Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-YAPYDF1LA_Tt9UC1KlXEC0B-DQ.roa
File: 1-YAPYDF1LA_Tt9UC1KlXEC0B-DQ.roa (raw, json)
Hash identifier: OG8D9SfMm1/3LarnW9WQbYTVPCNipU+SfIzwLetWU/o=
Subject key identifier: F9:80:0F:60:31:75:2C:0F:D3:B7:D5:02:D4:A9:57:10:2D:01:F8:34
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09F4C970
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-YAPYDF1LA_Tt9UC1KlXEC0B-DQ.roa
Signing time: Thu 03 Mar 2022 21:10:08 +0000
ROA not before: Thu 03 Mar 2022 21:10:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212598
IP address blocks: 45.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167037296 (0x9f4c970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 3 21:10:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9800f6031752c0fd3b7d502d4a957102d01f834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:f8:db:c0:de:5a:e2:04:fd:18:5e:44:2c:
8a:32:da:60:43:9e:34:86:ed:4d:5a:8e:5e:c8:f9:
b7:dc:10:5c:bf:8e:a5:49:24:74:5a:c6:58:17:65:
dc:cc:62:fc:d0:5b:f2:18:a1:80:8a:a3:d1:ff:81:
1a:86:ad:32:d0:91:d5:2e:4c:ec:58:9e:d3:35:b6:
bd:0e:51:fd:7e:09:8c:29:d7:3e:dc:52:23:09:b9:
e6:bc:88:be:f8:d3:86:73:56:5a:56:16:ce:8b:ca:
41:07:8e:1f:db:12:6a:c6:a5:a1:9d:f9:55:84:84:
75:9a:bf:d9:5f:8c:58:6b:90:14:a3:cb:f8:06:f6:
b7:42:f2:11:0b:66:7e:f1:a2:dd:b0:b9:c9:e8:ad:
8c:21:31:3e:9c:3e:53:ab:24:03:a4:3f:27:9c:9d:
13:b1:40:45:3f:c3:dc:99:78:71:02:bb:e3:4c:17:
8f:64:29:79:6f:20:d3:b4:35:5f:46:57:5b:57:bc:
2a:b1:ca:8b:4b:93:92:2a:85:ce:e5:d3:5a:97:00:
a9:59:38:e3:e4:7d:14:84:0d:75:b9:3e:43:de:f5:
db:76:ea:2e:7e:94:cf:70:f0:f8:ce:a2:72:ac:7e:
d2:ff:53:cf:e7:34:79:6d:4c:03:a1:c9:68:e7:dc:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:80:0F:60:31:75:2C:0F:D3:B7:D5:02:D4:A9:57:10:2D:01:F8:34
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-YAPYDF1LA_Tt9UC1KlXEC0B-DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ab:71:0c:4d:05:04:e2:6a:36:e6:6b:1d:2a:84:42:c1:14:
cd:a5:05:74:53:77:3a:b4:9d:92:8a:40:01:b0:b9:b2:bc:db:
e0:72:42:e1:e0:5d:03:b5:49:e4:14:5c:61:e3:6e:de:a7:99:
a6:12:a2:bd:3f:4f:12:1c:8b:25:71:e4:22:4d:9f:e2:2e:1b:
6e:f9:60:3c:ec:bd:23:78:a9:fb:f0:0a:4c:99:b8:9e:fb:da:
09:85:a1:ec:a4:d5:14:df:0e:fa:0b:c3:71:88:f0:9b:74:34:
f5:84:6c:33:a9:5e:85:d6:73:1f:a2:9b:da:69:10:54:0e:64:
60:ce:a4:3b:76:95:04:fe:05:57:3c:a6:25:dd:f1:ab:61:0b:
ec:1d:09:7c:c1:af:78:d4:f7:8a:ff:13:c9:3b:f6:e3:53:5b:
2a:7a:3c:dd:c0:1a:ee:db:c5:76:5b:03:70:9b:f5:79:57:b4:
69:2e:5a:3e:8b:64:27:7b:7b:d7:0d:0c:c6:57:73:54:84:96:
a0:47:27:eb:d5:57:15:bb:2c:02:fc:71:2c:67:28:cc:eb:84:
21:34:20:09:79:ac:a4:60:40:40:39:67:25:0a:e3:bb:28:5e:
b1:4e:e4:f4:ad:4f:73:dc:40:74:bb:d4:15:4b:a3:ba:ed:8c:
5a:86:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org