Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/qPlpfmKUQPnKx0aZ1oVLy9lVQkM.roa
File: qPlpfmKUQPnKx0aZ1oVLy9lVQkM.roa (raw, json)
Hash identifier: hQGvKwb3kH56kFujWjcXAgPpqqjwxZWWtw7kYg5VFg8=
Subject key identifier: A8:F9:69:7E:62:94:40:F9:CA:C7:46:99:D6:85:4B:CB:D9:55:42:43
Certificate issuer: /CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
Certificate serial: 01856E01F45650ECEE5B94629DD7A862E1CE
Authority key identifier: CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/qPlpfmKUQPnKx0aZ1oVLy9lVQkM.roa
Signing time: Sun 01 Jan 2023 15:44:59 +0000
ROA not before: Sun 01 Jan 2023 15:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203744
IP address blocks: 45.131.117.0/24 maxlen: 24
45.131.116.0/24 maxlen: 24
45.131.116.0/22 maxlen: 22
45.131.118.0/24 maxlen: 24
45.131.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:f4:56:50:ec:ee:5b:94:62:9d:d7:a8:62:e1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce35f27df3e37f53f0abf743eec1d516648d2dd8
Validity
Not Before: Jan 1 15:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8f9697e629440f9cac74699d6854bcbd9554243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:f6:12:a4:b8:30:a1:56:e3:49:21:ac:e9:
2d:85:31:8e:66:f2:e6:4d:58:53:96:7b:92:d8:16:
69:65:51:50:20:7d:02:12:ac:2c:bf:df:cc:12:83:
04:43:1f:9e:6a:1f:02:b2:0b:a5:fc:5a:7d:93:83:
e4:58:e7:a5:6d:ff:65:ed:a1:8b:96:a9:e4:f2:c7:
40:92:c8:70:86:46:08:1d:f4:62:53:93:d2:3e:9c:
00:7a:8f:24:fb:95:ad:10:7a:72:81:89:2b:7d:cc:
39:b0:a5:89:d8:06:ca:fc:4e:f8:c3:9e:b7:c9:2a:
2c:9c:69:2e:99:14:c5:ec:4e:48:49:ef:2a:9d:f6:
20:16:7f:ed:7d:28:17:fa:f9:8a:6e:f9:51:3f:5d:
10:5b:44:6f:ee:d6:66:c2:dd:d4:33:c3:e4:3d:fe:
f0:94:98:f9:d8:1c:c7:ed:2f:4f:ba:35:a0:34:be:
d1:14:c0:e8:bc:65:31:14:95:2b:9a:ce:02:f1:40:
39:76:6c:1f:a1:44:b8:42:db:da:7f:f7:8a:1b:c2:
a9:0b:5d:bc:6b:8a:ab:46:78:f1:2c:09:c5:7e:7a:
93:5a:08:c6:7e:bd:ed:a9:c7:b4:ef:44:5b:40:f5:
96:bd:25:50:7b:1b:9a:e7:75:67:b4:bd:3e:1f:14:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F9:69:7E:62:94:40:F9:CA:C7:46:99:D6:85:4B:CB:D9:55:42:43
X509v3 Authority Key Identifier:
keyid:CE:35:F2:7D:F3:E3:7F:53:F0:AB:F7:43:EE:C1:D5:16:64:8D:2D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjXyffPjf1Pwq_dD7sHVFmSNLdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/qPlpfmKUQPnKx0aZ1oVLy9lVQkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/28a378-894c-44ca-a171-df0282a12ce3/1/zjXyffPjf1Pwq_dD7sHVFmSNLdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.116.0/22
Signature Algorithm: sha256WithRSAEncryption
40:dc:dc:37:c5:1e:84:45:f0:59:bd:67:d6:01:05:f9:89:55:
e1:14:17:05:68:97:40:27:90:e8:9a:d0:74:88:79:ec:a7:8d:
98:92:76:c0:be:04:bc:d6:8b:82:36:a7:d3:fd:ec:d3:47:d5:
12:bc:51:0f:a7:35:df:7c:f3:4d:3a:de:03:9a:0b:60:5a:6f:
cb:27:e8:01:f4:eb:f1:1d:3b:ba:ef:e4:9c:9c:d2:c2:2a:44:
ca:77:9d:11:c7:8f:e6:d6:01:19:56:28:1b:b4:c8:96:b0:07:
16:5b:34:1d:68:e3:04:e5:72:c7:8d:25:bb:cc:9c:9b:a7:35:
d4:5a:79:e6:50:ca:18:7c:f5:71:ed:d0:d0:6d:54:3a:92:a6:
e7:6c:98:7b:cd:43:68:77:48:b6:7b:8b:d8:44:e6:76:01:74:
56:8f:7c:1d:f5:31:aa:3c:64:74:fb:30:52:1e:fb:79:82:b1:
7b:2e:79:97:33:1f:14:2d:c1:f0:f3:d9:bf:bc:9b:f0:8a:97:
88:9b:a0:eb:7f:e2:74:f0:14:45:2f:82:6c:b0:1c:7c:01:a5:
a2:66:c1:c5:08:06:db:4c:66:72:4e:ed:29:16:be:2c:16:29:
69:0b:ca:1a:1a:da:a9:e4:33:76:3a:d1:01:24:32:9a:c6:5b:
00:08:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:14 2024 by rpki-client on console-ams.rpki-client.org