Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/4d6OUoY5ncr53Sg8usSTNf_3F3w.roa
File: 4d6OUoY5ncr53Sg8usSTNf_3F3w.roa (raw, json)
Hash identifier: goB43kRWNLYRVMiyXm1VYAossjmBSGY1oHTEMOOQZCo=
Subject key identifier: E1:DE:8E:52:86:39:9D:CA:F9:DD:28:3C:BA:C4:93:35:FF:F7:17:7C
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018570FBAE9AC1F87A6961AB9CCF9B9FD77F
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/4d6OUoY5ncr53Sg8usSTNf_3F3w.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209604
IP address blocks: 194.36.85.0/24 maxlen: 24
45.155.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ae:9a:c1:f8:7a:69:61:ab:9c:cf:9b:9f:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1de8e5286399dcaf9dd283cbac49335fff7177c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:f3:e6:a8:a8:4b:46:74:15:d0:a7:b2:cd:
ba:cc:92:2b:d5:2f:08:db:04:14:34:18:03:f7:79:
ec:ec:8f:9a:9c:c7:3c:b1:08:fc:8d:d5:a4:44:d9:
8a:4d:f4:61:86:0d:82:84:3a:1d:18:d3:62:f3:8c:
da:09:7a:56:cb:d9:49:95:51:ce:54:45:91:94:ce:
05:89:1a:1e:d8:67:52:32:a8:d2:33:bd:4d:79:12:
a8:e3:00:36:81:44:63:0a:31:ef:2b:dc:1c:d7:9c:
4a:fd:20:02:9b:6d:20:e9:b9:a8:32:d4:fd:7d:b0:
8f:f9:07:ac:ed:6c:bd:6d:ea:f5:e3:47:d9:28:24:
03:2e:35:bd:36:9c:27:cd:71:7b:de:45:b9:3d:64:
37:ba:0c:bf:26:7f:1e:d2:0f:0f:28:14:6f:b0:00:
eb:5d:96:cf:8f:2f:f8:9c:61:2c:15:7e:e4:d9:b9:
56:00:67:0a:a8:80:35:ae:ac:4c:e7:71:a5:89:c0:
1b:4a:8c:50:64:c5:90:6f:91:77:64:b9:b9:b7:18:
2f:93:db:22:2d:16:bd:a1:70:02:cf:1c:4e:df:a0:
10:79:2a:a9:4e:e3:a9:55:d4:31:e8:69:42:40:65:
62:6b:a9:64:a5:bb:21:44:d2:36:26:78:9d:97:6a:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:8E:52:86:39:9D:CA:F9:DD:28:3C:BA:C4:93:35:FF:F7:17:7C
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/4d6OUoY5ncr53Sg8usSTNf_3F3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d9:a4:a2:77:65:6b:2b:bc:70:29:55:0b:ae:47:32:ab:02:
20:ad:7c:9d:c5:c2:12:23:ce:fc:2a:86:96:ff:57:78:a7:ed:
7d:2a:39:d4:da:c0:94:37:ea:6a:fa:6b:71:c1:a3:a6:da:65:
55:70:64:55:12:e8:da:ba:b9:39:b1:5a:38:56:e2:52:24:7c:
93:72:57:85:91:66:28:6f:12:87:37:2f:eb:90:75:51:95:ec:
c6:8f:ac:8f:83:e0:72:fe:ef:a6:8b:92:28:81:cc:ba:e0:67:
c8:45:51:a4:11:be:cf:ef:1d:d5:78:d7:fa:12:98:5c:b2:f5:
83:36:9d:f5:fe:37:56:43:c1:9d:f8:8b:1a:75:b7:29:fc:38:
70:de:89:d8:77:73:bf:17:b1:a2:2d:40:f9:d8:cb:9c:fe:03:
45:07:dc:04:86:94:6c:45:f6:84:68:c3:59:fa:30:23:04:ba:
ce:2b:a4:a6:4d:b5:38:e3:ac:5c:19:f5:4d:9c:57:09:bf:b2:
24:96:95:cf:25:5f:50:d3:07:78:8f:2f:40:b2:30:77:c8:c3:
3f:80:03:66:59:ef:d0:24:e5:3f:75:92:51:62:c3:76:63:f0:
08:b6:e2:b4:d3:15:78:38:51:6d:2f:7a:a5:a8:f7:2a:72:a2:
86:8a:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org