Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/1Hl-VQKPvxROzz42IokDZUsGYeM.roa
File: 1Hl-VQKPvxROzz42IokDZUsGYeM.roa (raw, json)
Hash identifier: rqUa52RSKiupd/yOmXeA+IUPr9XIgNbIkKNDShFqDN4=
Subject key identifier: D4:79:7E:55:02:8F:BF:14:4E:CF:3E:36:22:89:03:65:4B:06:61:E3
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 073EC8E1
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/1Hl-VQKPvxROzz42IokDZUsGYeM.roa
Signing time: Sat 01 Jan 2022 01:53:22 +0000
ROA not before: Sat 01 Jan 2022 01:53:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208608
IP address blocks: 45.128.16.0/24 maxlen: 24
2a0e:3bc0:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121555169 (0x73ec8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 1 01:53:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4797e55028fbf144ecf3e36228903654b0661e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:49:71:7e:0b:3e:9e:1c:d8:01:c9:5b:1f:
15:eb:4d:96:f5:b2:cb:78:1a:16:b0:9f:14:0d:40:
13:c8:f9:f4:eb:87:e2:80:29:4e:be:87:fa:97:69:
41:98:bf:cc:e7:08:ca:5d:83:15:5e:74:1a:05:e8:
74:d6:38:57:da:d6:69:05:8d:64:73:a8:56:64:c2:
f5:6e:31:ed:e2:b9:f8:7c:b2:07:03:a5:3d:50:c6:
73:2b:67:53:da:ff:d4:95:79:ac:00:71:76:e7:1c:
65:b0:fb:a5:06:36:e9:4c:d9:24:87:d1:10:fa:b3:
20:03:25:a2:4c:9d:02:69:b0:8f:0b:f0:d5:3f:bd:
9a:28:0c:0e:e9:26:a6:c3:15:8d:da:39:61:df:d4:
85:3f:76:ab:f4:d1:72:ef:2d:ca:b4:92:81:18:4b:
81:c7:72:0d:dd:e3:63:31:02:59:4c:1d:04:e9:78:
75:da:d6:b5:b7:dc:50:94:51:3a:b2:55:7d:0d:ca:
61:ad:f8:29:77:41:f6:be:d6:d4:5d:fd:5d:ab:22:
d2:a3:a5:05:36:d9:1b:1d:03:40:23:9e:1e:44:ad:
3c:b8:b1:94:74:f7:55:84:42:ab:4c:bb:77:92:85:
f5:3d:ee:50:df:df:1a:c4:48:fb:01:27:26:21:4b:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:79:7E:55:02:8F:BF:14:4E:CF:3E:36:22:89:03:65:4B:06:61:E3
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/1Hl-VQKPvxROzz42IokDZUsGYeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.16.0/24
IPv6:
2a0e:3bc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
87:7f:74:99:8c:2d:55:e0:81:e3:34:f2:06:41:a8:ef:52:da:
4c:8e:e6:fc:b7:8a:94:31:14:1d:f3:87:a0:53:5f:d4:8b:89:
86:fe:df:95:e3:3e:c2:44:c5:77:d8:d1:d3:30:c7:6e:ec:bd:
a1:1c:23:7c:35:7e:41:2b:2b:71:2f:ef:af:33:87:11:85:ae:
15:f1:56:d3:16:7d:36:c6:98:29:fb:ea:d7:af:c7:00:f7:87:
c4:91:53:3d:82:59:c1:13:a9:1d:c5:b3:ad:3d:7b:40:c0:58:
da:d1:59:20:e2:e0:8a:96:d3:b5:74:31:8c:0e:09:42:ae:b9:
25:dc:da:df:cb:31:fc:a0:b4:0d:6e:0c:05:36:2b:10:29:5a:
b6:d6:76:27:5d:0c:c8:48:cb:32:89:a7:42:88:9f:7f:e9:b6:
1a:cd:17:ed:d9:4b:6a:47:de:d6:37:9e:41:47:ba:7d:d8:bf:
da:a3:77:13:ec:61:5b:1d:8f:ee:b5:9c:d3:9e:9f:5e:60:dd:
82:6d:f2:3a:35:b7:46:5f:5b:cd:f5:51:dc:be:8b:37:f2:43:
81:6d:af:4c:b1:62:c3:a1:c2:60:8b:fe:15:b1:b5:82:20:7f:
2f:0e:8e:f6:45:d3:d3:93:57:c6:30:9a:2e:d1:54:88:84:7f:
6b:02:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:32 2024 by rpki-client on console-ams.rpki-client.org