Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Pq5yAAyNdkbN8S9G1FTejwneIe0.roa
File: Pq5yAAyNdkbN8S9G1FTejwneIe0.roa (raw, json)
Hash identifier: 4ie8i7YADWWAffulyV8mVaPzxJQEj6b7OTu5WlSVLPU=
Subject key identifier: 3E:AE:72:00:0C:8D:76:46:CD:F1:2F:46:D4:54:DE:8F:09:DE:21:ED
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09FFACCA
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Pq5yAAyNdkbN8S9G1FTejwneIe0.roa
Signing time: Mon 07 Mar 2022 17:08:41 +0000
ROA not before: Mon 07 Mar 2022 17:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395111
IP address blocks: 45.158.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167750858 (0x9ffacca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 7 17:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eae72000c8d7646cdf12f46d454de8f09de21ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:a4:c7:15:39:40:d4:4e:eb:54:ca:ec:2c:
b5:ec:5b:c2:0e:ea:cd:58:a5:15:b1:dd:a1:06:6b:
66:93:b0:7b:ad:4a:56:d9:8c:c3:4f:69:0b:5f:09:
b5:74:6f:b9:e7:79:3f:e8:31:bf:b1:d7:6d:2f:a3:
02:17:7f:16:4d:bf:70:80:29:ae:32:61:c3:e9:e0:
79:70:77:c8:8f:e3:06:ba:12:47:ab:5a:d8:51:eb:
ed:66:54:f8:4f:48:e5:81:9f:75:05:ee:1a:86:76:
37:1f:60:22:f9:81:03:23:f3:b4:39:c3:72:c6:70:
5e:98:a3:a5:fa:2a:f8:85:c8:44:7f:a3:5f:3a:92:
12:c0:28:cd:1d:64:fc:2b:7d:80:30:fa:14:b5:89:
85:bf:a0:5b:5c:38:50:23:fc:65:1a:17:b1:60:13:
4a:b1:ff:2c:74:b0:77:bb:bd:d7:a9:0b:4d:f4:95:
dd:ec:6a:18:1f:c6:cd:09:61:b7:e5:0c:56:6f:5b:
41:2e:5a:83:ca:c8:cb:56:bb:b8:0d:ff:a0:ff:8a:
62:b0:f3:cc:ba:ba:bd:79:34:f5:27:d4:19:b4:13:
88:a7:07:ec:6a:f9:7f:22:c0:cb:dc:3d:69:80:18:
e2:73:ca:4f:a1:77:b2:e6:95:4b:08:82:ca:93:1e:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AE:72:00:0C:8D:76:46:CD:F1:2F:46:D4:54:DE:8F:09:DE:21:ED
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Pq5yAAyNdkbN8S9G1FTejwneIe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:97:16:d5:81:1d:ba:2e:7f:43:60:57:97:3d:76:ff:26:7f:
31:47:4e:fb:49:e0:22:d2:d4:3d:50:f2:63:81:20:16:d7:cd:
58:84:1a:e2:af:b2:aa:c5:50:2e:e8:8c:6b:9a:85:51:53:09:
8a:b4:97:64:14:97:ea:63:ae:b6:5b:31:14:91:a8:0b:c0:c2:
26:fc:a7:23:f3:ab:fa:1e:ea:56:37:4f:77:c1:7d:db:9e:88:
89:0e:49:5d:d9:e4:a7:91:76:4f:37:3f:75:70:f0:0f:23:ae:
44:e8:3e:f5:10:31:a2:aa:1b:4c:1c:91:92:57:e4:1a:09:a4:
80:1c:54:2a:34:a0:a2:e9:05:5e:1d:da:39:1a:02:25:7f:8e:
4a:21:ae:77:ef:5e:cf:ca:ec:62:9a:11:2e:49:6b:1e:98:5d:
57:06:c9:ec:64:84:f6:b2:a4:1c:5b:19:f6:96:10:01:f5:ea:
6a:04:f7:99:df:55:51:5b:df:0b:d4:d9:dc:6e:cc:d1:43:d3:
2e:42:92:8d:59:21:3d:b6:b6:b5:4c:62:a6:1f:05:95:6c:4a:
f4:e6:d2:6f:bc:da:f5:52:ba:01:c7:68:31:f6:d9:a1:9c:2b:
87:6c:a4:20:fe:d3:6b:96:cb:13:f1:6f:2d:3d:d0:93:ac:de:
f4:b6:f3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org