Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/T1tfXCKefW1voGVgcofuUnGQUMs.roa
File: T1tfXCKefW1voGVgcofuUnGQUMs.roa (raw, json)
Hash identifier: k3p6grg85/HO8PZkykZeW+sYBFT3ZjFFFa1yAmRpkPk=
Subject key identifier: 4F:5B:5F:5C:22:9E:7D:6D:6F:A0:65:60:72:87:EE:52:71:90:50:CB
Certificate issuer: /CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
Certificate serial: 01856DD41DAB4E55F1A0BD490D429B416288
Authority key identifier: EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/T1tfXCKefW1voGVgcofuUnGQUMs.roa
Signing time: Sun 01 Jan 2023 14:54:55 +0000
ROA not before: Sun 01 Jan 2023 14:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205112
IP address blocks: 45.157.240.0/22 maxlen: 24
2a0f:6480::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:1d:ab:4e:55:f1:a0:bd:49:0d:42:9b:41:62:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea88982593665739dbb1a61a6a20e56f0be25fb7
Validity
Not Before: Jan 1 14:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f5b5f5c229e7d6d6fa065607287ee52719050cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:5a:a9:db:86:9d:99:62:12:0f:72:bd:2b:
34:84:cf:96:59:cf:aa:15:bc:3f:0a:0d:8d:68:0b:
1c:df:b5:f3:a1:23:fa:58:31:69:53:48:de:9c:0b:
14:f2:3d:8b:37:d6:68:f5:59:78:19:b7:d3:ae:1e:
2c:a1:0f:32:94:e4:92:ed:29:d7:2a:80:97:c3:2e:
1f:d3:24:56:e4:d4:68:0d:0f:77:dc:7f:0f:50:2d:
2b:78:95:33:af:29:03:59:99:3b:c9:77:0d:b6:c9:
c5:28:34:76:39:ac:87:86:24:c6:eb:6a:5a:8e:12:
29:64:4f:49:dd:0a:43:1b:a6:04:e8:8f:8e:01:d6:
ed:40:52:17:73:f2:99:e4:e0:c4:35:29:30:b0:6d:
82:37:3e:79:7f:90:12:fc:e5:98:76:a1:b4:45:83:
74:30:09:1f:bf:00:65:26:34:6f:ef:a2:89:49:ab:
c9:8d:5a:05:7d:1e:df:8d:0c:4a:27:fe:d3:f1:8e:
49:06:f7:ce:2b:7a:60:b5:d9:e8:2d:6f:a5:c1:b5:
8e:3d:2b:99:77:f0:2d:19:66:23:35:4c:2c:2a:e1:
e5:ad:19:f2:34:70:06:da:eb:37:cc:ce:3f:be:29:
fb:6d:00:2f:a9:a5:57:39:50:0c:dd:34:cf:f6:67:
72:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:5F:5C:22:9E:7D:6D:6F:A0:65:60:72:87:EE:52:71:90:50:CB
X509v3 Authority Key Identifier:
keyid:EA:88:98:25:93:66:57:39:DB:B1:A6:1A:6A:20:E5:6F:0B:E2:5F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oiYJZNmVznbsaYaaiDlbwviX7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/T1tfXCKefW1voGVgcofuUnGQUMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9cc5ce-8fba-4da6-834f-ea042c325f88/1/6oiYJZNmVznbsaYaaiDlbwviX7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.240.0/22
IPv6:
2a0f:6480::/29
Signature Algorithm: sha256WithRSAEncryption
ac:9d:b0:4d:6b:d0:9e:37:50:18:c8:f0:fe:11:f6:2c:7e:de:
b4:8a:ed:a1:54:40:09:73:05:b3:db:d4:06:af:4c:c2:d4:c8:
92:4e:bb:78:72:f1:f9:75:85:75:d5:f7:d9:af:bf:8c:3b:f6:
a4:13:cc:08:2f:e4:36:b3:28:17:99:12:51:ea:99:40:d0:0f:
73:ce:40:cf:0c:f3:8a:93:21:0b:df:06:75:4b:63:45:67:95:
a4:56:a8:64:a8:ef:00:cf:5e:3b:3b:21:f8:9a:45:52:47:89:
de:52:e9:e2:3a:d5:54:75:1f:35:a4:0e:29:b0:9b:f8:f8:f4:
54:03:9a:6a:46:9d:0c:f9:ec:ae:0b:53:dc:a3:01:b0:68:09:
46:6b:ed:33:11:0f:86:f4:b7:3b:ce:c9:3c:a1:be:30:fa:6e:
a3:10:bb:5e:0c:2c:b6:e0:67:1f:e4:00:e1:c1:64:79:03:d1:
e0:0c:1e:e2:20:06:45:b4:64:91:82:24:87:c2:d3:38:4d:8c:
39:b7:e9:b3:fd:fd:86:ac:d7:08:07:c0:96:02:f7:e2:85:0b:
6b:dc:9b:10:7d:c3:2f:f0:81:e7:c5:86:ed:c2:e1:0b:5e:0c:
95:ec:f3:e8:51:19:39:4b:ec:47:ac:5b:b5:35:d6:a5:7b:6a:
86:12:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:06 2024 by rpki-client on console-ams.rpki-client.org