Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/BawwGc1dRoeW9aK5mt2sC4m75oE.roa
File: BawwGc1dRoeW9aK5mt2sC4m75oE.roa (raw, json)
Hash identifier: MCzgKzNW//0WAvIKvdMh5W4wzneFVSQS1U3IUOgk/74=
Subject key identifier: 05:AC:30:19:CD:5D:46:87:96:F5:A2:B9:9A:DD:AC:0B:89:BB:E6:81
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 01856CEF496914F283423D72FE037FD14F38
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/BawwGc1dRoeW9aK5mt2sC4m75oE.roa
Signing time: Sun 01 Jan 2023 10:44:59 +0000
ROA not before: Sun 01 Jan 2023 10:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 45.15.252.0/24 maxlen: 24
194.34.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:49:69:14:f2:83:42:3d:72:fe:03:7f:d1:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jan 1 10:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05ac3019cd5d468796f5a2b99addac0b89bbe681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:1b:a2:06:a8:de:7b:53:5a:27:8f:fa:12:
79:f0:90:75:6d:22:f2:a2:88:ab:83:07:00:cd:9d:
6d:c4:ed:3e:34:82:8f:8d:57:60:9c:0c:1d:94:80:
a6:88:67:2b:a1:aa:01:42:a0:40:a7:8a:8c:da:be:
7d:bb:1f:d9:4b:29:73:47:01:40:87:f6:7b:f5:d6:
5d:9e:a0:17:77:95:01:bd:1b:4a:93:26:d6:b4:89:
28:d5:e4:de:43:16:43:5f:c0:2c:cc:7e:37:be:22:
d9:2c:48:78:d1:eb:79:3a:43:c1:4c:ef:96:a2:ed:
ac:3d:72:6a:85:70:94:8b:fd:e6:69:3a:ec:5d:bf:
bf:50:28:87:d8:f5:41:21:0b:b2:10:08:12:ae:b8:
6e:76:da:d7:de:6b:19:09:ec:36:80:a2:7d:bc:85:
79:da:3d:c6:05:3e:41:4d:c1:68:21:51:45:a2:c6:
12:15:7b:60:1f:01:8c:65:d5:d1:5b:8c:58:03:13:
33:81:2a:f6:58:cc:92:d2:5b:bc:db:00:b2:a1:95:
67:b9:8f:72:66:6c:94:d5:88:ce:8e:3a:6b:66:6b:
f4:73:18:89:19:9d:ab:c8:e4:32:40:76:91:d4:9a:
99:17:84:22:0d:23:f3:16:25:29:3c:2a:df:82:4c:
df:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:30:19:CD:5D:46:87:96:F5:A2:B9:9A:DD:AC:0B:89:BB:E6:81
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/BawwGc1dRoeW9aK5mt2sC4m75oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.252.0/24
194.34.251.0/24
Signature Algorithm: sha256WithRSAEncryption
63:db:fb:ea:a7:2f:d9:f3:eb:7d:ba:46:4e:eb:97:7b:57:32:
1d:7a:36:82:d4:ac:ad:ee:b9:f1:92:18:fb:79:4a:46:74:92:
9b:77:c3:53:89:b3:3e:c6:7e:84:27:e5:c3:27:b8:6f:57:6b:
20:84:5c:a3:ef:06:d8:64:63:b5:c3:f7:4a:3f:10:83:54:e9:
71:fc:10:94:e7:a3:19:b9:64:28:6a:5f:98:e7:fd:bd:93:a7:
65:c1:76:6f:7a:cc:ce:d3:e3:a1:52:e4:f2:21:8d:fe:8e:0f:
54:c0:a9:47:77:ea:5d:87:66:13:03:f0:7f:b4:80:e3:ad:d9:
fe:12:95:a7:46:e8:c4:c4:b2:8d:4d:87:30:47:5f:6c:55:9f:
67:b6:88:ad:61:10:2f:27:c4:5b:7d:c8:bf:25:41:e7:95:2c:
ad:9c:0f:40:c1:cb:9a:98:ae:e9:60:5d:25:de:fb:36:cf:26:
64:cc:2b:db:fa:2d:00:6d:35:80:8f:df:ae:3f:0a:b9:9b:49:
0e:51:f3:ab:96:f9:b7:db:53:c1:98:95:24:3c:c9:53:b7:32:
82:8b:ba:21:3a:d3:e3:69:36:5d:c6:0c:a1:f9:88:43:80:08:
e2:92:92:36:94:ce:78:28:3d:78:2a:05:e6:35:0c:b9:3b:59:
f8:1c:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:31 2023 by rpki-client on console-fra.rpki-client.org