Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-_rMr5_1ulbODupnPV7y1b1pjRs.roa
File: 1-_rMr5_1ulbODupnPV7y1b1pjRs.roa (raw, json)
Hash identifier: FV2sVD8CizYKJLdWaU88bpwXj7+kc3e6HrVcidHg4FI=
Subject key identifier: FB:FA:CC:AF:9F:F5:BA:56:CE:0E:EA:67:3D:5E:F2:D5:BD:69:8D:1B
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A6337FB
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-_rMr5_1ulbODupnPV7y1b1pjRs.roa
Signing time: Wed 06 Apr 2022 15:28:09 +0000
ROA not before: Wed 06 Apr 2022 15:28:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 45.137.97.0/24 maxlen: 24
2.56.251.0/24 maxlen: 24
2.56.249.0/24 maxlen: 24
2.56.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174274555 (0xa6337fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 6 15:28:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbfaccaf9ff5ba56ce0eea673d5ef2d5bd698d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:05:a3:07:f7:29:1c:db:be:57:77:23:23:54:
c3:cc:b6:ea:21:0b:e4:9e:d6:68:6f:b8:cf:94:d7:
76:c1:57:f7:59:3d:0f:25:96:54:e2:f0:8d:a8:61:
e0:d1:54:91:8d:81:56:8b:33:23:58:4e:01:de:e1:
34:a4:22:68:5e:2d:43:6e:11:7c:d1:ff:fc:a1:9e:
fc:5d:b0:55:9e:83:b0:08:3c:e5:51:df:7f:7e:fa:
9a:70:1e:cb:ee:80:9e:3a:ac:23:8a:3b:84:a3:ee:
91:c6:b6:45:ed:04:87:c2:d4:f3:b8:04:c3:0c:a8:
ad:ca:2a:5c:4b:d0:94:ab:2b:c3:46:52:af:49:79:
60:72:f7:20:0e:9e:7c:57:7f:18:ba:f1:97:02:03:
d4:19:be:e6:ae:26:1b:49:fd:58:5a:7c:3e:bf:28:
4e:20:e8:aa:c7:7d:7e:f1:5f:01:81:88:98:f6:c5:
b0:1b:54:43:87:1a:2a:1c:3d:d9:ce:5d:2d:8e:7c:
ee:c2:10:ee:a1:65:5b:0b:3c:11:2f:1c:69:59:ab:
47:80:a8:b8:73:58:0e:17:dd:87:89:01:8a:ea:c9:
d9:b8:0d:5b:b7:22:5b:db:32:a0:bd:33:40:9a:ba:
c9:9c:4b:b0:d8:01:17:e5:11:9d:d6:ae:ab:d1:65:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FA:CC:AF:9F:F5:BA:56:CE:0E:EA:67:3D:5E:F2:D5:BD:69:8D:1B
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/1-_rMr5_1ulbODupnPV7y1b1pjRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
2.56.251.0/24
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
72:1b:8e:f3:5f:16:02:f4:30:d8:d0:87:92:ec:29:e3:70:7a:
ca:da:28:29:08:e8:3a:96:a5:fd:25:bc:ee:f2:8a:1f:f7:1f:
58:34:03:9b:61:5d:74:11:07:52:89:f4:fd:10:6b:d3:9b:39:
f2:fa:17:3b:a4:38:e8:f0:b8:e9:0d:53:83:3c:a7:06:d1:58:
92:21:8f:eb:d8:87:48:68:3d:af:fa:42:4d:5e:2f:8c:5a:b2:
58:76:39:84:fa:77:ab:51:19:57:f9:40:36:c0:bc:da:19:17:
d3:7a:0b:d7:93:75:74:ff:36:a8:e3:c3:6b:c4:a1:51:f3:cb:
88:9d:23:fa:5f:b9:2a:84:7b:b3:cd:8d:29:06:cf:fa:25:66:
b8:ac:e2:21:e6:53:e3:dd:99:51:f7:14:24:4d:e9:28:5e:67:
5b:c8:23:a9:11:70:cb:9e:9d:4b:c3:b1:1c:2c:00:fa:58:a9:
a7:15:19:43:ef:99:13:60:15:12:18:90:d5:49:a0:14:db:8b:
58:f7:44:98:24:8d:36:45:db:a9:82:39:f5:a7:02:c3:81:08:
cc:0b:a4:39:38:56:c6:fe:c9:22:ce:d4:6d:ed:31:ad:99:de:
b0:5f:ba:e3:e4:89:d4:a0:2a:1a:5b:aa:7e:8f:7c:ed:b9:71:
2c:31:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org