Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/41kSaJipG9m48p7SmpK1w-MCSoE.roa
File: 41kSaJipG9m48p7SmpK1w-MCSoE.roa (raw, json)
Hash identifier: MRIU43BsiEOmq0sgsea8q7HrmLcFpDFpHetRwmobWto=
Subject key identifier: E3:59:12:68:98:A9:1B:D9:B8:F2:9E:D2:9A:92:B5:C3:E3:02:4A:81
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 018BB8E1A3A79E2F6E3D1C6B8294CBFF860C
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/41kSaJipG9m48p7SmpK1w-MCSoE.roa
Signing time: Fri 10 Nov 2023 10:57:57 +0000
ROA not before: Fri 10 Nov 2023 10:57:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 45.155.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:e1:a3:a7:9e:2f:6e:3d:1c:6b:82:94:cb:ff:86:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Nov 10 10:57:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e359126898a91bd9b8f29ed29a92b5c3e3024a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:a4:d1:75:b5:8c:5f:bf:8b:56:69:99:d9:
49:0d:f2:16:de:5f:f9:1f:67:70:24:b6:8f:e2:b9:
17:84:14:55:55:4d:4b:89:ff:c1:a2:37:5e:67:75:
f6:cc:32:d0:3d:3b:73:df:1b:68:fa:f1:9c:0f:5e:
a0:54:a3:7b:72:56:f4:04:d5:e0:b6:88:f4:11:53:
d7:a6:19:51:d5:f8:9e:67:63:a8:4c:01:f1:2e:33:
77:ed:58:88:f3:8e:6a:c5:ac:5f:2d:82:83:c3:66:
0e:8c:b7:2d:90:27:5a:7b:9f:5c:d1:35:df:9b:8d:
e0:c1:4a:1d:58:8a:86:7e:c0:f8:1f:6c:e5:4b:87:
83:b3:ec:04:c1:f3:6d:03:19:90:e1:b6:be:fd:84:
d3:36:98:b5:db:20:a2:f6:d4:fb:d4:60:4d:a7:7e:
3e:80:ed:20:6f:9d:da:7d:6d:9d:aa:8d:30:da:9e:
14:f0:56:c3:9c:45:7e:95:df:b5:56:d6:c2:02:be:
a5:8d:94:b3:ce:ec:f4:d2:68:c9:7d:f8:6e:20:8e:
03:c5:bb:4b:c8:98:8b:86:6c:59:d3:a6:a6:4c:c5:
01:81:1b:c0:f5:8a:be:e0:fe:f0:f5:18:a5:6f:05:
65:49:83:70:bb:17:8a:b8:eb:e0:21:17:84:1b:ea:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:59:12:68:98:A9:1B:D9:B8:F2:9E:D2:9A:92:B5:C3:E3:02:4A:81
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/41kSaJipG9m48p7SmpK1w-MCSoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.225.0/24
Signature Algorithm: sha256WithRSAEncryption
57:74:ed:40:00:26:86:6b:b3:07:1a:20:6b:eb:36:a7:18:27:
94:dc:75:2b:59:9d:d0:e4:ca:e8:8a:e7:f5:75:e0:e5:24:88:
f0:02:bd:b8:a4:f5:5c:74:cb:6a:4a:cd:dd:c8:c1:6a:41:17:
b8:8a:15:c6:18:d1:2d:58:05:d7:b7:96:63:dc:b8:72:1c:32:
37:28:aa:02:c3:3f:b5:98:9f:3e:e3:11:55:49:08:40:cf:18:
19:6f:d6:e3:31:c0:a7:12:85:08:7e:0f:32:6f:48:b6:0c:f9:
47:b2:74:45:ae:d8:b7:48:2e:f2:79:dc:18:e1:bf:86:c0:ff:
4e:40:cf:d0:74:8f:7c:84:6c:62:f6:12:c6:7f:75:3a:e1:7b:
ec:10:27:2a:dc:e0:36:01:4f:a6:f4:da:16:9c:2a:1e:c9:f3:
02:57:7f:38:50:98:64:b7:71:6b:41:88:50:ec:47:9e:a9:1b:
68:98:fc:35:6f:b2:32:37:9a:03:49:9f:e9:19:48:61:da:09:
7c:d6:8f:66:40:fc:97:1c:0f:3e:98:f6:5b:3c:f6:4e:3b:12:
da:27:ef:92:7e:75:85:36:1d:dd:30:0c:ec:f4:d3:e4:e8:e1:
e7:bd:c8:3a:49:2f:cd:b9:a5:c2:23:0a:a7:ac:b6:3e:be:81:
52:fc:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org