Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/pjHAaJ4H2TUMrZpMgV8JIi8HhRI.roa
File: pjHAaJ4H2TUMrZpMgV8JIi8HhRI.roa (raw, json)
Hash identifier: QfEfi3cBINOmUTY1AwdZ00OUuPF0ZBMXikF/heBH8sk=
Subject key identifier: A6:31:C0:68:9E:07:D9:35:0C:AD:9A:4C:81:5F:09:22:2F:07:85:12
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 018570FBAF531871CB5B8B791C94D5FD04FA
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/pjHAaJ4H2TUMrZpMgV8JIi8HhRI.roa
Signing time: Mon 02 Jan 2023 05:37:00 +0000
ROA not before: Mon 02 Jan 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 45.155.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:af:53:18:71:cb:5b:8b:79:1c:94:d5:fd:04:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 2 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a631c0689e07d9350cad9a4c815f09222f078512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:d9:2c:f9:b7:91:23:bd:8b:dc:86:fe:f5:
9e:bb:86:ed:74:54:2e:33:da:99:cc:56:c7:8e:38:
4e:39:2d:75:4f:4d:5e:9b:f8:3c:d5:cf:23:53:d3:
16:3b:f1:41:86:9e:4d:a4:3f:f6:f9:95:6c:6c:4d:
89:0d:fd:a7:e2:e3:c2:cc:b3:b9:46:93:c8:8d:e1:
39:df:b2:c7:9a:8a:c4:26:f1:dc:52:6d:41:e5:d4:
79:bc:87:61:ed:f3:e7:ea:31:6d:ff:1f:6c:49:90:
ab:81:58:bc:ca:db:18:c9:ec:bb:1a:01:de:db:e2:
23:bc:4b:26:ed:5e:8f:be:02:4d:5c:26:da:ec:a6:
9f:a1:21:8b:8b:38:f0:0a:b5:17:76:68:67:07:48:
04:a9:69:da:6c:dc:8a:57:6b:13:27:28:0a:36:15:
fe:bf:02:43:8d:96:9d:76:fe:66:51:d0:e0:1c:0d:
02:18:88:05:6c:8a:ea:f2:e6:c3:f9:88:04:6f:7d:
40:1c:38:0b:4d:c2:6a:16:7e:d8:ea:33:65:2e:64:
4b:fc:3e:7c:68:aa:3a:fe:5c:92:b3:21:13:e9:d8:
86:22:20:1f:c0:2e:5b:36:a4:ce:22:6d:b5:c6:22:
ad:cf:b8:7e:1a:c4:7c:76:71:4b:5a:5b:61:d0:e2:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:31:C0:68:9E:07:D9:35:0C:AD:9A:4C:81:5F:09:22:2F:07:85:12
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/pjHAaJ4H2TUMrZpMgV8JIi8HhRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:df:7e:95:ef:e1:47:a5:81:30:63:d9:25:d8:23:eb:7e:de:
a6:90:64:ad:b4:83:19:fd:0f:07:a2:24:af:33:72:fd:e7:76:
1c:53:90:d2:79:ee:58:a4:0d:11:af:3b:71:6f:0a:fd:e5:bd:
b7:ec:44:c4:0b:03:a9:99:5c:24:32:ba:6d:36:b2:8a:83:7c:
f3:f0:9f:e8:26:eb:41:fb:69:3e:18:bb:70:db:a4:bb:da:88:
e1:62:5e:d9:a9:a4:00:58:9c:4f:bc:37:4c:e8:bf:93:6f:08:
18:6b:21:46:2c:32:f4:4b:fa:6c:4f:d1:07:e7:e8:c4:bc:ca:
6c:b8:b8:70:0d:9d:0d:6e:ec:3d:81:d4:21:ae:4d:90:8b:c4:
92:ea:cc:6b:d2:ff:4a:20:3a:c4:33:ad:c4:cb:74:58:13:24:
76:e9:8d:d6:64:1f:0d:34:cc:97:d3:0d:17:45:52:ef:ab:07:
dd:1c:30:12:4b:fe:0a:cb:92:da:8d:66:71:1c:f4:f5:ef:3c:
6b:bc:e1:2d:e9:00:8f:30:cf:34:b0:1a:ad:4f:87:bd:d5:4c:
2e:f8:19:a0:48:66:79:cf:b1:bf:92:d3:df:7b:73:e1:89:66:
f1:b9:87:d2:4d:7d:61:5d:de:c3:11:a7:6f:1d:22:56:5b:27:
27:59:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org