Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/tYSW2EfwR6uq-Jhqhzlnpe4wR2s.roa
File: tYSW2EfwR6uq-Jhqhzlnpe4wR2s.roa (raw, json)
Hash identifier: 6TJ8cGKx3GlAsi11xoNTudsA652tDIfNd4Pc2QQz3wM=
Subject key identifier: B5:84:96:D8:47:F0:47:AB:AA:F8:98:6A:87:39:67:A5:EE:30:47:6B
Certificate issuer: /CN=a48d78ad89bb6fe68af2bdb11689c42cdb0fa7f3
Certificate serial: 018CC8DEB09E07A06C1FB7FCCB017EF64D7B
Authority key identifier: A4:8D:78:AD:89:BB:6F:E6:8A:F2:BD:B1:16:89:C4:2C:DB:0F:A7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pI14rYm7b-aK8r2xFonELNsPp_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/tYSW2EfwR6uq-Jhqhzlnpe4wR2s.roa
Signing time: Tue 02 Jan 2024 06:31:26 +0000
ROA not before: Tue 02 Jan 2024 06:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207923
IP address blocks: 45.158.100.0/22 maxlen: 24
2a0f:4c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:b0:9e:07:a0:6c:1f:b7:fc:cb:01:7e:f6:4d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48d78ad89bb6fe68af2bdb11689c42cdb0fa7f3
Validity
Not Before: Jan 2 06:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b58496d847f047abaaf8986a873967a5ee30476b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:a7:dd:ed:f9:76:b7:01:6d:c5:c0:6f:3e:
9c:9a:95:32:0b:8b:8d:b5:47:89:06:e7:bc:f6:cf:
7a:d5:ef:88:64:37:f7:71:96:bd:23:3c:19:1e:6a:
32:e4:cb:5e:85:c3:33:ba:6c:16:f1:2d:70:0c:2e:
fd:18:64:fe:82:9e:1e:f1:5f:cd:74:35:f7:e8:12:
9b:7b:9d:8c:0b:f6:7d:9d:e8:37:71:10:4e:aa:71:
71:e7:4d:53:0e:f9:9d:46:68:77:e8:ab:4b:c8:00:
0e:cd:21:7b:53:a6:cc:69:0d:1e:1d:63:e2:b2:69:
fb:a5:70:12:1a:00:20:14:40:a2:b3:ed:d4:4b:1a:
df:ce:76:52:03:c0:c5:b4:d6:58:b7:42:9f:1a:96:
91:45:13:1e:d0:70:37:6d:ca:80:2c:6e:b6:2f:63:
50:72:ae:a4:95:c8:64:c4:56:12:ea:4e:0c:f4:17:
41:97:01:af:d2:51:39:4c:e5:7a:cf:2d:77:0b:4e:
2a:7a:9d:25:01:de:2c:30:e6:27:07:0e:25:ed:a3:
01:11:d6:74:f9:5e:ee:e6:6d:b5:48:7a:94:12:e4:
f0:49:40:87:7b:43:d8:24:8b:75:91:23:bc:f3:a8:
71:02:f7:b6:56:a3:85:60:f4:6f:5a:22:43:20:6a:
f4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:96:D8:47:F0:47:AB:AA:F8:98:6A:87:39:67:A5:EE:30:47:6B
X509v3 Authority Key Identifier:
keyid:A4:8D:78:AD:89:BB:6F:E6:8A:F2:BD:B1:16:89:C4:2C:DB:0F:A7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI14rYm7b-aK8r2xFonELNsPp_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/tYSW2EfwR6uq-Jhqhzlnpe4wR2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/pI14rYm7b-aK8r2xFonELNsPp_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.100.0/22
IPv6:
2a0f:4c40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:0b:a9:c7:b1:dd:1c:35:d3:1e:73:e4:3d:e0:84:95:b4:f2:
c5:ba:5e:ba:af:01:1f:2c:2c:0f:29:4c:ab:7b:09:db:fc:09:
d7:99:ba:c4:88:16:33:00:e5:fa:29:9a:dd:6c:ca:ba:7f:cd:
d3:8c:2b:f0:2d:d6:65:e0:c4:59:eb:c8:b9:2d:99:9f:7f:48:
b9:1f:97:7d:e0:6e:c1:1f:31:93:1b:ca:dc:66:6e:8e:70:5d:
d2:ef:e3:1b:d9:5b:e5:45:4e:4f:9b:40:1e:ee:1b:f8:c8:8c:
9e:d6:9a:37:44:62:a4:3d:d9:af:83:9d:a7:84:ec:85:6c:05:
6d:a4:46:b9:cb:22:d3:f7:d1:f6:f5:22:b0:fc:96:a6:de:65:
3f:ca:ca:cd:c2:ed:f9:d6:73:99:40:de:2b:9c:b8:14:d7:1e:
d0:3f:9a:dd:5f:a5:f9:40:06:84:c9:fe:b2:6e:32:51:bb:b6:
73:ef:8d:91:32:99:c7:59:6e:5f:d1:e4:34:98:bd:78:98:fb:
a3:68:2d:e5:39:4e:04:a3:4e:92:bf:f8:cb:f7:73:a9:13:34:
fc:20:ca:22:2c:02:ee:eb:ef:3f:c5:a1:72:16:56:8d:d5:a6:
35:c1:44:0d:13:7a:57:f5:a5:4a:e5:b7:ec:3d:66:ba:1b:3c:
02:9a:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:55 2024 by rpki-client on console-fra.rpki-client.org