Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zQABCL7sbYXyME3XZLuJATuknfc.roa
File: zQABCL7sbYXyME3XZLuJATuknfc.roa (raw, json)
Hash identifier: bYhwqRmeETnDbRleUC74eNdZJ3ePlB9ALRcz1Jpc3fA=
Subject key identifier: CD:00:01:08:BE:EC:6D:85:F2:30:4D:D7:64:BB:89:01:3B:A4:9D:F7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C53EF89EFDCE5357F600DE268A50B
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zQABCL7sbYXyME3XZLuJATuknfc.roa
Signing time: Sun 01 Jan 2023 22:55:45 +0000
ROA not before: Sun 01 Jan 2023 22:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212249
IP address blocks: 45.87.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:53:ef:89:ef:dc:e5:35:7f:60:0d:e2:68:a5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd000108beec6d85f2304dd764bb89013ba49df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:9c:42:ce:f9:9b:de:b1:80:13:fe:14:99:
14:10:85:3c:c1:dc:cb:6c:61:a5:67:35:29:13:46:
ec:62:f5:14:b3:d5:0a:a3:37:c6:05:86:c8:5e:77:
d1:84:ab:94:55:25:16:84:53:e0:fa:0a:73:9e:6b:
3e:69:09:ff:50:79:3c:25:4f:e6:0f:f1:27:45:b7:
2f:d7:f0:85:f9:b3:02:0b:32:22:f9:76:f5:b6:29:
0a:ce:6f:66:ba:61:3c:29:27:f9:cd:08:53:91:65:
9a:57:1c:a2:52:4d:4f:75:5d:c7:ee:73:b3:6c:a2:
4a:c6:4f:f2:6a:81:07:62:3b:45:00:9c:ec:f4:5f:
a6:d3:48:63:06:93:dd:f8:c6:ab:4e:d0:c8:9c:20:
c1:34:57:46:df:83:42:40:7c:2c:fa:af:77:29:56:
e6:29:d1:8c:dc:32:1d:3a:8c:e0:ca:bb:67:96:30:
0f:ae:ab:97:14:65:e0:2e:5a:3c:f8:e9:f0:63:95:
10:d7:33:54:bc:91:df:24:e3:5a:9e:61:7d:57:d6:
e3:c8:8c:69:df:0f:3e:78:2d:8f:48:ed:b4:89:20:
90:99:cf:1b:79:1f:5f:9a:ba:73:c2:e1:6d:c5:d4:
e5:fc:2f:46:35:55:e1:8b:71:45:1e:22:c1:20:8b:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:01:08:BE:EC:6D:85:F2:30:4D:D7:64:BB:89:01:3B:A4:9D:F7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/zQABCL7sbYXyME3XZLuJATuknfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f8:4e:c4:c5:27:d6:98:5f:e2:07:6b:04:9c:34:e9:79:84:
ca:3d:c9:8d:79:30:03:73:6e:7c:23:42:69:dc:94:15:92:7d:
c2:c7:d6:ab:96:22:cb:84:c0:40:43:0e:ef:d0:7a:ad:86:1b:
43:2e:c0:6e:d5:c0:e7:77:31:7c:17:bf:b7:3c:cd:67:68:dc:
0c:83:67:d9:e0:58:8c:a5:63:16:e4:c3:9c:a6:e7:e9:1f:d1:
1d:66:77:1d:d8:ff:d8:a1:e3:ae:f6:b3:67:7b:3c:e2:6f:7a:
14:d5:14:0c:03:94:c7:11:16:4e:30:2a:97:b2:75:db:4b:d8:
d8:dc:19:b5:e3:7b:99:ec:82:28:7e:51:c2:3f:99:86:45:b0:
65:4f:4c:58:93:9a:5c:ee:9a:bd:1a:72:a2:20:cd:fb:9b:5d:
9a:84:50:bd:8c:6e:12:83:ee:de:4e:d9:0f:a1:ad:4f:6d:4e:
d9:90:2b:1f:71:dc:01:21:55:a1:45:3c:1a:9e:fe:41:14:b9:
3a:59:e4:60:4b:39:5f:79:08:e3:20:d2:7f:4d:91:43:77:57:
03:45:1f:81:19:40:b7:6c:2c:33:86:a9:f4:7d:7b:78:39:67:
18:be:91:af:b2:bb:7b:36:c5:79:76:c0:e1:08:f0:f8:b2:64:
79:01:1d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org