Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/X9ENaDI1sLlSGRXiDGBC2HdoCgs.roa
File: X9ENaDI1sLlSGRXiDGBC2HdoCgs.roa (raw, json)
Hash identifier: v1zOEr2UjenGFAyb7/npjHpmmupJlXnybt/3Mmo99lc=
Subject key identifier: 5F:D1:0D:68:32:35:B0:B9:52:19:15:E2:0C:60:42:D8:77:68:0A:0B
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 01856F0B6FE07FBE82B65069D127F06E8418
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/X9ENaDI1sLlSGRXiDGBC2HdoCgs.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.142.112.0/24 maxlen: 24
45.142.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6f:e0:7f:be:82:b6:50:69:d1:27:f0:6e:84:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fd10d683235b0b9521915e20c6042d877680a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:7d:a9:e8:32:d6:f2:19:59:ce:a5:b2:a2:
58:17:4a:eb:c7:f3:e2:90:85:69:3d:68:ea:67:db:
9b:8a:c9:4f:06:28:47:ac:80:ab:50:dc:f2:de:fa:
5d:91:62:41:84:22:ad:9d:c0:ab:a6:9a:83:2c:bf:
87:5b:e0:da:b2:c6:8d:d0:d7:b2:c3:06:d4:70:0e:
78:5b:89:e1:c8:ba:35:67:b4:76:50:8f:89:76:da:
1c:26:34:e2:10:c2:95:79:79:b3:a2:45:a9:ab:23:
34:58:a9:02:a6:05:69:49:54:07:ad:2c:f7:00:8b:
c7:96:ae:7e:1f:f2:f1:07:7e:fc:b8:7d:29:4b:cd:
41:c1:14:59:f4:39:51:fc:7c:8a:d6:e7:19:36:5c:
ff:61:33:1a:8d:ff:c4:f9:fb:98:30:a7:76:08:39:
f7:f6:aa:c2:bf:ee:89:90:7f:16:86:55:73:92:fc:
7a:ca:bf:36:a1:08:b5:6b:9c:af:50:08:35:5f:b5:
0c:4b:67:03:1f:aa:a5:85:62:d6:69:43:4f:a5:03:
14:07:1e:54:12:47:67:34:14:56:ea:90:fa:2d:4d:
f3:39:4e:0b:1e:90:24:bf:81:be:c3:05:20:97:3a:
ec:cf:59:60:6e:28:91:08:4c:90:fe:f3:ed:84:55:
ad:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D1:0D:68:32:35:B0:B9:52:19:15:E2:0C:60:42:D8:77:68:0A:0B
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/X9ENaDI1sLlSGRXiDGBC2HdoCgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.112.0/23
Signature Algorithm: sha256WithRSAEncryption
22:7a:1b:bc:69:40:ce:70:81:c0:00:2c:6e:10:0d:c3:9a:51:
1e:a5:25:ac:3c:85:f6:60:e2:6c:c3:c7:83:22:52:ba:7e:1b:
07:3a:ea:43:61:31:5f:e0:2a:85:4f:8a:c6:ba:2b:8d:1b:61:
9c:e3:8e:ba:78:38:f6:c0:93:72:7d:a3:ec:c7:e0:07:f6:63:
9c:af:08:dc:17:17:53:86:30:bd:01:72:c5:38:0b:26:8b:c7:
6f:71:65:87:73:78:b6:1c:cc:5a:2a:a3:16:40:33:98:50:ef:
82:b7:7a:de:f4:57:8c:e1:ee:d3:2e:5d:20:76:25:11:46:30:
8b:29:ad:5f:12:b3:b1:e9:d6:80:3a:40:43:ef:21:5b:a2:cb:
e7:f1:fb:46:1f:6a:9f:09:0d:b1:ae:07:91:02:31:32:81:18:
57:02:61:09:0a:cf:c3:d9:4d:45:68:c1:d2:3d:3e:40:46:25:
94:83:1f:39:f6:22:7c:77:cc:6b:b6:b8:35:aa:cc:5d:fb:98:
a1:87:d4:be:4b:e4:ce:bd:bb:69:79:08:12:4e:2b:b4:56:03:
a1:a3:12:54:5f:87:22:78:c8:cb:9c:59:53:34:10:91:20:ac:
ea:6a:f2:f4:b6:31:78:15:f2:02:6d:56:99:3d:03:a1:34:77:
a8:9f:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:42 2024 by rpki-client on console-ams.rpki-client.org