B4:D3:0D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/1-zBHYCSZI6Ryd-t0djaF5LOD3nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/10b9d3-7488-49b8-8357-06232fd332e3/1/VCGCxhFDmVSmi6eQ8B8DWLTTDc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.23.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b1:69:1c:c4:ef:d6:3e:0c:0f:e9:20:13:3c:15:06:32:40:
05:d4:29:20:00:22:b2:c7:71:79:cd:ec:bf:87:dc:63:ba:71:
06:7b:db:71:eb:d3:e2:1b:79:27:95:41:42:20:f4:46:c0:2a:
e7:9f:bb:60:2b:77:a4:d4:3c:5c:e1:4d:a3:fe:87:70:e7:33:
92:11:bc:50:44:5a:fe:54:ab:c1:ea:93:9c:ec:90:11:6f:19:
d4:2f:74:a8:fe:26:df:5b:3d:31:34:c0:e3:2f:23:39:21:3d:
ea:e4:9b:d9:03:bf:80:5b:f1:5f:d4:f9:7f:fd:58:63:1f:d7:
d0:14:20:27:cd:36:71:33:9d:07:d9:30:c2:3d:b5:22:09:3e:
9a:d9:86:73:1c:08:f1:20:a5:cb:2d:e6:c8:fd:6c:94:8b:64:
c7:0b:b6:68:39:4c:53:f9:cf:83:48:6d:0f:33:80:fe:1d:f4:
84:a2:bb:c2:7e:e9:b0:62:ed:e6:bb:d7:5b:a9:39:d4:94:04:
96:08:e2:f8:51:15:67:15:7c:1a:bd:61:5a:c2:a5:a4:15:3c:
86:45:3e:f1:b9:47:7b:6b:1b:83:ab:36:eb:69:77:cf:f6:a3:
ad:e7:08:44:b4:4e:0c:dc:51:6a:54:34:e2:87:72:b8:ef:ca:
d4:8b:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:11 2024 by rpki-client on console-fra.rpki-client.org