Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/Yzdk2xvRqbMOTVGVUuhgij9z9UI.roa
File: Yzdk2xvRqbMOTVGVUuhgij9z9UI.roa (raw, json)
Hash identifier: jSrnLewvYMzFjTUUeHzHb+309jnERiC6WvGjIftko0c=
Subject key identifier: 63:37:64:DB:1B:D1:A9:B3:0E:4D:51:95:52:E8:60:8A:3F:73:F5:42
Certificate issuer: /CN=6ef0a587acb330625e21158ec40b710af0e2167a
Certificate serial: 077686B0
Authority key identifier: 6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/Yzdk2xvRqbMOTVGVUuhgij9z9UI.roa
Signing time: Sat 01 Jan 2022 13:55:02 +0000
ROA not before: Sat 01 Jan 2022 13:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 45.155.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125208240 (0x77686b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef0a587acb330625e21158ec40b710af0e2167a
Validity
Not Before: Jan 1 13:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633764db1bd1a9b30e4d519552e8608a3f73f542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:b9:5d:f6:39:30:60:ce:f5:f7:33:ae:e5:
61:bd:53:06:b4:0d:8c:69:43:e4:4a:74:9e:cf:f8:
f8:ab:d2:aa:bf:ce:76:c5:96:7b:bc:70:5d:fa:21:
2d:47:9b:44:a4:be:f5:1b:31:9e:65:cb:12:3d:54:
27:85:19:36:2f:78:f3:77:41:a1:ce:7e:8e:ee:d3:
ed:56:08:2a:b3:5c:0d:2c:67:61:59:00:5c:d6:9f:
2c:2f:b6:d7:34:db:96:97:37:77:ec:67:ad:e6:33:
43:b1:46:ae:7d:70:c2:6d:e2:b1:b5:98:8e:75:01:
b0:aa:6d:bd:6a:ef:b1:70:65:e6:97:39:c0:9f:95:
e1:32:df:8a:d4:09:c2:12:dd:36:c9:15:d3:cc:a0:
ae:34:e5:70:d8:21:4b:4b:0d:ab:6c:b2:d4:b5:d2:
f3:a2:b9:5b:ef:b3:f4:10:00:cc:5b:f7:fa:ff:74:
b2:1b:77:4c:ed:66:b3:68:4c:51:5d:20:ad:b2:63:
b3:0e:3f:c7:a9:3e:b5:23:b3:ef:37:3c:b5:fb:70:
3d:6c:86:50:33:11:1d:a7:d3:61:ce:d6:61:8b:d3:
47:b0:15:54:61:0c:1b:5b:cf:2b:c2:88:ab:c7:1d:
11:b0:45:50:e1:fa:c2:74:71:98:57:87:e3:5b:b4:
56:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:37:64:DB:1B:D1:A9:B3:0E:4D:51:95:52:E8:60:8A:3F:73:F5:42
X509v3 Authority Key Identifier:
keyid:6E:F0:A5:87:AC:B3:30:62:5E:21:15:8E:C4:0B:71:0A:F0:E2:16:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvClh6yzMGJeIRWOxAtxCvDiFno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/Yzdk2xvRqbMOTVGVUuhgij9z9UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b47958-03d3-4201-8db8-ebfa5313b3f2/1/bvClh6yzMGJeIRWOxAtxCvDiFno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.67.0/24
Signature Algorithm: sha256WithRSAEncryption
20:09:dc:a6:2d:6b:ac:a8:05:96:36:c3:b9:f6:11:9f:c7:c9:
33:69:4a:b6:5e:31:8e:44:33:af:8c:30:ac:67:7c:78:93:c0:
79:e8:e7:3a:58:08:ad:f6:70:81:8c:0b:62:21:a7:17:c5:68:
53:b1:e0:c4:01:bc:22:ad:96:c4:31:a9:23:51:d4:1b:67:3c:
8e:c9:ff:7f:3d:a7:28:76:09:3d:3a:da:2d:d7:b2:5c:62:01:
42:76:86:da:17:42:b5:34:df:02:51:9b:3d:6d:30:97:40:d2:
52:d9:54:d2:52:63:fc:3d:3c:cb:65:e4:77:5d:d9:64:98:a5:
95:3a:c7:57:d3:86:86:8d:6a:e7:e9:81:4e:19:58:f8:f9:bd:
f7:85:6b:eb:7f:68:47:b1:d5:d3:3f:a7:23:24:e5:d0:ce:0e:
4e:b4:7e:b3:52:e9:b2:a5:22:8d:d4:d3:f0:69:5b:f8:a5:c6:
c8:a1:00:4b:c3:c1:a5:e1:10:8a:81:ec:47:33:9e:90:cc:a2:
3f:40:b7:83:a3:9e:06:ef:df:a9:45:8c:96:98:05:84:f1:24:
90:a4:c0:94:74:09:7d:55:09:29:e3:4a:87:69:cf:0e:d2:b1:
c9:86:a6:57:20:6d:6b:0c:b6:b2:d3:47:c0:32:21:62:1a:4f:
64:cf:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:40 2024 by rpki-client on console-ams.rpki-client.org