Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zCqE02kmNgcT3nkO9MZUIuyDB68.roa
File: zCqE02kmNgcT3nkO9MZUIuyDB68.roa (raw, json)
Hash identifier: djokex1TtcWU0QkXoNoE68G1SCo7p+M5h+cHYZooZ/o=
Subject key identifier: CC:2A:84:D3:69:26:36:07:13:DE:79:0E:F4:C6:54:22:EC:83:07:AF
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186A34B0B5E8600180992A8FBE58AC33C6F
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zCqE02kmNgcT3nkO9MZUIuyDB68.roa
Signing time: Thu 02 Mar 2023 17:07:29 +0000
ROA not before: Thu 02 Mar 2023 17:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 45.12.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:4b:0b:5e:86:00:18:09:92:a8:fb:e5:8a:c3:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 2 17:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc2a84d36926360713de790ef4c65422ec8307af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:79:0a:e9:ff:c0:0b:60:5b:a7:6f:74:58:b0:
91:9b:9c:16:8c:ce:29:32:01:d7:7e:ba:0f:c9:73:
35:d5:af:5a:c0:e8:2d:90:d0:f1:5c:ab:81:f0:25:
e0:af:97:25:97:0b:20:fc:e8:e4:8b:d0:7d:c5:3d:
0a:af:e0:9f:61:0d:9e:bb:db:c3:ae:cb:8d:15:2d:
6f:54:cf:71:a6:d3:80:af:f0:0c:56:3b:de:65:4c:
b6:ee:c6:6b:84:42:89:24:3a:44:7d:81:31:35:38:
08:12:3a:e6:09:a4:ae:c4:b6:32:25:34:8d:1f:32:
7b:f8:d9:8f:f1:2a:97:f9:f2:57:65:2c:f5:05:d9:
23:c8:f5:8c:30:d8:ce:96:4f:1b:ee:65:93:10:87:
d6:88:37:3a:6b:92:70:5e:31:2b:44:0c:c7:aa:0b:
a3:97:13:3f:78:50:92:e8:a1:91:2c:75:af:21:90:
e5:04:40:97:96:d6:3d:87:cf:21:c2:13:70:e5:a8:
4e:c3:92:bb:75:ad:54:a5:69:2c:12:36:4e:38:b1:
30:e3:86:fd:8a:ee:73:c9:45:2b:9a:5e:c0:84:8b:
cb:c1:d6:3b:41:79:40:76:28:01:60:6d:78:84:19:
27:4f:c6:cb:16:21:13:bb:94:08:20:71:f1:ac:63:
8a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:84:D3:69:26:36:07:13:DE:79:0E:F4:C6:54:22:EC:83:07:AF
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zCqE02kmNgcT3nkO9MZUIuyDB68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:76:3b:bb:ee:b8:4c:d1:c7:77:5c:64:c7:3f:af:fa:da:72:
5d:e6:94:25:d9:13:e9:af:dc:0c:81:c0:fe:c4:8a:22:fb:da:
94:de:9f:8e:b7:8c:46:cc:cc:20:58:ce:f2:2b:b3:f3:c0:e8:
3d:51:d3:7f:79:43:a2:36:72:f9:51:e2:82:90:eb:80:2d:3a:
62:6f:69:bd:8d:23:83:7e:0a:70:77:25:af:7c:43:bf:61:a1:
e1:22:5c:00:f6:86:14:36:66:be:7c:1c:fd:5e:3a:a7:1e:b7:
44:17:d1:9b:3e:df:07:26:b2:ea:aa:16:df:37:34:7c:8d:a2:
9a:0b:51:34:1b:e7:0b:c9:32:74:96:d0:a2:84:ce:76:8a:6a:
10:f6:c3:d9:af:35:00:d5:26:36:90:9e:13:ad:51:41:01:f5:
ad:28:b0:16:40:3f:6f:d0:1a:1d:76:76:3a:b0:e2:68:23:a6:
9d:5e:0d:6f:b1:84:25:6e:e5:57:d7:8a:60:0a:d5:fa:cd:bb:
fa:51:bf:a1:a7:86:39:e1:31:cb:dd:3e:fb:03:24:58:73:27:
b6:88:39:1f:1d:1a:42:02:55:6c:d6:36:b0:b3:e5:6d:e6:c0:
e4:66:93:39:a3:47:1c:9b:e8:6c:71:54:2a:00:d1:bc:72:e9:
6a:e6:3b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org