Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/1GIq1ihrpBFnc0ozD86AK8G-VvU.roa
File: 1GIq1ihrpBFnc0ozD86AK8G-VvU.roa (raw, json)
Hash identifier: GvtbOniLN9h/TWCZqQL/lt+W/kITyVeo7EUOebBfgT4=
Subject key identifier: D4:62:2A:D6:28:6B:A4:11:67:73:4A:33:0F:CE:80:2B:C1:BE:56:F5
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 079FEDCE
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/1GIq1ihrpBFnc0ozD86AK8G-VvU.roa
Signing time: Sat 01 Jan 2022 15:06:52 +0000
ROA not before: Sat 01 Jan 2022 15:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42335
IP address blocks: 45.95.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127921614 (0x79fedce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Jan 1 15:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4622ad6286ba41167734a330fce802bc1be56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:57:a3:bd:b9:03:7a:3f:aa:a6:89:a8:5b:
58:d8:2b:dd:65:09:58:92:3a:41:de:57:a7:f2:1a:
70:24:1d:32:46:36:14:25:78:a7:bd:66:8e:38:ec:
f7:0d:df:68:58:a5:d2:0e:37:6b:1b:91:0a:35:cd:
14:fa:bd:e1:88:d9:4c:6c:f7:0a:8c:04:c3:14:e8:
ce:a7:e4:43:de:34:b4:38:b2:f3:ae:b8:ae:b7:7a:
48:c0:4b:ab:39:93:3b:1c:6e:34:54:4c:df:4b:23:
bf:e9:f6:e3:39:ed:f7:40:4f:0c:a7:e4:9e:aa:67:
6a:51:37:9c:71:53:de:a3:78:6b:46:87:65:fe:15:
ac:bb:46:9d:4b:29:46:51:a3:55:a9:f3:8d:2c:9e:
9c:46:2e:f5:fc:ba:d9:89:c2:d4:8b:3b:b3:8e:7b:
e1:fe:23:00:58:a2:0b:c5:d6:10:79:82:2d:3e:cf:
61:5d:ee:4d:80:6b:6f:7e:bc:84:bb:ed:eb:1d:52:
9e:d1:18:6d:b9:99:03:54:05:89:e2:99:77:66:3e:
3e:0d:81:20:57:db:84:86:f1:7c:d1:4d:6b:36:bf:
06:04:19:92:52:f0:3c:4f:31:63:43:dc:44:03:fd:
55:a3:96:36:8f:86:9f:77:39:c1:2f:67:ee:6f:07:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:2A:D6:28:6B:A4:11:67:73:4A:33:0F:CE:80:2B:C1:BE:56:F5
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/1GIq1ihrpBFnc0ozD86AK8G-VvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.54.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f2:82:38:78:4f:e9:71:d8:7a:d7:66:bd:36:8c:2b:6e:87:
4c:67:ed:2f:06:c1:17:cc:63:ad:d8:7c:f0:a1:f2:be:52:8d:
ad:a7:ae:da:47:8b:77:a6:87:1c:ed:46:53:bf:e5:2c:5e:1e:
fe:66:8c:6d:53:39:7c:0d:7d:98:44:05:49:c9:5a:b9:a0:4c:
b8:af:2a:b0:00:c7:f4:25:05:60:08:8b:99:5b:19:fa:04:49:
58:17:78:2f:1c:17:ab:2f:45:dd:cf:b9:c3:6c:19:57:6c:1a:
d5:e5:e2:b3:7e:47:c5:8d:1c:e5:57:f3:38:8b:1d:3b:b5:33:
6c:77:01:c9:e9:60:9e:9c:5a:c1:72:0f:7f:90:be:9d:2f:c3:
65:e0:b7:62:f6:4f:0b:53:74:88:c6:94:38:65:ad:06:59:28:
8b:cf:7a:15:62:f6:ed:21:3a:31:f7:f3:23:33:cc:3e:49:56:
b4:51:2b:4c:6f:97:d9:87:a2:e0:38:46:c5:92:2b:fd:d1:4e:
2f:15:2f:6f:fd:b0:80:ab:74:9c:32:ba:b9:9d:c1:80:ba:ab:
b9:c2:08:a3:e4:24:a1:97:ed:4e:6a:35:d5:32:a2:25:51:21:
46:29:36:ec:51:95:bc:a8:c0:91:f0:5a:b3:77:f2:07:9c:82:
9b:a8:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:42 2024 by rpki-client on console-ams.rpki-client.org