Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/iLOKCSxrCYc3q-09dQlv3eOd3QQ.roa
File: iLOKCSxrCYc3q-09dQlv3eOd3QQ.roa (raw, json)
Hash identifier: 5xog0zXqPolCtDCvhU9Yy1KQj66gy6bL7D8yPvPG/VE=
Subject key identifier: 88:B3:8A:09:2C:6B:09:87:37:AB:ED:3D:75:09:6F:DD:E3:9D:DD:04
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 09F089C0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/iLOKCSxrCYc3q-09dQlv3eOd3QQ.roa
Signing time: Thu 03 Mar 2022 05:22:59 +0000
ROA not before: Thu 03 Mar 2022 05:22:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29538
IP address blocks: 45.158.56.0/24 maxlen: 24
45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166758848 (0x9f089c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 3 05:22:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=88b38a092c6b098737abed3d75096fdde39ddd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:30:cb:fc:fc:01:c4:3c:18:55:c0:1b:e5:
7d:2e:ea:b9:49:22:cd:57:6b:30:d2:34:63:a3:98:
68:f1:0a:8b:5c:79:b2:e2:a6:61:7d:8c:9a:8f:76:
8b:0a:38:5a:60:81:a0:3b:0a:12:2b:0f:3f:ed:4d:
e8:70:6c:ad:e7:85:8f:a5:d7:2d:3e:d5:48:79:c9:
74:56:60:93:f1:fd:55:45:45:df:10:77:1e:1f:78:
9f:5f:7b:20:59:48:0c:b7:a7:6c:c5:f2:c1:51:16:
61:ad:7f:3e:1e:06:a4:39:a9:a2:07:5a:64:70:3f:
41:d2:6f:56:24:3f:6e:09:4a:d4:ca:fe:fd:e2:fb:
2d:b8:46:1b:f2:0f:63:1f:7a:e4:d8:d2:91:1d:5a:
72:64:3c:00:5a:1e:8c:ce:18:2f:7a:29:ac:1e:88:
67:ea:64:a1:63:11:4b:9e:77:ef:35:c7:60:1d:4d:
9b:3d:88:a6:c2:bb:8e:b9:6c:a5:07:94:3a:6d:57:
b0:8d:c2:42:19:42:73:a2:6f:81:a8:bd:32:2e:73:
fc:ea:9d:68:e1:58:b9:61:c6:e0:a5:64:b3:91:76:
f6:70:69:49:fc:a5:c7:19:22:2f:14:8e:22:48:ea:
df:e4:76:b3:0c:80:79:1a:f2:7f:82:10:cf:6e:4a:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:8A:09:2C:6B:09:87:37:AB:ED:3D:75:09:6F:DD:E3:9D:DD:04
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/iLOKCSxrCYc3q-09dQlv3eOd3QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
45.158.56.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a5:bf:f9:c3:b8:4f:43:ae:3f:99:6e:6d:a5:02:67:d0:54:
28:f0:58:e3:d1:2d:d7:e7:02:bd:d3:8e:a6:4c:2f:2e:44:b5:
fd:ce:0b:fe:35:b1:07:76:73:2e:c1:1c:c6:a7:f9:b0:98:51:
92:7f:07:92:c2:f4:1d:ee:be:cb:f3:c6:a5:75:52:09:15:50:
e7:af:34:e3:70:4b:10:1c:f6:28:00:c1:b0:e3:39:21:3f:6c:
6a:4b:50:1b:85:22:ff:0a:09:19:40:3c:ad:1a:95:46:4e:49:
47:c0:80:f5:ce:41:66:0f:ce:06:12:9e:07:9b:68:1d:ba:9a:
50:18:64:51:f2:92:bb:0a:37:ed:85:9e:4a:28:01:17:dc:c5:
0d:df:02:9d:52:ee:6c:ab:66:21:f9:43:84:b9:4a:3c:67:41:
af:90:c3:a0:54:c2:0b:63:18:1d:d8:52:11:b4:1a:21:ef:37:
aa:cb:4f:cb:05:8b:76:a9:72:c1:9c:2d:f4:63:68:47:c3:7f:
cf:6a:9f:b6:12:2f:64:db:d9:7a:81:1a:1e:83:2b:ec:96:df:
89:e0:db:87:07:7b:07:5d:f1:cf:47:55:90:4d:34:c4:67:17:
65:79:9c:3e:d9:76:34:65:8a:86:9c:04:86:9f:52:f5:65:c4:
d2:39:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org