Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/S5FdEr5QPwEBGnDFVZqcRMfESc0.roa
File: S5FdEr5QPwEBGnDFVZqcRMfESc0.roa (raw, json)
Hash identifier: TD2ulKSONpNDht7KTEWyt+0qpm6s85ZzOmom6viXFrA=
Subject key identifier: 4B:91:5D:12:BE:50:3F:01:01:1A:70:C5:55:9A:9C:44:C7:C4:49:CD
Certificate issuer: /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial: 0166F8EA
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/S5FdEr5QPwEBGnDFVZqcRMfESc0.roa
Signing time: Sat 01 Jan 2022 04:57:57 +0000
ROA not before: Sat 01 Jan 2022 04:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34661
IP address blocks: 45.152.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23525610 (0x166f8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Validity
Not Before: Jan 1 04:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b915d12be503f01011a70c5559a9c44c7c449cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:14:e0:6f:5f:65:ea:4a:12:f9:88:a4:d2:
95:1c:98:47:b2:58:80:cc:84:a2:0c:8d:3c:36:4c:
27:96:8c:ed:c7:9a:64:49:b2:41:3a:55:95:2e:a2:
c5:ad:d5:99:fb:62:8c:7e:fa:67:b4:f4:2a:18:a4:
40:b2:02:57:ab:36:9d:17:8c:5f:29:e6:7d:98:3a:
14:b5:66:48:6f:69:04:ec:f5:9f:e7:07:20:06:1c:
04:9e:e6:4f:b0:db:9b:d5:44:5c:2f:9a:2f:40:81:
63:e4:2e:0b:04:30:b7:46:a6:20:33:cd:f7:8f:5f:
31:17:9b:b8:f4:de:45:ce:5a:55:98:85:7b:23:5f:
35:2b:90:b4:29:be:57:58:86:00:7d:c0:32:df:e7:
32:b9:71:0f:59:f5:7f:5f:ae:c3:bd:53:bf:ed:52:
68:1e:46:07:16:24:7a:ab:14:09:4e:d3:7f:45:d9:
54:d7:25:24:45:1d:56:e3:c2:b2:82:1e:fd:ab:2d:
b8:10:60:2f:b4:f5:8a:aa:73:d4:27:94:f5:6b:9b:
53:5c:9c:cb:f9:12:5c:1f:cf:b8:4f:ad:fc:3a:c6:
c6:75:5b:52:5a:97:5e:ef:5f:f5:65:15:a9:fa:ae:
d4:41:46:3a:78:f2:a7:4d:c4:fd:cc:97:af:32:ec:
0d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:91:5D:12:BE:50:3F:01:01:1A:70:C5:55:9A:9C:44:C7:C4:49:CD
X509v3 Authority Key Identifier:
keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/S5FdEr5QPwEBGnDFVZqcRMfESc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/22
Signature Algorithm: sha256WithRSAEncryption
03:50:f9:de:0c:fe:78:ef:7a:ea:e3:82:c9:5d:3d:d7:23:4e:
b6:78:19:73:3c:8a:72:0a:18:db:13:af:53:45:af:c0:0a:4d:
78:a7:54:a0:04:e6:e9:cb:27:6e:04:20:5f:df:6d:45:34:f8:
4a:ce:94:a5:07:74:13:91:a2:36:4b:d4:7a:46:24:ae:be:36:
1c:ba:93:7f:7f:60:6e:24:9d:0b:d4:9e:0d:31:db:38:c6:fa:
8b:64:82:ca:ae:10:36:cd:b5:5b:6c:8e:7a:17:0a:e4:a7:2a:
39:15:3f:bb:57:25:6a:23:bc:d7:d3:a4:44:a2:20:6c:28:0e:
26:4b:be:9b:f9:fe:78:cd:f5:ef:db:88:c1:7d:a6:5d:cf:a6:
f7:9e:3b:e7:7f:84:51:01:c7:35:96:17:4d:88:42:1b:13:83:
be:aa:89:5e:4e:90:c0:f4:d9:5f:c7:39:46:bc:24:c8:03:9d:
9f:a5:ac:cc:c1:9f:45:f9:7c:30:49:1b:a2:64:ed:d7:ef:56:
6d:b7:d3:94:a3:71:75:bf:5a:e1:04:35:63:bd:62:d1:15:a7:
99:27:71:ff:1d:b8:4b:52:07:55:ce:8f:10:87:00:eb:54:19:
da:59:7d:b2:c9:5b:24:1a:7f:43:d6:e0:9a:ae:54:1d:c0:c1:
e7:67:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org