Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d6a49d-5c58-44dc-bb4d-cf8cb175c84b/1/v5RIPH7dbeKfwwZ_LXFp9JwKj4k.roa
File: v5RIPH7dbeKfwwZ_LXFp9JwKj4k.roa (raw, json)
Hash identifier: DJqN2GkjixHfVEIYPdtvsTroSXPQHwmqzDkuaZh45f0=
Subject key identifier: BF:94:48:3C:7E:DD:6D:E2:9F:C3:06:7F:2D:71:69:F4:9C:0A:8F:89
Certificate issuer: /CN=5335dd1ce4f0e4119ae6c970d5b3b3fd585e6a31
Certificate serial: 0353F35C
Authority key identifier: 53:35:DD:1C:E4:F0:E4:11:9A:E6:C9:70:D5:B3:B3:FD:58:5E:6A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzXdHOTw5BGa5slw1bOz_VheajE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d6a49d-5c58-44dc-bb4d-cf8cb175c84b/1/v5RIPH7dbeKfwwZ_LXFp9JwKj4k.roa
Signing time: Fri 29 Apr 2022 17:09:41 +0000
ROA not before: Fri 29 Apr 2022 17:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 45.144.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55833436 (0x353f35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5335dd1ce4f0e4119ae6c970d5b3b3fd585e6a31
Validity
Not Before: Apr 29 17:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf94483c7edd6de29fc3067f2d7169f49c0a8f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:0a:cc:08:8d:8a:0b:61:79:ea:ce:40:15:
a6:6b:38:7d:1e:19:1e:b4:25:a1:5d:58:d6:cd:6d:
20:38:e2:c9:37:14:fb:41:68:ae:c4:97:f1:8d:62:
c1:fc:89:9a:33:4b:16:e5:aa:d9:75:62:4a:f7:66:
32:a3:e9:97:c2:9d:e6:9d:12:47:87:38:a6:33:85:
1d:85:b2:bc:6f:81:0c:b6:5d:2c:f2:eb:cb:fc:5c:
84:8b:aa:f1:e9:9d:dd:e9:47:20:45:c2:d2:8f:1a:
94:8e:6b:c7:d3:37:b2:79:4c:a3:42:2d:d4:82:36:
c4:26:2c:19:8b:8b:30:c5:67:c7:29:f3:30:7c:96:
9d:08:38:2e:25:8e:ea:e6:f0:e9:72:b1:56:7e:57:
29:f1:c1:7c:5e:36:a3:4a:ec:12:85:c2:86:b2:ee:
55:fd:ea:3f:ba:46:32:b6:ba:db:e6:28:ee:08:60:
55:b3:d3:2c:a2:a8:63:ea:9f:a5:fc:58:a8:8a:10:
d6:ee:c3:f9:41:4b:8f:56:e4:1e:e0:e5:0c:e2:a3:
d5:d1:e9:67:93:3d:b4:a5:c7:0f:7b:b1:94:a6:e9:
3d:a2:bd:c9:5b:84:fd:a9:f0:00:23:a2:e1:1b:a9:
a1:ca:27:6d:30:33:9f:99:7a:1a:14:86:e7:83:07:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:94:48:3C:7E:DD:6D:E2:9F:C3:06:7F:2D:71:69:F4:9C:0A:8F:89
X509v3 Authority Key Identifier:
keyid:53:35:DD:1C:E4:F0:E4:11:9A:E6:C9:70:D5:B3:B3:FD:58:5E:6A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzXdHOTw5BGa5slw1bOz_VheajE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d6a49d-5c58-44dc-bb4d-cf8cb175c84b/1/v5RIPH7dbeKfwwZ_LXFp9JwKj4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d6a49d-5c58-44dc-bb4d-cf8cb175c84b/1/UzXdHOTw5BGa5slw1bOz_VheajE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b8:c3:68:6b:bf:01:17:f5:6b:e2:02:ed:9a:e3:42:75:b8:
3a:2d:51:17:20:70:e7:28:c2:22:52:a5:28:f3:f6:b6:88:f2:
40:86:d2:bd:b1:4f:92:8d:9a:c2:b0:f5:75:c9:98:19:60:70:
0f:60:90:80:cd:22:22:8b:0b:a3:60:a1:53:d4:34:1d:5c:32:
5e:ef:ab:86:e4:37:dd:c7:84:76:e0:f9:98:9e:56:23:c8:d2:
b5:11:e6:d1:13:66:4e:01:6f:9d:e6:54:8a:a0:ff:51:f3:bc:
4c:a8:fa:ad:9b:79:94:90:67:6c:a1:7c:6e:29:12:ae:8a:b9:
c6:0f:65:02:91:d2:4e:29:35:dd:77:e9:8e:6c:e1:39:c5:13:
94:5c:98:9c:6f:a8:f9:bd:8f:7f:97:22:87:7e:05:6d:52:73:
d5:2d:fa:bb:e9:64:f1:8d:47:67:cd:71:db:dd:2d:5a:b3:72:
fc:0b:49:27:e8:8b:13:d6:d8:93:51:4a:8d:5d:8a:50:65:d0:
6d:49:f8:b3:87:fb:9e:c7:3b:47:89:c8:9c:44:d9:f7:45:89:
5d:2c:5b:75:b2:3a:34:2f:0e:b7:86:ba:a2:39:1b:cb:42:70:
7a:4c:55:12:42:be:57:21:e2:db:39:0c:e5:b2:7c:65:57:b2:
71:fe:e5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-fra.rpki-client.org