Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/CswQIdYqWfMOotxpKXT0uqJUxfE.roa
File: CswQIdYqWfMOotxpKXT0uqJUxfE.roa (raw, json)
Hash identifier: sj7eiKZkv4p6h3nN+kjMF4uAG4srVM21cIJbGYR5Sko=
Subject key identifier: 0A:CC:10:21:D6:2A:59:F3:0E:A2:DC:69:29:74:F4:BA:A2:54:C5:F1
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 018A6A7EDFC580C898C7FB13D908C59CC14C
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/CswQIdYqWfMOotxpKXT0uqJUxfE.roa
Signing time: Wed 06 Sep 2023 12:36:54 +0000
ROA not before: Wed 06 Sep 2023 12:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 45.155.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:7e:df:c5:80:c8:98:c7:fb:13:d9:08:c5:9c:c1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Sep 6 12:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0acc1021d62a59f30ea2dc692974f4baa254c5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:97:ef:09:53:ee:0e:80:f9:0e:3e:5d:3e:
67:33:2f:47:64:5f:82:6c:08:1a:c6:53:2c:9c:d4:
63:e6:02:ff:4c:11:a7:64:37:1a:8a:b3:b9:13:09:
ff:f0:d9:a8:4c:f4:66:65:f6:73:e6:7c:78:fd:37:
14:08:00:c1:eb:f0:f3:52:04:21:ac:de:eb:1e:87:
d1:e4:52:65:f7:5a:70:6f:8e:5e:4f:9b:d2:8e:39:
df:97:93:86:6a:77:1a:4c:c0:db:58:c7:d4:a7:91:
d9:1a:fb:64:75:50:5b:78:5c:7f:58:10:0a:66:3f:
ed:9a:02:ae:a3:17:e3:27:0e:95:ee:3a:c4:5d:25:
b3:a1:bf:56:e3:f9:73:d8:4d:52:6e:67:1d:b0:cc:
bd:66:ac:f8:1e:5e:3f:69:a5:03:45:24:7e:c1:45:
5c:65:be:46:36:21:00:4b:dc:be:0f:98:ae:55:6b:
d1:73:20:3e:b4:cc:fc:04:c2:c7:f4:99:d6:a6:85:
12:a8:95:4d:8b:70:2c:63:34:7f:12:b4:76:d0:0a:
d7:fb:ee:46:1c:4c:4d:d1:0e:00:a2:c1:5a:c1:7a:
38:db:74:3e:93:c4:eb:b6:1d:a9:74:a9:8c:47:92:
3a:dc:5e:45:b0:8c:54:a2:b5:3e:9f:cc:0c:b1:34:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:10:21:D6:2A:59:F3:0E:A2:DC:69:29:74:F4:BA:A2:54:C5:F1
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/CswQIdYqWfMOotxpKXT0uqJUxfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:07:99:ab:e8:ee:a6:6a:17:66:ab:4f:0e:b5:77:3a:be:9f:
32:6d:19:5d:c3:47:bb:38:ad:0b:19:1a:fe:14:ac:31:2e:70:
de:5f:87:89:14:c3:05:5f:d5:61:af:bc:b5:45:ed:a6:98:10:
b1:07:82:28:5b:e7:34:c1:e9:c5:3f:1c:9d:3c:f2:17:25:d7:
a3:c1:d4:5b:dc:31:05:09:d7:b3:58:a1:41:17:f5:de:ad:85:
83:0d:af:1a:b6:b3:60:f0:70:b7:02:af:f4:83:25:92:90:f2:
99:99:a0:7d:d5:70:04:99:1d:4a:9a:45:23:2e:06:0f:06:5b:
13:ae:e6:73:97:13:2a:50:6f:93:1e:24:bb:3c:e6:c2:da:c3:
57:2b:72:ad:b0:8e:3e:80:85:75:0e:da:ed:73:17:c4:a9:c4:
16:48:25:97:b3:c0:69:99:e4:98:64:9b:9b:ab:25:99:96:91:
e8:e9:41:a3:c3:f9:30:b0:cc:3d:32:a2:42:45:1a:40:d7:ea:
af:0e:65:2f:97:33:7d:7b:35:42:5b:2e:85:a9:e7:11:79:c0:
05:08:ce:f5:fa:af:fa:a8:cf:ca:3c:10:ad:e7:e8:40:df:dd:
0c:3c:eb:43:0a:04:4e:90:8f:51:0d:7a:6a:79:24:bc:c7:71:
b4:26:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org