Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/2cxLDUPs5A5rIt1GFghrPeUBHCI.roa
File: 2cxLDUPs5A5rIt1GFghrPeUBHCI.roa (raw, json)
Hash identifier: y96B7i46P9wt3Jwn61YgYvpfoENQqre27zW0SXP/wiU=
Subject key identifier: D9:CC:4B:0D:43:EC:E4:0E:6B:22:DD:46:16:08:6B:3D:E5:01:1C:22
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09642C36
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/2cxLDUPs5A5rIt1GFghrPeUBHCI.roa
Signing time: Sat 08 Jan 2022 19:08:44 +0000
ROA not before: Sat 08 Jan 2022 19:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210837
IP address blocks: 45.137.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157559862 (0x9642c36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 8 19:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9cc4b0d43ece40e6b22dd4616086b3de5011c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5d:8b:c4:f4:62:34:ac:43:76:fe:27:b9:20:
fa:3e:fe:da:cd:ee:10:dd:d0:c0:89:d0:21:ea:b9:
6d:f6:e9:15:98:84:be:0a:0d:fe:08:27:f0:34:b9:
1d:ed:a8:a0:f1:7d:81:61:36:3d:80:26:fb:e3:ff:
e0:b5:a6:b7:50:b9:21:5a:4b:5d:45:8b:4f:15:9c:
dd:e1:be:e4:30:02:05:8d:56:39:dc:7f:f4:f6:0e:
f6:96:20:f6:1e:01:58:ca:97:a9:0c:05:1d:8f:a4:
37:23:17:90:f3:c4:b9:2d:6e:98:d4:a2:bd:72:90:
62:2b:6f:be:c0:27:fe:51:cf:fb:fd:26:39:e2:ea:
b5:8b:58:d5:7d:eb:e1:e3:10:76:58:2d:82:43:60:
9a:8b:e0:31:44:27:00:d3:9f:4a:3d:44:c6:4f:d1:
15:af:25:de:c4:3f:13:81:05:f5:5c:67:a2:75:70:
64:1b:e1:28:6b:53:5e:7f:b0:12:d2:51:a1:5d:96:
4a:f8:1b:86:97:91:f3:ee:06:4a:47:bb:04:8f:35:
48:2f:5c:7b:c6:2a:2f:15:0d:c4:50:36:25:24:f6:
f6:50:af:ab:e8:8f:ca:a7:e3:96:8f:16:d3:7e:1f:
fa:65:db:19:9d:ad:ec:b7:07:82:e4:30:1c:7b:2e:
2e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:4B:0D:43:EC:E4:0E:6B:22:DD:46:16:08:6B:3D:E5:01:1C:22
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/2cxLDUPs5A5rIt1GFghrPeUBHCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.96.0/24
Signature Algorithm: sha256WithRSAEncryption
64:04:8b:46:d9:12:e0:40:e2:31:bc:4d:30:3a:2f:1a:34:9e:
c0:72:5f:0c:19:51:b7:19:2c:b4:c8:bf:d6:85:ec:a4:0e:78:
81:b9:d3:78:ea:92:aa:95:64:d8:f9:79:86:81:f3:47:17:79:
16:2c:04:c3:f5:a4:01:48:ab:aa:52:6d:bd:0c:88:2f:dd:87:
26:c6:2e:35:99:5d:47:1a:d2:0a:ca:03:26:6a:f4:ec:3c:38:
63:e5:65:f4:57:fc:da:f7:29:a9:0d:1a:1d:f6:b7:41:38:c4:
5c:17:77:aa:b7:a0:9e:a6:61:ae:52:3e:88:4a:72:6b:78:7b:
b7:ae:20:94:a4:32:a3:25:d3:4e:bf:db:02:4a:8c:cf:ba:a2:
fc:13:9f:24:53:86:24:a6:8d:42:c4:ff:f8:a4:e3:f7:79:1e:
b4:35:52:05:d3:66:4e:18:5d:14:ff:43:4c:cf:ac:a7:f9:24:
3d:30:56:66:9d:94:06:42:6f:00:07:34:11:69:21:d0:c3:60:
ce:ea:c9:13:27:23:d6:2c:e4:0f:69:00:cc:2b:8b:3b:01:e8:
b9:14:93:79:b0:b0:a6:cc:71:93:a7:bb:f9:4b:06:9c:9e:d7:
c7:9a:7c:11:0a:c4:3c:d1:00:49:cc:fe:fb:d5:68:00:0a:27:
f9:a4:c7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org