Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/pFkZ-6gYWD23k2SHUY-vATM_KG0.roa
File: pFkZ-6gYWD23k2SHUY-vATM_KG0.roa (raw, json)
Hash identifier: f1ZSrfYwZjaJWBNrfox35nwOk5UKzSa7B7/J0o/KpwM=
Subject key identifier: A4:59:19:FB:A8:18:58:3D:B7:93:64:87:51:8F:AF:01:33:3F:28:6D
Certificate issuer: /CN=257039ae9a49ed74c776a935ce91809afb5f6a63
Certificate serial: 08903051
Authority key identifier: 25:70:39:AE:9A:49:ED:74:C7:76:A9:35:CE:91:80:9A:FB:5F:6A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXA5rppJ7XTHdqk1zpGAmvtfamM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/pFkZ-6gYWD23k2SHUY-vATM_KG0.roa
Signing time: Sat 01 Jan 2022 09:02:17 +0000
ROA not before: Sat 01 Jan 2022 09:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201500
IP address blocks: 45.147.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143667281 (0x8903051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257039ae9a49ed74c776a935ce91809afb5f6a63
Validity
Not Before: Jan 1 09:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a45919fba818583db7936487518faf01333f286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3e:c3:2e:0b:50:bb:ca:79:72:3a:8a:74:1f:
28:cc:18:4c:49:e0:bd:6f:00:38:b7:69:a7:05:98:
f7:6e:54:76:f0:40:68:91:3f:ce:f2:52:ad:33:15:
eb:27:82:e1:67:6d:95:0f:b2:43:52:da:f6:73:02:
5a:47:f5:be:c1:91:a0:5f:0a:26:cc:1d:04:d3:8b:
b8:6b:d0:db:9a:64:5e:60:2d:b2:ac:cc:d5:54:9e:
f5:f2:b6:62:22:b2:15:64:ce:63:c3:68:56:71:38:
14:18:b9:e5:1e:13:c9:4f:ef:3b:1c:c3:71:3f:ba:
67:54:d3:b0:5d:91:68:fd:55:48:ac:e5:a7:fa:39:
9b:b2:a6:7d:42:e6:6a:c6:16:57:f7:10:df:7b:d1:
04:6a:b6:a1:c5:27:ab:eb:65:7c:8a:18:f9:ac:03:
e9:21:88:17:ad:b9:aa:0c:cf:47:99:24:cc:41:00:
c1:04:e9:a5:e9:7b:1d:48:09:40:42:95:a2:54:62:
61:bb:77:e0:be:f0:78:44:be:ac:55:24:48:0e:6b:
25:f9:9f:74:77:ee:ef:07:5f:61:ad:75:a5:46:59:
80:eb:3d:f2:a9:de:ab:5e:0f:ec:a6:5b:06:da:6d:
ab:3b:3d:c2:9f:9c:8f:b1:82:48:a2:9e:8a:dc:76:
76:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:59:19:FB:A8:18:58:3D:B7:93:64:87:51:8F:AF:01:33:3F:28:6D
X509v3 Authority Key Identifier:
keyid:25:70:39:AE:9A:49:ED:74:C7:76:A9:35:CE:91:80:9A:FB:5F:6A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXA5rppJ7XTHdqk1zpGAmvtfamM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/pFkZ-6gYWD23k2SHUY-vATM_KG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/JXA5rppJ7XTHdqk1zpGAmvtfamM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:74:39:1e:71:ad:4c:6d:5d:6b:f2:9d:3e:b3:23:d1:7f:16:
28:79:75:56:0a:0e:29:88:96:67:96:d6:b7:5f:07:05:00:d4:
18:d1:87:ad:a7:86:2e:0f:4b:a3:ef:d3:4e:1e:25:51:2f:4a:
fe:4a:a2:e9:06:0f:3e:2a:fd:0f:0d:90:89:4a:bd:10:04:52:
17:8c:0c:b8:2b:67:cc:04:31:2e:cf:c7:fb:1a:08:35:ed:59:
fc:af:04:9f:85:3a:22:c9:de:bc:36:8e:32:89:9a:20:49:aa:
ef:30:9f:5b:fa:85:5d:43:7d:03:ce:da:93:a4:78:d3:6c:9e:
a1:2d:84:96:bc:3d:c9:87:16:f4:3b:22:af:a6:f5:37:3e:07:
09:32:bb:63:1d:80:6b:cd:af:d8:26:7b:b4:51:9f:7b:ba:1c:
99:b9:97:ea:b2:c4:3d:46:dc:1b:53:92:25:86:b8:83:2c:fb:
72:64:09:20:5f:64:5e:0a:93:a3:e6:2d:ef:0c:b9:81:67:70:
56:9d:c1:2f:63:b4:cc:df:aa:be:de:70:39:fa:e2:91:33:c8:
14:54:79:21:04:29:c1:1f:0a:4a:c3:64:0b:62:bd:40:8c:3b:
f4:f6:8b:76:f0:22:fc:5d:19:a4:67:fe:4d:dc:6d:5a:fc:e5:
34:54:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:05 2024 by rpki-client on console-ams.rpki-client.org