Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/w77RIvQMhQnOUtviVlwhsQYae_g.roa
File: w77RIvQMhQnOUtviVlwhsQYae_g.roa (raw, json)
Hash identifier: 4kFrpDRx5Nk3Y7ll5z1krogmntSrSXzqzDu3agVU8Do=
Subject key identifier: C3:BE:D1:22:F4:0C:85:09:CE:52:DB:E2:56:5C:21:B1:06:1A:7B:F8
Certificate issuer: /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial: 07A6FAD4
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/w77RIvQMhQnOUtviVlwhsQYae_g.roa
Signing time: Sat 01 Jan 2022 14:01:13 +0000
ROA not before: Sat 01 Jan 2022 14:01:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.155.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128383700 (0x7a6fad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Validity
Not Before: Jan 1 14:01:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3bed122f40c8509ce52dbe2565c21b1061a7bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:17:58:d9:20:36:82:ba:8e:49:32:42:c9:
e4:89:7c:e7:29:45:cb:70:51:d4:69:91:20:3e:c5:
fb:cb:be:92:fa:f2:59:53:4a:e8:a3:bf:8e:88:1e:
78:ef:b0:35:4f:4b:c7:71:4c:66:7a:0c:59:e9:64:
0d:6e:74:e9:92:6f:93:65:e6:09:fd:45:4d:93:4f:
0a:7b:dc:1f:41:d2:cf:4d:72:ee:69:62:09:e6:f8:
c8:35:20:a9:37:d4:25:c2:25:44:08:b0:6e:5f:57:
a3:10:bc:be:0a:dc:b9:c3:e8:76:85:34:41:23:d4:
ec:e3:54:95:c9:97:15:68:7b:e4:58:b9:49:65:21:
d5:89:89:4a:9a:48:b2:ab:8c:3f:71:48:23:10:8d:
3e:bf:e9:90:0e:db:ee:82:ee:18:7c:6a:9c:04:fb:
0f:47:ce:57:98:9d:64:f0:36:be:89:9e:03:e2:94:
08:c7:ae:31:3c:d4:75:89:1d:fe:7f:d7:d1:2d:20:
56:fb:12:4a:0c:3e:cc:0f:6e:0f:9c:e7:b9:26:89:
64:ff:9d:bb:ce:c3:61:09:18:b2:9f:74:c7:ea:9e:
54:5f:54:0f:5c:d5:40:b0:96:47:d0:7a:75:6c:eb:
60:c3:83:a6:d3:0f:62:80:84:4d:78:e9:b9:5f:cb:
f6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:D1:22:F4:0C:85:09:CE:52:DB:E2:56:5C:21:B1:06:1A:7B:F8
X509v3 Authority Key Identifier:
keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/w77RIvQMhQnOUtviVlwhsQYae_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.124.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e7:d8:3a:e8:d2:57:f1:74:ec:30:e7:16:30:dc:d5:00:b9:
19:b2:b6:ac:9f:d5:06:19:91:57:c3:91:bb:d7:90:58:ca:31:
80:7a:7a:0e:3a:6d:6a:16:f4:4f:b6:45:86:41:a1:4b:5c:7a:
bc:69:5d:d4:56:cd:9b:7d:9c:49:0b:c7:4e:ac:84:52:b0:aa:
a1:95:a9:05:91:01:32:ab:57:30:86:d2:2d:60:03:e7:25:1b:
22:20:79:ba:21:a8:71:88:28:3c:58:65:50:62:3b:0a:87:6d:
28:81:4d:b8:f4:aa:3b:0f:1e:2f:d9:85:be:1a:0e:3d:39:29:
c9:f1:09:b4:54:3b:ba:75:24:7e:58:b4:56:76:34:45:b0:72:
38:19:f0:45:9c:5c:03:bf:0b:fa:7c:37:db:ac:d0:e9:a4:f7:
36:f1:02:fc:a2:41:4c:64:5c:f4:71:f6:96:30:4c:27:07:f6:
44:9a:82:b5:af:4f:89:6a:5d:a5:94:63:50:63:4a:dc:3b:66:
3d:50:ab:b4:9a:fa:b2:32:8a:d6:93:b1:85:f2:e3:51:ec:df:
f9:80:e4:8d:4d:27:04:51:b3:2d:d3:ab:f4:a0:d8:7d:f3:1a:
0b:8a:bc:58:21:4f:85:bf:f2:98:f4:50:d2:2e:42:2a:f1:ed:
d6:16:eb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org