Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/IeRY6MOc7TUzSm5c2gVl8GaIE5s.roa
File: IeRY6MOc7TUzSm5c2gVl8GaIE5s.roa (raw, json)
Hash identifier: JwQZcgGvSXmMcTojncSlPcC1b/DCcS1d8oZqu3JVKy4=
Subject key identifier: 21:E4:58:E8:C3:9C:ED:35:33:4A:6E:5C:DA:05:65:F0:66:88:13:9B
Certificate issuer: /CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
Certificate serial: 038C0FE5
Authority key identifier: 40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/IeRY6MOc7TUzSm5c2gVl8GaIE5s.roa
Signing time: Sat 01 Jan 2022 07:53:52 +0000
ROA not before: Sat 01 Jan 2022 07:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44094
IP address blocks: 45.138.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59510757 (0x38c0fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40aa0cc8e165cd705221f3aa8aa6e6288462013e
Validity
Not Before: Jan 1 07:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21e458e8c39ced35334a6e5cda0565f06688139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f2:db:db:39:c1:f8:f5:c6:da:7f:e0:4f:e2:
b4:cf:2a:e2:80:f7:8a:7c:e2:36:90:5d:9f:6e:85:
b5:67:d0:67:05:5d:00:d6:3e:0a:d2:e5:63:56:15:
0a:ed:3d:03:11:89:3a:bb:75:c3:36:05:9b:b9:b6:
b2:f6:7a:b4:d2:84:ca:40:9d:2e:7b:23:e4:d8:c7:
a7:a3:f5:5a:df:6c:f8:80:a6:4a:00:e7:9f:6f:41:
0e:94:46:bc:3a:ea:6a:1e:91:b4:02:3a:9b:cf:35:
51:97:c2:5b:5e:fd:ba:cb:46:21:75:5f:39:c3:26:
88:04:ab:a4:17:4b:bb:91:86:78:fb:5b:0f:01:59:
10:79:bd:ec:3e:8d:9d:81:ef:34:3a:01:22:a0:9d:
ef:5e:8b:2c:57:9d:cb:d3:43:61:b8:e3:a2:68:76:
e7:f7:9c:11:e1:b5:90:ce:2f:9f:aa:56:87:b4:4f:
57:d2:d6:b3:9d:41:b9:d9:68:75:05:12:eb:87:b8:
6d:d2:f7:58:fe:47:24:55:5f:98:e7:08:d2:bc:3f:
19:54:73:04:77:f2:1c:18:b7:f8:6b:2b:2c:83:e3:
74:1a:67:b3:65:b1:35:30:c4:d4:6d:0e:fd:fe:b9:
e5:b9:b8:a7:6b:23:a3:c3:f7:3f:ef:d5:23:77:c3:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:58:E8:C3:9C:ED:35:33:4A:6E:5C:DA:05:65:F0:66:88:13:9B
X509v3 Authority Key Identifier:
keyid:40:AA:0C:C8:E1:65:CD:70:52:21:F3:AA:8A:A6:E6:28:84:62:01:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKoMyOFlzXBSIfOqiqbmKIRiAT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/IeRY6MOc7TUzSm5c2gVl8GaIE5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c0e384-4e2b-43e7-82b5-aaf4459568a6/1/QKoMyOFlzXBSIfOqiqbmKIRiAT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:00:c0:fd:69:ec:44:70:12:88:47:06:24:fc:96:c9:10:1b:
33:4d:41:77:b8:96:26:a4:ad:32:bd:05:e8:10:ba:94:c9:eb:
f4:7e:3d:c2:b9:31:a1:11:cf:06:be:7c:45:46:6a:c1:63:0f:
2a:76:55:98:2c:32:71:82:71:93:a8:7e:27:ce:48:ed:71:59:
ed:28:25:de:f9:16:7a:a9:fe:47:07:ea:44:9e:2a:64:6e:b7:
2f:ad:5a:21:af:d0:83:83:60:c1:1e:ba:8c:e0:e1:24:22:e6:
f3:cb:15:ff:4a:2d:2f:0e:22:99:99:9c:70:a0:c8:b0:0f:d2:
03:fe:b3:3d:7d:28:ed:f6:64:56:bd:36:8f:a2:57:02:5f:06:
07:59:4a:49:fe:e5:92:f4:94:44:b4:8b:08:6f:56:f6:b4:c8:
0e:cc:79:9c:10:6a:2d:9f:c2:da:df:12:4f:7f:6c:e2:c8:4b:
e4:ef:fb:18:3d:82:21:39:92:00:20:57:ea:b5:23:57:94:7b:
33:0f:79:62:82:d4:59:a8:e3:51:ae:7d:16:4e:f6:12:5e:01:
d0:d8:d2:da:66:1a:a2:dd:46:1c:3b:9a:9b:47:5b:2a:1e:35:
0a:96:71:fc:6b:d0:17:3c:d0:da:bf:dd:c8:1e:c7:ac:a3:48:
3d:8b:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:30 2024 by rpki-client on console-ams.rpki-client.org