Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/_NxDABQznzcDJ8yh6hRTHiLS1TY.roa
File: _NxDABQznzcDJ8yh6hRTHiLS1TY.roa (raw, json)
Hash identifier: QZa4hvVuKiyZEk6in21MG1zUERYxkU1Zn6gbVn1JRSw=
Subject key identifier: FC:DC:43:00:14:33:9F:37:03:27:CC:A1:EA:14:53:1E:22:D2:D5:36
Certificate issuer: /CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
Certificate serial: 015B269D
Authority key identifier: 6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/_NxDABQznzcDJ8yh6hRTHiLS1TY.roa
Signing time: Sat 01 Jan 2022 15:04:34 +0000
ROA not before: Sat 01 Jan 2022 15:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 45.10.24.0/22 maxlen: 22
45.10.24.0/24 maxlen: 24
45.10.26.0/24 maxlen: 24
45.10.27.0/24 maxlen: 24
45.10.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22750877 (0x15b269d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
Validity
Not Before: Jan 1 15:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcdc430014339f370327cca1ea14531e22d2d536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:28:e3:94:95:d5:94:e6:81:df:4e:ed:c4:
0d:82:fb:16:8b:b6:47:62:de:22:15:41:92:4d:52:
f7:92:a1:c8:c0:55:02:af:e7:ba:26:fc:12:3c:19:
2d:d1:64:a0:14:7a:f4:4c:9e:e8:82:25:d8:f3:a7:
c2:4f:ec:9c:77:2e:a0:2b:4e:01:5b:7c:32:22:bd:
80:f8:5e:2a:35:00:3d:27:53:3e:2f:f7:29:f4:4f:
d5:7d:18:f0:f3:fd:07:ea:89:6e:18:16:15:b0:2c:
ed:59:5f:34:a8:9c:26:9b:9e:99:4d:aa:89:2b:7b:
b1:0f:c6:64:e2:b8:2b:2e:18:47:e5:02:8e:57:e1:
f8:b5:2d:2f:4e:3b:28:60:09:a7:94:a8:9d:d7:08:
35:90:81:47:b1:6d:7d:34:32:4f:72:3d:cb:86:60:
96:a2:35:c6:54:76:7c:1f:07:d0:2d:2e:4e:cb:c4:
3d:5b:07:39:2d:17:91:d9:9d:d0:98:72:49:85:72:
6f:38:49:0c:75:32:cf:47:cb:9b:6a:25:22:79:29:
a0:b9:e4:04:85:75:9d:8a:23:50:43:05:fb:87:cd:
c5:56:7d:0b:80:30:b2:12:f3:dc:dc:96:81:d4:b7:
f9:58:e3:6f:12:3f:b1:cf:f6:06:9c:d4:57:e0:3d:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DC:43:00:14:33:9F:37:03:27:CC:A1:EA:14:53:1E:22:D2:D5:36
X509v3 Authority Key Identifier:
keyid:6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/_NxDABQznzcDJ8yh6hRTHiLS1TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:92:d7:e9:16:19:d4:82:bd:36:43:18:d8:98:de:a3:78:5b:
25:df:30:12:df:91:22:42:c8:fa:a0:93:d0:a6:cc:e6:03:28:
8a:9c:ca:1a:f7:b4:03:8c:1b:1f:a2:5e:2e:e4:09:03:ee:ff:
43:d0:6e:b7:c1:cb:0d:9b:a2:b6:4b:b2:32:c1:10:65:e3:ed:
30:43:ae:bb:2c:92:ed:cc:76:51:44:bf:ac:8f:15:00:3a:15:
ee:26:43:a0:a0:4c:7d:3e:e0:52:e8:97:3c:f6:07:c3:e5:e9:
86:c1:b2:e3:b7:29:6f:72:91:4a:24:9e:eb:f1:c8:50:be:e1:
24:88:35:4c:f7:aa:2a:81:6c:03:ab:36:0f:dd:1e:ec:b4:a8:
d4:a7:16:cb:d4:57:a5:b1:6b:04:00:72:9f:cf:b1:e7:73:2c:
9b:69:8d:53:23:62:62:7e:8a:12:d3:ce:0e:05:e4:8a:17:17:
ab:f9:c7:cf:f8:90:e8:de:59:48:86:1e:8a:9b:d7:27:99:08:
5c:f9:09:b4:bc:f0:a1:eb:3e:1c:ef:31:0e:4a:b8:6d:84:40:
c2:83:ad:16:84:72:45:0d:c2:c5:c7:db:75:76:42:6b:df:c9:
3f:b1:b9:63:30:ab:67:37:44:1c:8f:07:25:d7:d3:ab:9d:d3:
39:c6:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:08 2024 by rpki-client on console-ams.rpki-client.org