Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/kz1wv9EtyHgZx-ZTfVwo1_zk7H4.roa
File: kz1wv9EtyHgZx-ZTfVwo1_zk7H4.roa (raw, json)
Hash identifier: l1aHypvl8tPY23buKf2z8/WM0qHB58LvRDC9aTbWsAU=
Subject key identifier: 93:3D:70:BF:D1:2D:C8:78:19:C7:E6:53:7D:5C:28:D7:FC:E4:EC:7E
Certificate issuer: /CN=3788bd44d50150b51293a5ea5255528dbfc0bf58
Certificate serial: 017FE6DB
Authority key identifier: 37:88:BD:44:D5:01:50:B5:12:93:A5:EA:52:55:52:8D:BF:C0:BF:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4i9RNUBULUSk6XqUlVSjb_Av1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/kz1wv9EtyHgZx-ZTfVwo1_zk7H4.roa
Signing time: Sat 01 Jan 2022 05:05:31 +0000
ROA not before: Sat 01 Jan 2022 05:05:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210654
IP address blocks: 45.142.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25159387 (0x17fe6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3788bd44d50150b51293a5ea5255528dbfc0bf58
Validity
Not Before: Jan 1 05:05:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=933d70bfd12dc87819c7e6537d5c28d7fce4ec7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:8b:e4:29:f0:1a:69:61:d9:d7:49:b6:0d:
bb:c7:8b:bf:56:51:fb:11:b4:85:16:d9:98:ec:20:
0f:04:78:64:05:51:f9:1f:65:29:c8:97:13:26:32:
63:b3:80:45:ed:e4:52:11:bf:ca:12:f5:4a:e9:d3:
33:f5:b8:af:c8:6b:3f:94:68:20:a1:2c:4f:9f:6c:
c5:73:99:03:63:1f:09:4d:ea:6c:ac:42:f7:2c:aa:
f0:0f:de:d1:23:00:d8:e0:01:cc:64:f1:30:ff:c3:
93:41:46:6f:74:c0:78:cb:9c:28:6f:89:ff:af:b1:
8d:22:75:41:b8:a9:a7:6e:8c:39:99:38:28:11:43:
0e:f9:2d:b1:3e:84:9c:98:7e:51:52:44:06:bb:e2:
9d:89:80:b6:6b:de:5e:5b:45:a0:f8:78:f5:46:7f:
5e:1c:e1:2e:af:42:cc:50:d7:85:fd:a1:36:1a:f5:
bd:b7:47:8d:ef:b9:cc:a2:bc:d0:7d:59:3c:d4:6a:
7a:e4:ac:22:62:58:89:a3:0d:69:4d:19:14:63:b0:
1c:d4:93:6b:83:ec:b2:94:76:bb:9b:1f:4a:0b:72:
db:db:8c:07:bc:26:d5:53:ca:d5:53:09:45:69:b7:
66:20:6d:ff:d5:a9:66:4a:d4:3a:bf:45:47:ca:02:
ec:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3D:70:BF:D1:2D:C8:78:19:C7:E6:53:7D:5C:28:D7:FC:E4:EC:7E
X509v3 Authority Key Identifier:
keyid:37:88:BD:44:D5:01:50:B5:12:93:A5:EA:52:55:52:8D:BF:C0:BF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4i9RNUBULUSk6XqUlVSjb_Av1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/kz1wv9EtyHgZx-ZTfVwo1_zk7H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2b222b-28cd-434a-ad7e-14926b560c35/1/N4i9RNUBULUSk6XqUlVSjb_Av1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.0.0/24
Signature Algorithm: sha256WithRSAEncryption
60:37:9e:7f:24:33:15:af:85:19:0e:52:50:f8:34:79:23:72:
c5:4a:0c:f3:7c:d4:a9:ca:9f:e4:2d:b7:c5:9b:52:78:45:55:
e3:8a:53:77:49:8a:5f:41:5f:2d:a4:5a:a6:9f:ba:18:39:c2:
f5:84:59:f4:05:20:d2:0c:59:77:02:64:58:7a:6a:a0:b5:4b:
a7:f0:d6:44:ec:ce:9c:e4:72:b6:52:9b:77:ed:21:dd:49:d8:
8a:12:ca:e7:d9:d6:2b:bb:49:0d:21:54:c0:08:88:4d:64:27:
46:cf:cc:f5:92:61:59:6f:bd:86:6b:b6:1b:75:43:b3:d4:3d:
db:aa:76:8a:e1:f4:cf:6c:e4:cf:46:5e:f5:90:10:21:af:92:
35:4b:d4:d1:1c:b5:c6:99:11:24:93:20:fa:13:9d:e4:34:a2:
79:d1:3e:d8:8f:29:b2:d0:6a:3a:ea:68:f3:a6:db:93:71:b2:
0e:1d:42:7c:07:3c:ae:72:e6:ff:d0:5a:a7:8e:9f:f9:dc:8c:
4f:75:ec:e6:64:cd:67:b0:68:de:78:26:13:fd:6d:d0:c7:a4:
00:63:a3:6d:31:04:7a:d0:dc:52:66:e6:8a:cd:98:1b:32:97:
45:86:6b:d9:3c:54:53:9e:52:57:f5:bd:37:ca:76:02:e1:a1:
4d:45:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:38 2024 by rpki-client on console-ams.rpki-client.org