Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/vJ8UsBJQyKdw2fYakPQuV_apbt4.roa
File: vJ8UsBJQyKdw2fYakPQuV_apbt4.roa (raw, json)
Hash identifier: roS0Os/O+pN30jc8d5Tvk2ysiWF+u1E4Esmlz1nhiBM=
Subject key identifier: BC:9F:14:B0:12:50:C8:A7:70:D9:F6:1A:90:F4:2E:57:F6:A9:6E:DE
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A8E70AC
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/vJ8UsBJQyKdw2fYakPQuV_apbt4.roa
Signing time: Thu 21 Apr 2022 15:45:41 +0000
ROA not before: Thu 21 Apr 2022 15:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398464
IP address blocks: 45.12.82.0/24 maxlen: 24
45.12.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177107116 (0xa8e70ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 21 15:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc9f14b01250c8a770d9f61a90f42e57f6a96ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:d7:6f:0e:9c:8d:ae:4b:c4:5d:1c:83:e0:
bf:3f:da:c4:a4:f8:47:28:6d:ac:45:05:b7:b4:fe:
e7:52:87:ee:ba:57:88:fc:c7:88:44:61:e6:d2:57:
b5:7d:3a:8c:9e:10:7f:c7:95:0f:ee:b6:b3:dc:7f:
1f:33:2a:01:8c:17:76:37:ae:23:6a:64:db:03:f8:
b9:f3:e0:35:b8:68:f9:6b:97:22:c0:a6:4f:c5:fd:
80:d4:bb:8a:9d:00:e3:58:db:d9:1c:25:4b:1c:4e:
61:ee:d8:41:7c:4d:10:62:39:eb:91:48:5b:27:a6:
9e:de:28:03:24:4c:ed:91:55:51:b2:f1:a2:01:d6:
44:5b:42:6e:de:e3:0d:a8:ed:11:61:fb:72:07:f7:
99:ee:8f:0e:99:a7:87:76:11:f0:8e:8c:13:5b:97:
2e:f8:aa:2a:f1:32:f5:bf:62:4a:95:ea:b5:16:ec:
23:f6:94:72:7e:34:9b:06:53:e2:8a:ec:3e:98:b0:
f3:76:30:c9:46:ac:28:0c:a8:22:f0:8b:72:79:47:
8e:ed:72:0f:c2:50:08:87:3c:76:b6:9a:ac:77:91:
5b:bb:c3:72:6b:7b:28:d6:af:29:9d:03:e1:00:e0:
84:32:90:7b:38:50:44:8f:79:84:ef:36:55:73:11:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:14:B0:12:50:C8:A7:70:D9:F6:1A:90:F4:2E:57:F6:A9:6E:DE
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/vJ8UsBJQyKdw2fYakPQuV_apbt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.82.0/23
Signature Algorithm: sha256WithRSAEncryption
25:bc:79:55:3f:23:11:ef:ec:c3:78:7d:e5:dd:c2:59:c2:e3:
ff:65:b1:b3:3a:80:d3:a1:51:2b:10:0b:9b:10:2a:5b:d2:56:
18:5b:31:e4:10:34:17:3c:8b:23:db:26:ef:97:4f:c1:7e:16:
1d:8d:e4:eb:ea:f4:d2:f1:d8:32:4a:9a:b7:47:d4:e2:db:61:
4d:d7:fa:68:2f:f4:fd:0d:b5:c5:72:b7:76:9e:40:ce:c1:e8:
82:90:4c:cf:e8:27:d3:d0:02:12:b1:41:40:1e:8a:e9:2f:42:
d4:ca:de:07:01:41:d7:2b:50:2e:89:bb:f2:34:a3:0c:56:79:
64:26:1c:bc:6a:32:44:db:b0:d4:53:51:48:8f:95:ef:2b:77:
41:59:97:66:fd:bc:61:21:ae:ff:71:0a:f4:df:5f:aa:70:ed:
b6:a6:7e:1c:3f:c7:11:72:04:96:49:a7:5e:09:59:09:d2:4a:
ac:c9:05:46:23:ed:45:9a:bc:5d:97:85:d7:01:16:aa:eb:25:
9c:22:1f:de:c6:29:3c:01:1c:36:0f:88:de:87:83:dc:23:8b:
29:0f:8d:b6:ca:a8:f0:2c:4c:7d:74:93:e9:3a:3f:0f:9e:d0:
9c:ce:7c:53:f8:b5:61:24:7e:79:26:69:41:2e:13:70:52:d3:
9d:bb:aa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org