Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/Vlr1MXvKhFmh_SBBIePExDSGVis.roa
File: Vlr1MXvKhFmh_SBBIePExDSGVis.roa (raw, json)
Hash identifier: B3PU2/0QhJOACavcQtPGyzkdUPHnHxHdaVepc355y60=
Subject key identifier: 56:5A:F5:31:7B:CA:84:59:A1:FD:20:41:21:E3:C4:C4:34:86:56:2B
Certificate issuer: /CN=44d3e020a819a8cda609d5ea48441ee939e41985
Certificate serial: 37F4
Authority key identifier: 44:D3:E0:20:A8:19:A8:CD:A6:09:D5:EA:48:44:1E:E9:39:E4:19:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPgIKgZqM2mCdXqSEQe6TnkGYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/Vlr1MXvKhFmh_SBBIePExDSGVis.roa
Signing time: Wed 26 Jan 2022 15:59:10 +0000
ROA not before: Wed 26 Jan 2022 15:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34568
IP address blocks: 45.157.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14324 (0x37f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3e020a819a8cda609d5ea48441ee939e41985
Validity
Not Before: Jan 26 15:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=565af5317bca8459a1fd204121e3c4c43486562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:32:26:a0:17:a0:87:07:28:b9:80:3e:d7:
72:37:d1:c9:0d:fd:f1:8e:41:b8:c9:0f:aa:49:fa:
7f:1e:c3:f4:04:c6:6d:a6:48:3b:55:82:f3:f1:0c:
bc:76:ad:92:db:10:75:e7:44:a0:e5:de:47:7f:93:
7e:f3:7d:3b:ef:4f:f0:0f:90:93:64:16:ed:9c:27:
a1:68:d1:12:e9:37:69:46:d6:2d:a0:75:70:26:d2:
e1:73:ab:ca:7e:0b:a1:0f:26:05:f2:d7:85:55:69:
9e:5a:d7:d0:48:2b:66:11:cb:85:65:99:cd:5c:b2:
d9:4c:68:be:9a:4e:6e:df:2e:77:04:07:ff:39:47:
60:d0:ad:df:af:51:b7:52:b5:13:5b:5a:4e:55:4d:
b6:f2:d2:0f:c5:f9:91:d6:78:1a:bc:e5:d1:35:0c:
f7:16:a8:a6:ce:86:83:ec:12:89:6e:8e:6b:e8:28:
fa:54:87:a4:7b:9b:44:33:0b:3a:f1:0a:1f:81:b7:
83:c0:f7:0b:7f:1a:3d:cd:1f:43:19:1a:2d:0b:eb:
64:9a:02:56:ac:e3:55:48:43:10:44:e0:0d:83:1a:
f8:85:a9:72:52:62:87:e6:a2:50:0e:ed:4a:8c:cd:
32:99:81:80:4e:7a:44:ae:c8:a8:03:f5:f1:c4:33:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5A:F5:31:7B:CA:84:59:A1:FD:20:41:21:E3:C4:C4:34:86:56:2B
X509v3 Authority Key Identifier:
keyid:44:D3:E0:20:A8:19:A8:CD:A6:09:D5:EA:48:44:1E:E9:39:E4:19:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPgIKgZqM2mCdXqSEQe6TnkGYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/Vlr1MXvKhFmh_SBBIePExDSGVis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a775c6-0a6e-4d75-9990-e795be629677/1/RNPgIKgZqM2mCdXqSEQe6TnkGYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.137.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ab:3e:34:14:35:94:1c:02:5f:44:f2:5c:dd:5b:8d:3f:a1:
f1:c0:af:8c:27:a8:af:f6:6e:a3:f8:7d:40:45:89:98:3c:dc:
f1:24:e6:e6:e3:94:53:b7:67:45:23:c8:7e:dc:2d:45:d6:3c:
3e:f1:51:0f:e1:f3:36:d1:7b:12:8d:46:32:82:a3:46:c8:ae:
a9:d1:98:50:d2:31:0d:8d:5e:aa:22:d1:58:33:9f:a5:bf:0d:
5b:8e:21:48:55:a8:c3:a6:a5:39:89:1f:19:08:57:9a:5a:b8:
d5:44:ad:6f:b8:0a:ee:f5:5b:33:81:08:5f:9c:0d:54:ff:74:
2f:07:a1:e9:ab:28:85:1f:7f:d4:4f:83:86:7e:86:69:ff:42:
41:10:6e:5a:b1:67:10:0f:7e:e9:04:4c:9f:92:82:d7:74:d4:
c3:82:c9:5d:ad:f9:21:01:c4:47:26:ee:d7:bf:ab:62:09:d5:
77:ab:38:51:e4:f4:4c:5e:6c:54:81:af:58:a9:ba:29:a7:48:
96:fa:43:c7:a6:04:bb:33:6a:59:ff:1c:f8:3b:61:76:83:1e:
1f:62:e9:0c:27:af:10:b2:c5:00:00:a1:6b:e7:fe:8e:fb:f6:
a1:54:0b:3d:31:89:ba:d6:02:b4:46:f8:d8:74:ef:e6:c7:05:
41:58:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:04 2024 by rpki-client on console-fra.rpki-client.org