Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-D9pF1jGO_twna999zclm2Yvw_I.roa
File: 1-D9pF1jGO_twna999zclm2Yvw_I.roa (raw, json)
Hash identifier: pU1n+tlPmSUB7qAEQSdJwUefdngv4wQCVFMsrJm7RqE=
Subject key identifier: F8:3F:69:17:58:C6:3B:FB:70:9D:AF:7D:F7:37:25:9B:66:2F:C3:F2
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0948AFFB
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-D9pF1jGO_twna999zclm2Yvw_I.roa
Signing time: Sat 01 Jan 2022 12:04:00 +0000
ROA not before: Sat 01 Jan 2022 12:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.12.82.0/24 maxlen: 24
45.12.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155758587 (0x948affb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f83f691758c63bfb709daf7df737259b662fc3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:ac:e7:d9:57:26:08:25:68:6b:69:34:71:
f4:90:4b:61:da:54:07:0e:2c:2a:4e:d3:5d:20:27:
60:30:23:54:6d:ad:bf:9d:fc:16:04:9f:6d:5c:e6:
de:a6:17:17:74:52:00:eb:bd:20:f5:d0:a3:ed:f7:
03:c1:32:5e:b0:87:6d:7d:73:31:ac:aa:fa:96:2d:
9e:e1:91:5e:1c:d3:a1:b4:7d:1d:f0:3f:3f:85:02:
17:fa:51:ed:60:51:24:8a:6d:89:7d:d1:fa:53:8f:
50:f4:73:5d:ac:db:0b:19:2c:29:6b:50:01:e1:e4:
d6:b1:a4:26:a0:19:66:7b:79:6c:96:05:2f:d6:61:
aa:ed:71:f8:d9:51:97:40:11:20:5a:a2:44:9e:5b:
dd:c7:04:27:53:aa:ec:08:36:8d:44:c8:62:87:9b:
3e:a3:d4:b9:45:c1:92:3a:3b:26:5f:3d:4d:ba:8a:
7b:af:8c:84:84:ed:bb:77:23:0a:63:1e:0b:8d:ae:
aa:7a:43:d3:a1:72:03:19:0e:91:cd:39:35:ae:3e:
e9:6e:bb:16:48:c5:57:d2:42:50:88:d4:07:3f:2f:
66:ce:64:0f:71:a1:2a:65:e2:c3:98:a5:b9:cb:42:
6d:17:d8:90:d1:6f:ee:66:e2:a4:b0:35:b5:49:88:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3F:69:17:58:C6:3B:FB:70:9D:AF:7D:F7:37:25:9B:66:2F:C3:F2
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-D9pF1jGO_twna999zclm2Yvw_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:b9:ad:39:71:7f:a8:89:b2:f7:f9:84:8d:ae:5c:a5:b3:c6:
7e:1a:1c:72:8d:58:75:a8:69:1f:9b:d7:07:d4:f3:1e:c7:99:
c7:69:34:4e:ac:36:5a:50:29:96:62:f6:f4:2f:2f:58:f0:fa:
0a:d2:c2:b1:4d:0b:7b:94:36:70:28:b2:f8:0c:32:33:9d:de:
9f:4d:cf:0b:20:d5:22:19:41:95:55:bb:4f:28:5e:33:25:1f:
1d:9e:47:d9:c7:5e:a9:39:03:f0:ad:33:19:e2:2e:4a:f3:9b:
5f:b9:30:89:af:97:ed:e4:69:f5:15:41:e5:e8:de:f2:5e:c8:
4a:48:cb:b3:a5:47:23:b0:0e:ad:3c:f4:4b:ea:22:2d:d1:23:
b9:f9:80:bf:9a:3c:5b:20:a0:7d:4c:e0:ed:69:e5:1f:bc:85:
2a:0e:dc:69:11:31:b6:2b:36:15:e4:cd:22:69:6c:58:9b:57:
d3:38:ad:99:ff:72:cc:31:5a:3e:62:2f:9d:d0:03:b2:82:71:
33:09:18:0d:e3:b1:f7:18:65:09:ca:f0:99:10:36:5a:b7:e0:
fc:13:cf:d6:79:27:20:04:21:78:31:72:42:61:a6:0a:10:67:
d5:72:01:05:c0:2f:05:96:2d:76:a3:e8:44:f1:44:c6:16:a8:
f2:c0:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org