Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/qOXx_Vug7lf_ka__H0y2x5vkbK4.roa
File: qOXx_Vug7lf_ka__H0y2x5vkbK4.roa (raw, json)
Hash identifier: HwjTn5aZS23Zo2Hytz07vH66aH3UyIxQTk2EuS9MHkY=
Subject key identifier: A8:E5:F1:FD:5B:A0:EE:57:FF:91:AF:FF:1F:4C:B6:C7:9B:E4:6C:AE
Certificate issuer: /CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Certificate serial: 0183216C3702AB5101540BFDB8923B3D6197
Authority key identifier: 37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/qOXx_Vug7lf_ka__H0y2x5vkbK4.roa
Signing time: Fri 09 Sep 2022 08:44:43 +0000
ROA not before: Fri 09 Sep 2022 08:44:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50225
IP address blocks: 45.128.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:6c:37:02:ab:51:01:54:0b:fd:b8:92:3b:3d:61:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a8b5a1895c5088205095c2f7a5efe91d539e45
Validity
Not Before: Sep 9 08:44:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8e5f1fd5ba0ee57ff91afff1f4cb6c79be46cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:b1:27:84:19:be:c4:d3:2a:98:8f:d4:38:
f8:6c:1c:4b:4e:9f:bb:7a:42:6d:9f:77:85:c8:8d:
a1:81:6b:fc:2c:11:6c:15:91:84:57:3c:ea:1b:8e:
87:5b:c5:3e:1f:79:93:af:fd:bd:d7:f6:44:64:14:
30:97:70:82:4f:c4:39:63:0f:39:55:fe:8f:a7:c8:
21:19:dc:d9:16:2f:13:59:2c:58:0e:74:35:76:ae:
67:f9:6b:28:18:06:bd:7a:93:c5:d9:80:37:2c:49:
fc:6d:d8:9a:83:fa:84:d4:c3:60:b4:ee:1d:a5:67:
57:93:81:9e:7f:ca:7d:09:49:85:72:66:0e:ca:9e:
9e:a4:05:c1:bf:88:71:2d:03:0b:6a:40:d5:13:39:
35:b9:1e:f2:ae:06:9a:81:c1:19:17:d3:3e:37:19:
a3:9a:fd:dd:8a:d0:98:4f:b1:ac:85:a8:06:d1:ce:
43:bf:69:2b:6a:71:87:eb:cb:77:56:ec:cb:9f:84:
f3:e5:ea:cb:8e:65:77:11:f7:ba:0d:b8:c2:2a:6e:
aa:16:bb:be:2b:df:6f:89:f4:ca:cd:6e:55:02:1f:
ba:78:80:bb:2f:c3:f1:1d:81:ea:09:36:1b:fe:ca:
5d:11:ea:49:b3:21:fa:97:97:8d:94:65:55:42:3e:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E5:F1:FD:5B:A0:EE:57:FF:91:AF:FF:1F:4C:B6:C7:9B:E4:6C:AE
X509v3 Authority Key Identifier:
keyid:37:A8:B5:A1:89:5C:50:88:20:50:95:C2:F7:A5:EF:E9:1D:53:9E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6i1oYlcUIggUJXC96Xv6R1TnkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/qOXx_Vug7lf_ka__H0y2x5vkbK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c57839-5b81-4df4-88f0-149d8a8e1fcd/1/N6i1oYlcUIggUJXC96Xv6R1TnkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.234.0/24
Signature Algorithm: sha256WithRSAEncryption
27:be:08:4f:8f:d0:ed:83:56:9a:07:36:f1:22:1e:91:d8:ce:
87:1e:24:46:2b:e7:ae:2d:a5:21:2c:39:29:9f:6f:e7:0f:05:
11:52:74:fb:0a:17:44:66:9c:49:42:39:4d:7b:71:09:c0:f5:
9d:78:68:cd:19:42:a6:b0:5d:fd:0c:18:35:4f:9b:49:c5:4c:
e1:f3:8c:27:19:e6:35:92:8f:2d:b3:8d:94:41:cf:fd:1e:19:
72:41:14:ac:5b:54:0f:7d:26:46:26:35:40:f6:c5:d3:fc:ab:
72:97:d5:6e:3c:c1:f6:2e:e1:0e:07:d9:b0:26:d2:7d:db:e0:
6b:3c:b7:4b:47:28:20:c9:3a:1a:3e:96:e5:f7:11:c2:15:18:
22:98:c5:39:aa:80:cf:2e:5d:24:c8:78:d1:14:ae:c1:ae:dd:
9d:fc:96:5e:7b:31:b4:a5:66:22:21:03:59:99:04:1f:b9:c4:
e2:4c:50:a8:26:69:c3:b5:11:0a:9b:ef:b1:ab:73:c0:45:db:
bf:91:45:bd:96:09:ae:97:24:7c:1c:ad:6a:b8:2e:ad:a2:99:
c5:7f:b2:a8:0e:05:8b:73:e8:10:88:95:53:74:a7:17:3f:00:
ce:3d:1c:1b:8c:28:f5:1c:6f:26:64:13:73:e0:63:b5:c5:b4:
31:63:5d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:24 2024 by rpki-client on console-ams.rpki-client.org