Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/abf988-5587-435e-a1ea-afcc9f20c01f/1/bPp_3XLPuYOfpBd2FWYDdu-EHr0.roa
File: bPp_3XLPuYOfpBd2FWYDdu-EHr0.roa (raw, json)
Hash identifier: 8+c3+XZJ8qvVaOtRF/meroatt49bOpqmaX246IdvtO0=
Subject key identifier: 6C:FA:7F:DD:72:CF:B9:83:9F:A4:17:76:15:66:03:76:EF:84:1E:BD
Certificate issuer: /CN=9e4718c968ece5cae471e9c780181c1056baff95
Certificate serial: 080FDD3B
Authority key identifier: 9E:47:18:C9:68:EC:E5:CA:E4:71:E9:C7:80:18:1C:10:56:BA:FF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkcYyWjs5crkcenHgBgcEFa6_5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/abf988-5587-435e-a1ea-afcc9f20c01f/1/bPp_3XLPuYOfpBd2FWYDdu-EHr0.roa
Signing time: Sat 01 Jan 2022 02:01:19 +0000
ROA not before: Sat 01 Jan 2022 02:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57112
IP address blocks: 45.91.56.0/22 maxlen: 24
2a0e:c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135257403 (0x80fdd3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e4718c968ece5cae471e9c780181c1056baff95
Validity
Not Before: Jan 1 02:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6cfa7fdd72cfb9839fa4177615660376ef841ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:e0:a5:b5:05:3c:5e:bc:04:98:f3:d9:d0:39:
32:f0:ef:e6:65:8c:e0:d4:0c:83:53:86:c3:7b:5c:
14:ee:5a:d2:97:d2:77:fd:9e:53:d2:0e:16:84:ac:
95:06:ec:79:67:96:d6:bb:a3:46:08:c9:09:4c:c0:
fa:39:1d:b1:54:12:9b:0f:1e:09:c2:88:ad:4a:39:
7b:e3:0f:f7:51:1b:f7:90:72:a5:80:b2:54:2c:58:
f7:5f:59:05:9c:2a:68:32:22:bc:f6:21:cd:08:98:
a2:33:75:82:2f:8f:f7:09:c0:6f:be:c8:51:9f:bb:
d3:ec:c2:da:62:04:34:f2:bc:25:c0:93:09:53:25:
41:f0:7b:3c:fe:3c:89:83:97:5e:4e:9e:f2:99:85:
34:2b:57:f4:d7:84:24:4b:e5:f4:02:38:1b:54:4f:
bf:ad:00:76:fc:f8:b1:5e:e1:77:db:dd:2d:7c:ae:
de:74:fa:67:b9:99:8e:6d:7b:15:97:5f:61:29:38:
07:3a:d3:a5:0c:a0:6d:a8:dc:a1:28:17:52:39:89:
77:5e:36:05:50:e5:b1:47:e5:db:15:51:36:76:68:
56:79:86:d9:44:d5:21:76:62:36:13:3c:e7:79:61:
af:5e:76:6e:93:89:11:98:e9:8d:95:d6:3c:3d:19:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FA:7F:DD:72:CF:B9:83:9F:A4:17:76:15:66:03:76:EF:84:1E:BD
X509v3 Authority Key Identifier:
keyid:9E:47:18:C9:68:EC:E5:CA:E4:71:E9:C7:80:18:1C:10:56:BA:FF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkcYyWjs5crkcenHgBgcEFa6_5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/abf988-5587-435e-a1ea-afcc9f20c01f/1/bPp_3XLPuYOfpBd2FWYDdu-EHr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/abf988-5587-435e-a1ea-afcc9f20c01f/1/nkcYyWjs5crkcenHgBgcEFa6_5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.56.0/22
IPv6:
2a0e:c40::/29
Signature Algorithm: sha256WithRSAEncryption
2b:c6:40:b6:47:d7:d8:06:0e:f3:b0:b9:b0:f2:f2:50:40:eb:
49:a2:32:5c:b2:3f:bb:a9:fd:d3:a8:e9:f0:8a:39:60:d8:20:
4c:dc:56:26:e7:85:bf:56:16:3e:98:08:be:dc:6a:ed:d8:19:
cb:a6:38:af:c2:a0:f1:37:a1:be:2b:4c:1b:7e:07:6e:2a:eb:
f4:86:e9:3f:e5:65:2a:eb:04:ef:72:ae:08:b5:d6:66:39:fc:
f5:af:a6:fc:d8:e8:51:e5:ef:3c:8a:bb:35:16:e7:9a:af:a8:
c9:50:92:8a:aa:bc:59:6f:2a:8c:07:eb:8b:f7:b8:4a:ba:f7:
48:91:e2:d8:03:c2:ce:7f:5a:f7:84:32:82:dc:72:d2:9c:c4:
1c:b4:4a:5c:29:c8:1f:05:4c:d3:cc:78:4b:9e:07:50:c9:ed:
21:07:82:46:8e:3e:3c:2f:f5:c2:4f:05:08:1e:9b:4b:c7:80:
78:37:cc:7d:61:60:71:06:94:68:96:27:7a:51:ed:79:ec:e4:
ea:45:ec:7a:c3:d4:6f:54:0a:48:d6:a7:26:c8:40:91:4f:36:
27:6e:15:ea:81:df:4c:69:5b:89:2e:de:e9:bc:6d:3b:59:aa:
6a:c1:3b:61:c1:b9:9e:e2:54:d5:a9:89:03:3a:cb:b4:b1:4c:
15:bd:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:15 2024 by rpki-client on console-ams.rpki-client.org