Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/phsEoAhevFpKoxsgHj5eW6Ga89g.roa
File: phsEoAhevFpKoxsgHj5eW6Ga89g.roa (raw, json)
Hash identifier: 5u0Z42c2tTqVccc33Ovjqj29h+5nvwmdJmYHwcOsKYU=
Subject key identifier: A6:1B:04:A0:08:5E:BC:5A:4A:A3:1B:20:1E:3E:5E:5B:A1:9A:F3:D8
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 0183F6C50D2B418F2D0D88F2B092686D9978
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/phsEoAhevFpKoxsgHj5eW6Ga89g.roa
Signing time: Thu 20 Oct 2022 19:00:52 +0000
ROA not before: Thu 20 Oct 2022 19:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.149.63.0/24 maxlen: 24
45.149.61.0/24 maxlen: 24
45.149.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:c5:0d:2b:41:8f:2d:0d:88:f2:b0:92:68:6d:99:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Oct 20 19:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a61b04a0085ebc5a4aa31b201e3e5e5ba19af3d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:13:13:8f:72:63:11:47:0f:61:a8:48:58:ed:
2d:a5:2e:64:b7:ce:8c:c3:46:b0:56:b6:d3:cc:41:
6f:78:88:30:b6:4b:77:15:ca:e4:ee:5b:e6:c8:23:
1b:a1:38:40:e4:79:1d:8c:00:0e:02:e4:a4:09:48:
90:41:50:fa:3b:82:3a:26:f0:43:0d:26:7f:be:5d:
c7:5c:98:b6:54:21:3e:aa:bf:3d:b0:1c:6a:f2:7a:
0c:a7:7e:f9:39:3d:59:41:62:12:c9:89:5f:47:dc:
81:ab:4e:04:25:47:e8:19:68:5d:02:cb:0d:6f:6d:
f6:5a:98:08:94:5b:7c:32:a1:ca:c0:ca:3f:84:19:
b4:60:fd:ec:b3:39:70:c1:46:4f:d6:c2:ff:9a:46:
fb:6f:3f:02:37:9d:99:42:7a:8a:6b:8d:92:0e:24:
6f:bc:67:f3:a5:01:fa:52:c3:d1:dc:99:94:2b:9f:
f3:08:16:a6:d7:75:fb:2b:04:db:12:e0:d4:8b:56:
70:5a:81:b9:2d:c5:91:5b:03:3d:bb:30:25:8d:93:
67:1d:bd:1b:0b:d3:b7:83:bf:c1:b8:07:fb:ab:fd:
ab:f1:9e:0d:2b:47:42:40:98:95:ee:53:53:f0:91:
7b:23:e4:06:a4:7d:82:59:8d:4a:f4:0b:f3:0b:3a:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1B:04:A0:08:5E:BC:5A:4A:A3:1B:20:1E:3E:5E:5B:A1:9A:F3:D8
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/phsEoAhevFpKoxsgHj5eW6Ga89g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/23
45.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
45:58:ac:ed:36:f6:2a:f4:3e:ea:cb:a8:14:47:6c:90:12:2f:
a5:d8:b5:f0:0d:59:bf:59:18:af:1f:44:95:e7:86:14:27:35:
0e:07:0c:3c:28:32:43:e7:9e:9b:cf:ea:fa:4a:50:c3:bb:4b:
cb:38:33:17:34:98:e7:da:f4:4d:4e:fd:08:37:2b:63:27:b5:
de:c0:15:fa:e3:d1:aa:8a:ab:d0:9c:d8:cf:4d:c7:73:80:99:
f5:fe:51:6f:88:04:07:1d:e3:07:e7:57:66:18:2d:66:79:25:
9b:00:0b:ae:8e:43:11:8f:40:b7:f9:22:ae:5c:84:93:f0:f1:
07:89:8b:39:36:de:98:bf:7e:86:e6:f2:0a:a1:0a:cc:11:c5:
bd:cb:6f:1e:68:c8:5d:5a:1c:10:66:3e:19:5d:22:e3:8d:ff:
5f:2a:4b:22:06:ac:8f:22:46:10:1b:1c:e1:f1:7b:ea:c5:03:
7b:32:0e:79:91:24:d6:f3:05:1f:26:7c:c9:2c:87:fa:75:9c:
d5:05:57:d5:13:18:68:c1:99:68:eb:5e:de:80:39:2b:86:83:
de:8f:d2:86:f9:bf:10:0c:49:89:1d:c9:91:dd:ac:f6:16:c7:
a8:2b:27:c5:cb:5f:cf:9d:c5:d3:ed:18:12:31:37:d5:24:fe:
f4:c4:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org