Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/2MzQERE_Max3U2C0o9YI9tMOeUY.roa
File: 2MzQERE_Max3U2C0o9YI9tMOeUY.roa (raw, json)
Hash identifier: SBc3WldKiGc5gzo/WuKgpscCkxv0oLMvitWB+r6G1Qk=
Subject key identifier: D8:CC:D0:11:11:3F:31:AC:77:53:60:B4:A3:D6:08:F6:D3:0E:79:46
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018570FBAD4C21685478E1303DEE22274ABF
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/2MzQERE_Max3U2C0o9YI9tMOeUY.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.155.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ad:4c:21:68:54:78:e1:30:3d:ee:22:27:4a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8ccd011113f31ac775360b4a3d608f6d30e7946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:4f:df:9a:c1:09:1b:8c:4e:09:e4:b3:f0:
02:04:66:8f:9b:28:ce:9d:5d:cc:69:f2:73:67:60:
29:9f:b9:bb:ed:68:68:cc:66:36:04:fc:ea:0f:2e:
ad:4c:f7:a6:81:dd:21:93:21:31:07:1c:b4:3b:1c:
e8:7c:28:3e:fe:13:4a:22:be:e8:a8:7d:3c:28:ba:
f4:96:1c:e9:3d:6f:79:e2:0a:0a:6d:b9:d8:88:51:
56:8a:27:a0:b7:77:74:79:84:3e:e3:3d:32:0a:81:
4b:d5:5d:a0:26:a0:83:cd:ba:ac:18:36:e9:26:3c:
28:d2:ae:2d:34:d9:34:fa:03:e9:22:89:6d:36:37:
90:39:07:37:6d:0f:cb:5a:9f:57:59:72:5e:aa:f0:
b0:79:88:52:a0:34:f3:e7:76:73:c7:12:4d:c3:62:
41:59:cf:e8:1c:4f:ca:e8:ea:2e:dc:64:ee:7e:5f:
8f:3f:98:3c:e1:a2:bf:e4:c1:9f:98:65:c8:1d:22:
78:ca:9a:f2:65:73:3a:ce:29:b6:dc:7c:1c:15:19:
38:20:4d:6f:f3:5a:26:20:68:78:0b:9f:2d:87:96:
85:9b:c9:aa:16:c3:b1:8b:da:3d:0a:06:70:50:2e:
33:22:e9:c7:04:e0:10:07:d2:d1:67:b6:eb:51:1f:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:D0:11:11:3F:31:AC:77:53:60:B4:A3:D6:08:F6:D3:0E:79:46
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/2MzQERE_Max3U2C0o9YI9tMOeUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.124.0/24
Signature Algorithm: sha256WithRSAEncryption
73:3c:77:d7:9b:1e:52:bb:0f:fc:68:d5:54:9d:6e:bc:7f:11:
c0:a5:7a:97:42:c8:d4:7e:21:02:39:70:8d:e5:5a:c0:54:bb:
b1:b3:05:3e:53:ec:2d:30:18:14:b9:aa:36:79:ea:b1:9e:1c:
96:e4:4f:f6:1a:cb:88:d9:69:f8:76:de:18:71:1d:4b:d0:dc:
98:ec:a1:44:81:56:00:d8:3f:2e:d5:67:fd:46:d7:4d:8a:29:
44:66:79:b1:a4:d5:05:cd:25:7b:93:1d:4f:ee:5b:01:1a:c7:
d6:ba:1c:b8:d8:38:26:24:05:bf:68:da:9b:97:1a:b7:de:78:
24:cf:bd:bf:0f:b9:8e:74:8e:bc:d1:07:c4:1c:e4:a8:04:91:
20:6b:fa:06:8c:cb:f8:33:10:24:9e:c7:21:9e:95:12:b5:be:
2a:22:d7:c4:48:39:9e:9a:28:7f:49:ee:de:ea:42:a9:a4:6e:
d6:f0:bb:26:9d:48:0a:e3:b7:ac:5f:1c:1f:36:27:a8:73:f9:
a6:24:0d:9e:91:27:35:c6:3a:cc:2d:81:35:ca:3c:d1:2e:28:
f8:6f:d7:9f:4b:b6:9a:91:28:f3:df:79:52:30:e7:6c:ae:69:
66:43:e8:94:e6:e3:d2:79:9f:94:b1:16:06:bc:c7:a3:90:04:
d1:a6:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org