Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/lIuFlEC2IgSQxFev_ey09wli6PE.roa
File: lIuFlEC2IgSQxFev_ey09wli6PE.roa (raw, json)
Hash identifier: yxM8GYBdnkxqcqlT7d0VqNGcfnjlawZrXcGtL0wjLug=
Subject key identifier: 94:8B:85:94:40:B6:22:04:90:C4:57:AF:FD:EC:B4:F7:09:62:E8:F1
Certificate issuer: /CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
Certificate serial: 0403C72D
Authority key identifier: 32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/lIuFlEC2IgSQxFev_ey09wli6PE.roa
Signing time: Sat 01 Jan 2022 08:54:01 +0000
ROA not before: Sat 01 Jan 2022 08:54:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.157.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67356461 (0x403c72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
Validity
Not Before: Jan 1 08:54:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=948b859440b6220490c457affdecb4f70962e8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:c9:1d:06:bb:83:a7:e7:2d:82:18:11:1c:
a3:5b:59:9f:34:cb:b1:3c:3e:86:cb:41:51:0f:1d:
d0:c5:fa:21:b1:19:6b:b9:39:dd:0b:3c:0b:4f:19:
b1:20:90:dd:2a:6c:0b:9a:a2:74:16:b7:1d:b2:d9:
69:80:29:fe:15:b0:93:0d:4e:e4:4c:62:5f:2a:ed:
1e:f9:c9:29:13:26:50:fd:80:fd:e0:ec:76:8c:29:
a4:53:11:b9:f4:f4:ef:c5:2b:20:83:a3:46:f3:53:
0f:79:2d:eb:bc:9d:c1:59:aa:33:4d:79:45:61:20:
e9:e0:67:ff:e2:4b:a4:0d:25:46:10:e3:67:35:60:
ef:d6:71:f1:fd:6c:59:2c:0b:fb:b5:27:68:6b:9f:
7c:23:cf:76:10:69:b0:8b:7c:8a:b9:9d:e0:08:4b:
6d:65:47:0b:61:7a:6a:9a:05:6f:d5:62:e2:67:3c:
43:a3:9c:d8:50:a6:39:0c:16:31:53:e7:e8:da:3d:
b0:76:90:9b:10:5f:0c:17:53:64:5e:7f:d6:c3:bf:
5c:c5:c3:1b:4f:75:80:25:23:cf:e4:f3:35:11:8c:
d1:e9:8e:5e:8b:de:ba:0f:c4:e9:a2:e8:da:50:33:
c4:38:c4:54:08:c4:6d:89:ab:92:b1:13:3c:14:6d:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:85:94:40:B6:22:04:90:C4:57:AF:FD:EC:B4:F7:09:62:E8:F1
X509v3 Authority Key Identifier:
keyid:32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/lIuFlEC2IgSQxFev_ey09wli6PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:b2:70:e0:cb:35:be:ae:02:9c:36:0c:74:05:1f:d0:8f:7f:
e4:33:6d:15:21:ad:52:e3:5e:78:5b:15:e7:74:8e:a1:5d:2c:
b1:f7:7f:93:02:17:20:44:86:b7:13:c4:04:2f:f1:ce:81:25:
8f:5d:a2:42:7a:4a:63:3a:d4:fb:99:1a:de:ed:2d:da:56:28:
4c:5d:68:e7:55:83:8b:2a:6e:4f:f5:70:87:d7:d0:35:b0:d7:
96:4b:67:39:e4:b8:2d:90:71:08:4d:15:bf:58:c9:a2:c9:b1:
30:94:5e:eb:fe:a7:f6:99:8c:63:2e:01:62:75:ac:8c:61:b1:
da:4e:40:62:06:ab:ab:25:ae:e6:8d:06:4a:a6:59:b8:37:fd:
db:99:6c:eb:af:0e:d9:d1:41:f6:f3:48:1e:06:1e:f6:0b:4c:
b7:93:cf:42:ab:c3:1e:6e:98:cc:96:74:66:1f:77:d4:46:0b:
ab:f7:bb:5b:c4:17:62:23:f6:35:0e:0d:39:2f:cf:a3:82:d1:
9a:7b:09:f9:8e:24:92:51:f7:c4:c5:21:a6:68:bb:d3:1a:71:
73:53:89:97:aa:4b:17:05:49:0c:1b:f3:4b:b6:19:9c:92:6f:
0e:00:dd:24:3e:a8:06:7b:14:df:dd:2d:32:ea:ef:cd:bd:82:
0a:a4:b2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:02 2024 by rpki-client on console-ams.rpki-client.org