Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/xKrI396rCzAXzJxoI62kDAsSPn8.roa
File: xKrI396rCzAXzJxoI62kDAsSPn8.roa (raw, json)
Hash identifier: wyKWxsnY9lYE2HhBCKSAUDbbKRKfzKVnSofwzM1ZttQ=
Subject key identifier: C4:AA:C8:DF:DE:AB:0B:30:17:CC:9C:68:23:AD:A4:0C:0B:12:3E:7F
Certificate issuer: /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial: 0184192638E6863C8D8FF55A7B7D6A428F47
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/xKrI396rCzAXzJxoI62kDAsSPn8.roa
Signing time: Thu 27 Oct 2022 11:14:06 +0000
ROA not before: Thu 27 Oct 2022 11:14:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.139.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:26:38:e6:86:3c:8d:8f:f5:5a:7b:7d:6a:42:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Validity
Not Before: Oct 27 11:14:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4aac8dfdeab0b3017cc9c6823ada40c0b123e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:2d:9e:13:b6:51:a4:f1:98:4e:07:ca:75:
ee:71:3f:38:3e:ab:d6:66:80:0d:f5:a5:64:f4:91:
56:ac:93:cc:05:66:8c:8e:11:22:b2:3d:0a:75:20:
c6:08:15:cc:0f:1e:22:2c:65:80:a9:c1:31:1a:ff:
b3:1b:b4:3a:c4:a1:fe:53:25:46:0c:ba:ed:e1:8c:
ed:4d:8c:c9:b2:ea:36:2c:eb:80:a7:43:26:26:31:
b2:a7:9b:dd:5f:55:7d:01:a0:9a:2c:a5:e3:be:68:
01:18:c9:1a:be:c4:9e:9a:49:e7:c8:50:b8:eb:92:
b4:ac:c0:48:04:e7:ec:fd:68:fc:46:f7:9a:d9:32:
43:a4:cc:3d:65:e2:0d:3b:36:5b:98:9e:bf:44:22:
17:43:5c:3b:cd:40:1f:0a:ec:d8:f3:cc:85:aa:8f:
79:98:9c:9a:e7:d4:3f:c8:db:49:01:61:e6:c1:20:
13:86:b1:e2:d2:67:38:40:d3:34:ad:44:73:ec:2e:
b0:f9:3e:95:28:4d:37:e4:03:d8:f4:13:1b:2e:5f:
e1:25:e0:21:60:56:01:aa:a4:5a:01:b9:a6:84:8c:
fd:1d:07:ea:be:26:61:10:13:70:fd:b0:d9:b4:90:
e2:97:03:82:76:dd:4a:2a:28:b8:85:4c:17:38:ea:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AA:C8:DF:DE:AB:0B:30:17:CC:9C:68:23:AD:A4:0C:0B:12:3E:7F
X509v3 Authority Key Identifier:
keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/xKrI396rCzAXzJxoI62kDAsSPn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:5d:b4:98:d2:84:21:75:a5:6f:13:b5:3b:ca:92:82:7c:25:
80:99:3f:27:34:84:fc:dd:0b:93:5a:e1:9d:35:b1:2d:11:c9:
b6:d1:a0:7e:31:96:2e:49:a8:a7:5f:53:8d:4a:24:06:ac:15:
12:67:03:7f:4a:ef:c3:8e:a4:b7:eb:a6:bb:10:7c:f4:55:cf:
c4:c4:22:24:a0:9e:6f:db:b3:ca:ab:18:3f:7a:67:51:f1:3e:
10:2b:cf:96:d5:2b:70:aa:23:0d:ad:e5:4b:32:64:cd:b4:c3:
ab:74:21:d1:15:8c:a5:5f:71:2f:fa:f7:ec:cc:c6:16:63:88:
94:c5:44:59:e0:b5:bb:dd:14:41:25:6e:c5:60:37:57:e2:bb:
62:1f:47:a8:5b:d1:06:5b:13:d0:75:b1:52:23:e6:9c:0a:65:
48:f5:6a:92:26:f1:cf:55:7e:0b:de:6e:3c:97:03:1f:17:5d:
a6:4f:0f:c3:dd:b7:c4:91:7a:3b:20:2b:e3:cb:92:2c:8d:cc:
e9:da:13:66:38:80:bf:3b:3d:c8:bd:36:89:3b:9d:8f:be:f6:
97:b6:6e:d7:0d:58:a2:18:7f:34:34:a4:fb:8f:d1:f9:d0:8b:
91:51:9b:e3:bc:fc:51:8f:61:54:52:b1:ca:f5:db:70:33:b6:
19:93:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:20 2024 by rpki-client on console-ams.rpki-client.org