Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/TrbNNXagPn9h4X_gZi6E9fxYggM.roa
File: TrbNNXagPn9h4X_gZi6E9fxYggM.roa (raw, json)
Hash identifier: 4YNXwWl7jdjkLHlAOAx05V2oQq5sgsqkFJXtsQec8vY=
Subject key identifier: 4E:B6:CD:35:76:A0:3E:7F:61:E1:7F:E0:66:2E:84:F5:FC:58:82:03
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 078EDD1D
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/TrbNNXagPn9h4X_gZi6E9fxYggM.roa
Signing time: Sat 01 Jan 2022 13:55:37 +0000
ROA not before: Sat 01 Jan 2022 13:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.150.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126803229 (0x78edd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Jan 1 13:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4eb6cd3576a03e7f61e17fe0662e84f5fc588203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:6d:51:21:57:b3:35:49:11:02:01:e4:43:
23:1a:c0:b1:7b:c8:4f:de:9d:0e:ef:72:76:69:6e:
e5:41:2e:be:b2:3b:0d:75:80:45:4a:b3:6b:bf:75:
3c:8b:02:17:3d:40:89:e2:bd:b5:fb:9b:a0:73:ac:
80:e8:14:17:55:95:7e:8f:05:0e:2a:da:75:e9:e4:
96:ac:cc:19:2e:18:4c:13:a2:75:6b:73:49:d4:e5:
68:cc:c5:d3:ae:77:1d:9d:64:c2:a3:15:9d:a3:ed:
85:d0:73:28:3f:f1:2a:e7:35:6a:4f:27:8b:d5:a1:
a5:e9:98:6b:74:d1:66:28:c9:d5:75:f0:fc:a4:10:
14:57:8e:6b:df:6f:c8:d0:a0:d5:bb:a3:3c:d0:cb:
93:99:77:f1:86:49:7d:26:4a:d8:80:d1:86:0c:04:
d0:42:14:82:53:33:dd:a0:5e:e2:50:f7:dd:04:09:
d4:1a:be:88:8f:1d:5b:9e:76:20:64:c0:27:b3:eb:
9b:f5:91:1a:af:58:7c:d1:71:61:f4:b0:dd:0e:52:
78:62:83:b4:61:f3:ea:e9:e7:b1:a2:0d:ea:32:09:
9f:ba:7b:21:c0:91:b8:08:88:ff:8d:c2:dd:1d:8f:
02:b2:ae:22:0c:f6:23:08:f2:3f:94:3f:02:6e:3d:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:CD:35:76:A0:3E:7F:61:E1:7F:E0:66:2E:84:F5:FC:58:82:03
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/TrbNNXagPn9h4X_gZi6E9fxYggM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.4.0/24
Signature Algorithm: sha256WithRSAEncryption
23:df:3b:c3:da:9b:fa:18:a8:1f:9d:35:a4:0e:78:52:18:57:
c5:be:8a:9f:55:5b:48:7c:81:1b:e7:a9:6e:ec:23:e7:fe:b9:
e0:b8:b0:71:11:9b:1c:ae:2d:75:e8:17:dc:42:0b:cf:51:84:
8a:69:6b:4b:19:4a:4e:93:ec:75:2d:0f:84:56:53:5f:de:aa:
32:76:42:08:2c:8d:07:3a:09:e5:40:78:ce:d8:93:37:29:af:
37:8d:f2:1a:fe:ed:f2:89:e4:84:4d:da:9d:ec:0a:b0:61:f3:
47:cd:22:ea:f7:d0:73:06:03:40:2c:ba:93:97:6e:c9:0d:59:
d9:c0:6d:30:4b:d8:25:42:fe:ba:1f:90:3d:ea:d2:39:49:fe:
93:82:80:1f:88:28:a6:2b:da:bb:23:20:43:b8:6a:ac:6a:c0:
90:38:7c:27:a6:6e:7e:f9:c3:7f:63:7e:e2:4f:ad:6f:f4:fe:
0a:37:9b:db:d5:db:51:04:1e:52:94:1c:5e:3d:92:10:93:c0:
37:b1:cc:a4:63:98:8f:c7:6f:3c:10:d6:33:b5:ba:91:ca:93:
e8:42:9c:b8:09:9e:69:01:4d:41:ad:e5:8d:89:bb:25:e5:13:
11:74:1f:08:62:52:f6:33:00:0d:83:78:c0:e8:82:74:ed:19:
93:54:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:44 2024 by rpki-client on console-ams.rpki-client.org