Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Aza1YkpyB8YYbk0KmWLWz90NoXc.roa
File: Aza1YkpyB8YYbk0KmWLWz90NoXc.roa (raw, json)
Hash identifier: V87c2A7m9aWaiiZNDADOAhZSUek/xuNtJP/mrUs1/sg=
Subject key identifier: 03:36:B5:62:4A:72:07:C6:18:6E:4D:0A:99:62:D6:CF:DD:0D:A1:77
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018555004F4F189D1D4DBF0ED0E139B5984A
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Aza1YkpyB8YYbk0KmWLWz90NoXc.roa
Signing time: Tue 27 Dec 2022 19:12:41 +0000
ROA not before: Tue 27 Dec 2022 19:12:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.158.56.0/24 maxlen: 24
45.87.175.0/24 maxlen: 24
45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:00:4f:4f:18:9d:1d:4d:bf:0e:d0:e1:39:b5:98:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 27 19:12:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0336b5624a7207c6186e4d0a9962d6cfdd0da177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:53:39:f8:b0:1e:b0:3b:2c:0f:38:ea:26:32:
98:10:ec:db:da:c4:a2:14:35:e9:20:ac:ef:8b:22:
d3:bd:33:43:f4:71:2e:93:32:e4:7f:39:b7:55:11:
29:0a:22:6f:2b:6b:d8:cb:90:11:20:84:41:43:ca:
4f:12:bd:9c:15:05:c5:43:55:78:88:86:1c:f1:e1:
47:ae:2a:42:23:39:1d:74:4a:21:2b:3c:6c:53:ab:
48:67:a5:6e:f3:78:a6:9e:2c:d5:71:fb:66:2a:3c:
d9:be:e3:b5:b8:cf:68:b0:9e:14:92:4c:ea:c8:1f:
fd:be:f0:bb:c7:da:8a:a7:c9:59:0c:47:19:3f:72:
2c:74:79:1c:dd:ef:cb:ca:e0:fe:58:7a:a6:5f:7e:
ec:00:a8:0c:28:d9:93:73:9b:7c:0c:ac:4d:a1:c2:
b3:52:ff:40:af:6e:82:22:c7:24:2e:51:ab:2f:d6:
45:fb:c6:7d:25:df:76:26:86:41:8f:f3:b1:d8:2a:
ad:7b:63:1f:d9:18:b2:f4:b6:39:19:77:f9:88:c9:
08:ae:d5:0c:2c:19:78:d2:65:ff:de:e9:12:7f:a4:
0c:60:0e:1c:64:ce:ae:49:cd:04:39:9b:66:6f:f6:
2e:45:9a:c2:40:43:ca:69:97:f9:5c:4a:3d:f2:0d:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:B5:62:4A:72:07:C6:18:6E:4D:0A:99:62:D6:CF:DD:0D:A1:77
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Aza1YkpyB8YYbk0KmWLWz90NoXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.175.0/24
45.137.99.0/24
45.158.56.0/24
Signature Algorithm: sha256WithRSAEncryption
71:47:63:52:8a:40:9d:24:2a:db:27:84:07:bf:ed:60:3e:6f:
2e:c5:49:59:cf:8c:e3:6b:25:71:9e:ce:11:a7:f8:20:40:32:
27:23:15:c6:01:5d:30:7f:7d:b2:f0:5e:ba:70:03:eb:74:bb:
b5:41:30:1b:48:a1:ba:6b:46:33:18:df:a7:60:78:a4:4b:68:
fd:e1:2b:0a:31:63:93:da:34:0c:74:8c:85:ac:be:4e:96:df:
20:11:79:b0:7a:6f:4a:56:74:97:92:1d:35:d8:15:0a:a2:de:
99:5f:11:ef:79:f8:9f:5c:95:bc:51:a7:12:0c:fc:29:c8:16:
18:f4:84:cb:e6:9b:90:e4:02:eb:3c:fe:fe:75:4c:c0:77:65:
35:24:ff:4c:08:d8:2e:3a:63:e9:4c:dc:9e:04:4c:1a:cd:66:
2a:01:15:a7:85:e6:5b:a6:10:79:1d:f4:54:d3:b0:50:1b:10:
64:72:fb:19:ca:65:6f:4a:77:19:4b:b4:d4:66:20:df:02:01:
f2:ba:aa:d1:e2:9c:bb:e0:36:47:f9:b6:3d:a8:75:d6:4e:ad:
0e:ed:a0:33:ff:a5:d2:e0:0d:03:09:54:35:93:aa:d9:8a:34:
03:0e:12:d5:4e:f7:f7:d2:97:a0:a2:18:ce:cb:e6:0c:04:fd:
97:4c:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org