Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/BcNferNc8y2ZxZIFiMecqWHZmBc.roa
File: BcNferNc8y2ZxZIFiMecqWHZmBc.roa (raw, json)
Hash identifier: G32cfhvklEqR8IAhZRYx8bgm/ny2SNOCP5iA/+TeKWQ=
Subject key identifier: 05:C3:5F:7A:B3:5C:F3:2D:99:C5:92:05:88:C7:9C:A9:61:D9:98:17
Certificate issuer: /CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Certificate serial: 162409
Authority key identifier: B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/BcNferNc8y2ZxZIFiMecqWHZmBc.roa
Signing time: Sat 01 Jan 2022 01:56:02 +0000
ROA not before: Sat 01 Jan 2022 01:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211193
IP address blocks: 45.156.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1451017 (0x162409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06c430b61be7a380191cd5dfd105c3af21482fc
Validity
Not Before: Jan 1 01:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05c35f7ab35cf32d99c5920588c79ca961d99817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:ff:62:b9:f1:0c:6b:61:e9:fa:ef:0c:d4:
d0:80:00:7b:c1:05:01:a6:1c:48:b5:76:41:82:de:
77:eb:44:fe:e9:6c:a7:4a:2d:4a:97:8c:15:03:8d:
36:e1:ca:4b:4f:0f:6c:84:70:3b:af:59:4a:15:ea:
d4:f5:f3:f9:00:81:9f:09:5f:fe:56:9c:f4:26:a4:
89:09:62:03:57:de:16:3d:dc:c9:5b:e2:ab:4c:81:
94:ad:98:75:ad:0a:80:da:75:05:b9:4b:0f:5f:2f:
8b:d0:40:8e:83:db:96:8d:e3:d1:28:30:4e:09:42:
be:6a:be:fe:e1:b1:c0:50:ff:c4:75:f7:79:a5:65:
7e:75:05:f2:ab:d0:1a:c2:f8:8a:15:a1:56:a3:13:
18:b4:fc:ea:ef:4a:d6:ec:9c:7a:94:6a:6d:82:fd:
fb:b8:90:1b:28:38:74:df:3d:65:cb:cd:70:ca:bb:
a2:b0:d5:a0:6a:88:95:e7:45:7b:1f:ff:5c:d9:ac:
81:cc:a4:7d:1c:63:82:18:50:28:94:1d:8e:82:15:
0f:cd:f6:e3:e3:09:2a:b3:34:71:63:d6:ea:a6:52:
3c:99:fd:3e:80:ca:99:ac:b6:0b:ad:c1:41:8c:c6:
e8:17:2f:1a:6c:7d:29:df:08:74:d8:62:e9:48:02:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:5F:7A:B3:5C:F3:2D:99:C5:92:05:88:C7:9C:A9:61:D9:98:17
X509v3 Authority Key Identifier:
keyid:B0:6C:43:0B:61:BE:7A:38:01:91:CD:5D:FD:10:5C:3A:F2:14:82:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGxDC2G-ejgBkc1d_RBcOvIUgvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/BcNferNc8y2ZxZIFiMecqWHZmBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4da5fc-3174-4f17-a9d5-f583107c898f/1/sGxDC2G-ejgBkc1d_RBcOvIUgvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.119.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:0f:bd:9d:2a:80:32:a6:3e:8b:f8:92:d0:62:67:05:54:17:
bc:8d:e4:80:b9:62:1c:45:fe:7d:4a:c4:cb:01:67:be:72:b6:
41:fa:87:ad:f4:79:7c:79:75:13:82:2d:f7:c4:bf:79:9b:89:
fe:4f:f8:96:bc:4e:df:b1:18:a9:31:cb:32:ba:53:d1:21:18:
62:89:2e:eb:76:8f:1a:65:96:57:47:66:d1:4d:b3:f2:b5:e2:
82:cb:6b:3e:7a:3a:2b:14:5e:85:5d:c1:e2:81:87:3f:7c:70:
2d:3a:7e:7f:91:a7:75:14:e7:41:06:86:e4:d2:26:d3:51:1c:
0c:71:13:64:0c:fd:7c:c4:10:e9:56:07:fb:31:b0:ed:7b:de:
da:c6:8d:17:54:d5:f0:35:93:a8:06:97:5d:53:5c:ff:9e:4a:
92:4c:87:29:2e:e7:52:1d:13:cc:9c:40:80:91:17:f1:1f:31:
5b:08:be:98:0e:af:c5:f8:e5:e9:b5:0f:67:ca:bb:e6:cf:7f:
3b:d7:0d:2e:7a:82:11:3b:ac:af:85:5f:93:86:5b:73:8a:17:
7e:56:ed:59:62:13:26:86:1b:f9:aa:1f:32:16:dd:1a:62:a8:
e2:62:85:88:80:ab:64:af:fa:dd:fa:98:15:ef:11:c5:32:ab:
f2:27:d5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:12 2024 by rpki-client on console-fra.rpki-client.org