Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6490d9-30cc-4c96-9618-761bf330dd89/1/BdbPKmItLPXYy96SJ6-g8PW6uGM.roa
File: BdbPKmItLPXYy96SJ6-g8PW6uGM.roa (raw, json)
Hash identifier: I+vV4yWnx5iMHJ/mNb3LHyEaF7muZemTdaAzIpKSRyc=
Subject key identifier: 05:D6:CF:2A:62:2D:2C:F5:D8:CB:DE:92:27:AF:A0:F0:F5:BA:B8:63
Certificate issuer: /CN=216c5665b4c400b973c44c340ffd8db544a8b0b7
Certificate serial: 07592A45
Authority key identifier: 21:6C:56:65:B4:C4:00:B9:73:C4:4C:34:0F:FD:8D:B5:44:A8:B0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWxWZbTEALlzxEw0D_2NtUSosLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6490d9-30cc-4c96-9618-761bf330dd89/1/BdbPKmItLPXYy96SJ6-g8PW6uGM.roa
Signing time: Sat 01 Jan 2022 00:51:54 +0000
ROA not before: Sat 01 Jan 2022 00:51:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207269
IP address blocks: 45.153.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123284037 (0x7592a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216c5665b4c400b973c44c340ffd8db544a8b0b7
Validity
Not Before: Jan 1 00:51:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05d6cf2a622d2cf5d8cbde9227afa0f0f5bab863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:5d:36:c5:f7:5b:b2:07:9e:00:55:74:45:
10:b2:e0:30:e0:ae:44:c2:93:bc:9d:b3:69:18:22:
4e:bc:c9:6d:2d:b8:ae:7e:83:66:ab:ce:5c:d0:a3:
fc:bd:a5:04:00:ed:a0:35:95:67:6a:cd:6c:f3:26:
8b:51:fc:bc:36:f2:95:db:a3:a0:0a:df:4c:bd:af:
8d:83:a8:a6:eb:79:25:99:65:e9:22:4c:41:46:0d:
31:44:f4:1c:ae:34:b0:5b:ce:61:86:3f:d3:9b:ac:
e9:c5:3e:2c:14:96:84:d0:f4:d2:a6:da:67:5b:02:
98:56:7c:30:97:7b:3f:2d:04:d0:1f:a4:5a:bb:91:
e4:1d:11:52:eb:28:ee:89:70:a3:cb:52:c2:35:f4:
52:f8:c2:5e:b0:fb:c7:f2:02:6b:77:29:e5:e0:c6:
0c:21:c6:ed:1c:0e:ae:90:af:3b:ba:2a:8d:2c:2b:
ec:df:91:f8:29:76:15:f9:7f:b4:00:52:b5:16:01:
39:4e:98:9f:39:99:5d:c7:b3:f7:e1:46:5e:9b:dc:
6f:70:68:68:3f:19:89:50:a7:0f:59:73:c3:b0:c0:
4c:92:61:5e:8d:69:bc:04:1d:f1:5d:22:43:7a:11:
c8:7d:ab:4e:89:12:c8:20:c7:4f:fd:c2:c6:a2:9e:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D6:CF:2A:62:2D:2C:F5:D8:CB:DE:92:27:AF:A0:F0:F5:BA:B8:63
X509v3 Authority Key Identifier:
keyid:21:6C:56:65:B4:C4:00:B9:73:C4:4C:34:0F:FD:8D:B5:44:A8:B0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWxWZbTEALlzxEw0D_2NtUSosLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6490d9-30cc-4c96-9618-761bf330dd89/1/BdbPKmItLPXYy96SJ6-g8PW6uGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6490d9-30cc-4c96-9618-761bf330dd89/1/IWxWZbTEALlzxEw0D_2NtUSosLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.180.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:41:d7:79:3b:0c:9a:c3:4d:e2:aa:96:3d:b1:88:94:98:eb:
3d:96:97:1f:87:26:70:dd:de:14:7a:a6:47:40:79:e8:6b:ed:
07:cd:de:50:39:5c:d6:b7:0b:f3:10:b4:29:21:ab:fd:70:f9:
b7:af:c9:5c:4d:c0:05:96:f0:3d:6d:d8:78:9d:9b:bb:9a:50:
1d:ce:c4:4b:14:93:75:6a:3c:0d:40:17:cf:8b:e4:00:e3:1f:
bf:b4:03:60:dd:75:47:95:9d:99:5d:8e:ec:00:56:87:95:9f:
3f:15:28:39:a2:11:a3:43:76:12:7b:26:79:14:fc:7b:01:c3:
36:81:29:f1:20:13:00:6d:2a:7a:cc:d3:2d:99:e1:3f:e9:20:
d7:4f:4d:97:53:e6:db:53:58:3f:37:16:06:f7:7d:38:76:8a:
01:33:5b:bf:e7:ec:29:86:6a:68:23:73:99:c7:55:ad:a1:fb:
fc:ec:23:d9:3f:f9:2c:cc:b7:5b:18:19:26:33:da:cb:95:a1:
33:98:e6:d9:5f:cd:75:51:81:00:a2:c9:f1:3e:4b:be:c0:cb:
40:47:f8:2a:fe:41:f8:8f:50:24:ff:d6:c5:18:84:5f:f6:c8:
63:e9:04:bf:e5:23:35:06:88:e9:08:94:71:02:dc:2e:3d:3b:
f5:6e:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org