Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/DMjtHAcvhIxh4J3J_9ZVtLzHbqc.roa
File: DMjtHAcvhIxh4J3J_9ZVtLzHbqc.roa (raw, json)
Hash identifier: Lu3IoZVrePisR2M1vrW/eC9i/MC1QEA6tro0qrk67D8=
Subject key identifier: 0C:C8:ED:1C:07:2F:84:8C:61:E0:9D:C9:FF:D6:55:B4:BC:C7:6E:A7
Certificate issuer: /CN=0b59c9a516e33cbda20c1992f31f9235e510efa1
Certificate serial: 07B5ABDC
Authority key identifier: 0B:59:C9:A5:16:E3:3C:BD:A2:0C:19:92:F3:1F:92:35:E5:10:EF:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1nJpRbjPL2iDBmS8x-SNeUQ76E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/DMjtHAcvhIxh4J3J_9ZVtLzHbqc.roa
Signing time: Sat 01 Jan 2022 15:55:06 +0000
ROA not before: Sat 01 Jan 2022 15:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 45.141.77.0/24 maxlen: 24
45.141.78.0/24 maxlen: 24
45.141.76.0/24 maxlen: 24
45.141.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129346524 (0x7b5abdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b59c9a516e33cbda20c1992f31f9235e510efa1
Validity
Not Before: Jan 1 15:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cc8ed1c072f848c61e09dc9ffd655b4bcc76ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:8d:8a:98:cc:6f:1c:c9:cc:82:89:93:dc:
7c:db:26:05:95:3b:69:e5:9b:17:a3:71:8a:8c:95:
57:e3:ca:4c:c0:88:8c:e1:c0:30:73:b8:08:56:2d:
e5:6f:38:e3:9c:a0:ee:f8:59:fc:7a:b6:6a:b0:bb:
94:dd:ad:dd:01:3f:70:8a:0d:3c:3f:ef:32:30:6b:
c7:ad:98:b5:b2:67:68:6a:92:97:41:3a:b3:df:e1:
64:aa:b3:3f:51:cf:ad:d6:22:56:d8:74:4d:fc:7a:
df:dd:26:c1:c3:09:d4:15:bd:ee:b0:e2:c2:ad:00:
75:1e:b2:63:cd:63:7a:d5:df:8c:3c:99:ba:1f:47:
46:8a:5e:37:a8:f5:ac:33:86:60:3c:9f:ad:f0:8c:
5a:55:2f:20:b0:e2:9f:59:21:cb:dc:73:e8:17:ec:
db:af:81:71:cd:39:07:fc:4c:71:42:1d:d9:cb:c2:
69:2e:61:16:a0:48:4b:6e:ee:cf:39:0a:9d:53:cd:
ac:58:85:34:c5:8e:43:29:cb:dc:90:d3:0e:bc:81:
38:56:3f:59:4e:ce:7c:92:40:60:6d:b5:3d:d7:e0:
00:f6:78:30:9b:68:d6:e8:eb:b4:c6:11:d2:d3:e5:
9d:1b:68:de:5c:bc:b3:3c:da:bc:b5:e6:67:5e:08:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C8:ED:1C:07:2F:84:8C:61:E0:9D:C9:FF:D6:55:B4:BC:C7:6E:A7
X509v3 Authority Key Identifier:
keyid:0B:59:C9:A5:16:E3:3C:BD:A2:0C:19:92:F3:1F:92:35:E5:10:EF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1nJpRbjPL2iDBmS8x-SNeUQ76E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/DMjtHAcvhIxh4J3J_9ZVtLzHbqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/fd1428-cc5b-4220-9a4b-c3ec9141a950/1/C1nJpRbjPL2iDBmS8x-SNeUQ76E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.76.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:59:c1:0b:fe:35:a4:bf:43:40:fa:2a:e0:57:79:a5:0b:9d:
32:f2:94:8f:6d:e9:bd:60:b7:cb:da:6c:e3:d8:df:f8:7b:84:
52:db:cd:d3:d0:11:1b:a8:a6:36:84:02:83:bb:84:63:b9:f2:
d6:72:02:1f:5a:f3:cf:e5:d5:b1:2d:3c:ad:b5:7a:e6:c5:40:
c3:3a:51:70:eb:9c:52:a7:3f:fe:fc:83:0b:cd:d6:d1:57:18:
74:68:45:2e:8b:e9:24:8d:48:9b:4b:f4:65:c7:4d:2e:bf:99:
08:f5:a8:df:d5:24:9a:2f:7a:31:00:5f:37:f1:c0:5f:42:6a:
68:36:90:8a:45:fb:f7:db:3d:b3:0f:ff:6d:f2:2f:aa:d8:58:
d0:bf:b5:1a:12:b8:11:96:2c:da:b3:c8:f1:38:86:7c:f6:19:
e9:0c:54:2a:6e:95:17:14:1d:19:bc:f9:44:39:67:79:27:27:
13:30:4e:7b:22:a1:94:ad:cf:09:05:a3:75:f7:8b:cd:95:db:
6f:24:7f:73:62:ad:3b:e5:76:a8:b6:47:0b:e9:24:75:60:bf:
ed:0b:98:2d:2e:ea:af:83:a1:ac:fb:ef:1d:f4:c8:52:8d:d4:
9c:66:a9:7c:e3:fd:80:23:11:97:ad:fb:33:52:cd:ce:14:ec:
51:55:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:54 2024 by rpki-client on console-ams.rpki-client.org