Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/SXiZ6zdACgyDjay1XlxFmzguGtg.roa
File: SXiZ6zdACgyDjay1XlxFmzguGtg.roa (raw, json)
Hash identifier: mHyvgDpV3y+jQLXluQeYmjUFtwcoX/hKKURTqwk5HIU=
Subject key identifier: 49:78:99:EB:37:40:0A:0C:83:8D:AC:B5:5E:5C:45:9B:38:2E:1A:D8
Certificate issuer: /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial: 04DBB906
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/SXiZ6zdACgyDjay1XlxFmzguGtg.roa
Signing time: Fri 29 Apr 2022 14:05:22 +0000
ROA not before: Fri 29 Apr 2022 14:05:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 45.139.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81508614 (0x4dbb906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Validity
Not Before: Apr 29 14:05:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=497899eb37400a0c838dacb55e5c459b382e1ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:12:c7:b3:54:04:9e:ee:35:d9:8c:1f:98:
e1:82:0e:03:b5:c8:24:fe:6c:56:bd:db:a2:8d:85:
f4:dd:3d:92:73:17:51:24:c5:6e:37:2d:b5:a1:ef:
d6:39:80:eb:a2:38:21:52:58:ec:61:6b:78:de:69:
41:03:f8:a8:34:21:14:8b:d0:07:f4:33:af:bd:46:
08:9e:a4:93:82:99:b8:94:a8:eb:75:b4:0b:60:21:
c1:00:84:ef:67:40:c2:f2:91:0e:02:6c:68:23:b3:
6e:5f:11:50:05:4e:f5:8b:ea:fe:bb:20:85:86:05:
01:41:3a:05:e2:8f:4a:cc:3d:f2:07:b7:ba:15:9c:
72:50:b5:e4:fa:a4:42:65:6e:1d:0f:bc:8e:e5:93:
54:57:a1:11:34:a6:4b:10:e4:de:dd:e5:aa:3c:1a:
65:ca:61:02:7c:29:1d:e6:01:dd:8a:c3:c9:c5:b4:
90:a7:f4:5f:a8:43:bb:b5:4b:3e:18:a4:32:d5:b2:
1a:e8:2f:e6:4b:e7:40:d2:cd:98:82:79:e5:f0:80:
fe:28:7e:d5:e9:35:ef:c3:ac:85:6a:fa:cc:ec:6b:
41:0e:7a:35:ec:3d:52:2a:fe:30:f4:b2:1c:ab:c8:
16:7c:7f:0d:6c:0c:ae:06:73:ff:24:c7:c4:77:5b:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:78:99:EB:37:40:0A:0C:83:8D:AC:B5:5E:5C:45:9B:38:2E:1A:D8
X509v3 Authority Key Identifier:
keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/SXiZ6zdACgyDjay1XlxFmzguGtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.104.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0e:45:45:66:c9:9a:eb:34:fe:e0:d5:88:71:be:22:43:47:
99:27:5b:96:61:dc:12:79:f9:d4:0c:d8:cd:78:7f:43:ed:40:
67:2d:68:d7:1a:bd:70:5f:64:1d:f3:17:b5:74:57:a6:7c:ab:
58:56:13:65:7f:d1:36:ac:06:32:97:ae:19:34:d8:e4:68:72:
28:e8:fd:ed:e5:ed:d7:ec:5b:9b:b3:e5:77:ea:25:35:32:1a:
ef:7a:2f:18:15:ff:0f:e8:20:73:4f:ba:73:0e:a7:ec:46:c9:
bb:3e:11:30:bb:d7:b6:25:b2:a3:65:4d:92:54:29:6a:56:f6:
4e:dd:ee:5b:41:1d:1e:15:83:d3:de:56:49:0f:99:02:61:98:
a5:24:10:08:94:81:8b:ae:ea:8a:a1:8c:5b:e3:65:6e:80:31:
6d:c1:40:c8:b3:4e:74:05:50:4a:64:71:4e:61:0b:d4:7f:9a:
87:30:ae:14:cc:73:1c:52:e9:b0:77:70:cf:da:93:da:37:00:
1a:31:b6:82:cd:e5:76:c1:59:e9:a8:d8:7b:a4:ce:dc:ed:65:
06:fe:1d:e6:30:99:4c:95:c6:c5:eb:cc:ea:eb:b8:2f:c0:9a:
14:8d:e5:4c:77:49:95:53:52:15:ac:ca:01:7f:83:9d:1b:01:
36:fe:e9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org