Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/eFWSR9hApf4Mixb2p-3kTxjD5tM.roa
File: eFWSR9hApf4Mixb2p-3kTxjD5tM.roa (raw, json)
Hash identifier: DNStqigxRdxy6C4xazPoL0aknFHcEOnPsFBGqZU7y3c=
Subject key identifier: 78:55:92:47:D8:40:A5:FE:0C:8B:16:F6:A7:ED:E4:4F:18:C3:E6:D3
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0949F3A6
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/eFWSR9hApf4Mixb2p-3kTxjD5tM.roa
Signing time: Sat 01 Jan 2022 12:04:00 +0000
ROA not before: Sat 01 Jan 2022 12:04:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6939
IP address blocks: 45.12.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155841446 (0x949f3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 12:04:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78559247d840a5fe0c8b16f6a7ede44f18c3e6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:dd:b1:52:5c:ca:61:02:f5:52:09:30:1c:
24:bb:64:61:ae:f2:99:1e:36:01:f9:03:90:69:f2:
ec:60:58:19:a8:60:83:2f:0e:31:29:3b:fd:d7:cc:
1c:8f:48:ea:a8:69:1e:21:98:5f:ac:33:a4:8b:6f:
91:fd:09:f6:02:f6:a7:05:5b:d3:a4:19:2c:f9:01:
8e:ed:b5:3a:e1:36:7e:f3:c1:9f:7c:bf:c1:ba:80:
7d:a5:cf:21:ed:f2:c7:db:c7:68:2a:d8:76:06:b1:
17:74:c9:a0:f7:fa:5d:a2:77:bc:ef:2d:4b:a4:d2:
69:9b:dd:60:35:0d:76:bb:7a:86:f4:62:86:4b:10:
c5:ae:74:3b:08:fa:8d:18:81:1b:17:80:78:46:79:
ea:b8:3d:3a:75:83:44:a3:95:c9:13:1f:3a:72:56:
ae:57:f6:a8:1b:e0:36:c1:dd:a1:3c:b8:a0:13:3c:
64:74:61:5a:6b:9c:82:51:f6:07:43:5c:85:70:f1:
78:74:99:eb:97:f8:59:a5:16:0f:66:a8:93:0a:71:
ec:4d:c5:50:dd:48:a7:fc:bb:eb:11:90:9d:31:0a:
e4:a4:4d:f7:1c:60:75:f5:3f:b1:e2:68:0e:65:63:
1c:5a:29:b0:a9:20:20:7b:81:fe:85:d6:7a:b7:20:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:55:92:47:D8:40:A5:FE:0C:8B:16:F6:A7:ED:E4:4F:18:C3:E6:D3
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/eFWSR9hApf4Mixb2p-3kTxjD5tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:46:75:cd:d3:fe:2e:8f:7b:e4:81:cb:48:4d:ca:2b:34:8b:
10:52:c6:fa:3d:8e:20:4b:c3:e0:f7:3c:43:10:00:7a:66:22:
b5:98:41:95:9c:46:24:fd:d0:3d:ad:1b:ea:d7:b9:05:a5:5f:
77:81:4e:ac:de:6f:b0:94:4b:1c:fd:5e:12:f8:2b:3b:ac:51:
7c:f4:a8:34:14:8c:86:98:92:35:5f:81:12:a9:b6:52:60:ac:
50:9a:a0:56:75:f3:92:f7:a3:6f:7d:59:1b:9d:07:1f:7c:e4:
68:cb:14:cc:dd:b4:8f:23:8d:10:1a:ed:22:82:3c:10:85:f8:
c7:c0:ac:10:0e:f7:22:a0:15:2f:c8:37:55:bc:c5:d5:c0:27:
a1:92:7a:bb:00:81:eb:3a:66:62:fe:2f:1c:99:de:1b:9c:93:
99:eb:d5:c9:3d:f3:bb:ba:c5:2a:f8:0f:07:d1:a9:15:c6:59:
50:29:45:f9:d1:e3:d6:14:d0:2a:08:2d:04:51:a2:53:7f:04:
b8:27:d7:05:c7:88:61:a4:45:5a:cb:57:2f:ed:83:7f:9f:f7:
21:95:46:05:8a:4e:06:2d:53:23:92:2d:6f:05:ff:b3:37:d1:
a2:f3:69:69:59:ef:57:95:91:47:eb:d9:4a:3b:28:6f:8e:df:
4a:ed:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org