Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/JhoTMHBoWYU-BK2jyT0vB22EtWA.roa
File: JhoTMHBoWYU-BK2jyT0vB22EtWA.roa (raw, json)
Hash identifier: q0P75etlHkbpG40d7LFEmyzQd+5XooJKm5gv9htmKfY=
Subject key identifier: 26:1A:13:30:70:68:59:85:3E:04:AD:A3:C9:3D:2F:07:6D:84:B5:60
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018265006DD1C3A7A3DDA728837FE5D261B7
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/JhoTMHBoWYU-BK2jyT0vB22EtWA.roa
Signing time: Wed 03 Aug 2022 18:38:23 +0000
ROA not before: Wed 03 Aug 2022 18:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44547
IP address blocks: 194.36.84.0/24 maxlen: 24
45.155.126.0/24 maxlen: 24
194.36.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:65:00:6d:d1:c3:a7:a3:dd:a7:28:83:7f:e5:d2:61:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Aug 3 18:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=261a1330706859853e04ada3c93d2f076d84b560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:d0:8b:e0:a6:3b:0e:62:31:52:e1:65:7f:
8e:ba:10:2e:45:aa:6a:c5:5c:34:af:d9:0e:73:ca:
f7:e2:c1:be:42:3a:2b:da:30:d3:f6:61:2b:89:5c:
d1:4c:95:f5:91:c0:80:a8:79:a9:68:35:96:29:d4:
3a:c5:34:42:2d:92:c3:0a:d7:ff:b3:64:f8:75:ca:
d3:91:7b:ed:3b:f1:ee:4a:0b:af:91:86:86:20:50:
f4:3b:4a:88:9d:00:3a:79:f3:e5:59:7a:69:d0:76:
ba:75:b2:54:9c:aa:bf:1e:b3:93:04:8c:1d:eb:8a:
08:be:71:0c:4e:2b:53:76:06:02:24:8a:b3:1b:d5:
d2:ba:37:1c:07:8a:ac:75:4a:de:ae:28:34:f9:42:
db:57:49:bf:f9:88:17:d6:ac:a2:a1:bf:2b:12:70:
2b:ca:f7:15:07:06:aa:2b:c6:ff:62:14:04:ac:1c:
34:3c:d9:81:f5:8c:ad:4a:71:81:19:dd:ac:89:7f:
db:f4:a3:6c:6f:1f:11:34:2f:d2:f6:3d:e8:72:ec:
99:90:6a:54:87:53:45:1b:83:b6:24:8c:04:2e:57:
f4:16:0c:5e:ec:8b:c5:18:52:cf:3b:9b:2e:0a:fb:
de:fa:57:9b:3b:87:4c:9f:5e:54:05:90:e7:11:7c:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1A:13:30:70:68:59:85:3E:04:AD:A3:C9:3D:2F:07:6D:84:B5:60
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/JhoTMHBoWYU-BK2jyT0vB22EtWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/24
194.36.84.0/24
194.36.86.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b2:06:0a:46:99:df:76:2a:ff:24:b0:b7:65:5f:62:58:80:
70:6a:16:01:b6:1b:fe:99:eb:74:f8:1f:84:5a:98:78:7d:ac:
5d:3d:13:12:6c:ce:55:f3:27:b8:e7:de:59:f1:b6:38:98:eb:
9b:04:d5:b8:9d:c3:9c:97:f0:d1:6c:8c:d7:08:cb:77:bc:03:
03:cf:56:c3:0f:87:46:4c:97:d6:d2:34:6e:63:8f:6f:d2:cf:
9b:b3:00:c5:57:9e:ac:ef:95:1c:de:00:1d:dc:c3:f4:31:e6:
54:ef:30:4d:68:24:33:df:79:c5:f1:27:79:08:a3:b5:06:0d:
58:7c:c5:9d:b6:d7:43:bd:ce:85:13:cf:2c:61:ad:83:61:e5:
c7:a7:c9:0c:dc:3e:41:31:57:8e:3a:26:2e:56:2e:56:6f:9b:
75:68:45:2e:db:4b:c3:c2:e9:eb:2d:16:c1:c4:ba:3a:f2:ea:
8e:1f:ea:2e:c6:fa:2c:f0:6a:b3:a9:18:f5:37:dd:a6:d6:ea:
8b:6c:75:98:a5:e5:e8:b9:2a:94:d1:cd:37:e5:d3:80:69:d8:
41:2b:02:29:23:96:86:09:29:9e:32:fc:f6:59:bf:6a:03:b1:
d5:58:3e:50:12:40:1a:75:f3:29:cc:13:b1:84:b5:80:f0:42:
29:b3:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:48 2024 by rpki-client on console-ams.rpki-client.org