Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/wZ0LVPjEEGQg1XwTuMcAYihbhd0.roa
File: wZ0LVPjEEGQg1XwTuMcAYihbhd0.roa (raw, json)
Hash identifier: AQxMuoCCPhbxlcaofI6lPjNgPj12ENrvM/zrmMICkGk=
Subject key identifier: C1:9D:0B:54:F8:C4:10:64:20:D5:7C:13:B8:C7:00:62:28:5B:85:DD
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 01856F0B6F3FE820A40BBB3D516AE47ACB6B
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/wZ0LVPjEEGQg1XwTuMcAYihbhd0.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.142.112.0/23 maxlen: 24
45.142.114.0/23 maxlen: 24
185.245.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6f:3f:e8:20:a4:0b:bb:3d:51:6a:e4:7a:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c19d0b54f8c4106420d57c13b8c70062285b85dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:e1:bc:2f:b5:80:ba:ff:f6:4d:0e:62:53:
04:35:b2:6e:7d:75:48:02:43:68:79:c9:2f:be:58:
fe:83:55:0b:b4:9a:f6:b6:3c:34:1f:3a:26:ce:34:
5c:9b:8c:54:eb:7a:97:2c:e7:10:cd:bb:6b:42:f2:
b9:ac:12:49:88:90:8c:5b:4c:5f:f8:b6:10:21:22:
94:c7:57:51:c5:34:94:2f:5f:e1:6d:e6:d6:91:12:
02:4a:33:96:9d:9a:f5:22:43:a2:8d:91:bc:a0:ae:
f9:6f:98:48:08:e6:1d:77:b5:07:91:5d:c1:a3:73:
af:12:44:17:ce:75:5d:41:56:42:be:3d:36:99:f8:
de:32:1b:bd:2f:e5:a7:c6:d0:cd:81:5e:a2:f9:7e:
40:05:e6:8d:fd:a8:cb:23:2f:30:14:d7:e4:6e:3d:
bb:78:97:88:3e:78:64:98:0b:9f:67:33:02:bd:65:
f7:c9:ae:32:c2:99:2f:22:7b:de:73:1d:04:f0:ee:
e8:eb:e9:ca:b9:55:b4:7a:68:ad:53:cf:fc:e9:6d:
8b:8b:d0:8a:02:69:81:cd:29:bd:b1:f2:17:4c:8f:
ee:a6:21:f9:47:5b:b4:db:6f:5b:66:63:16:41:9d:
db:5e:c6:fc:2a:79:dd:33:19:6c:2d:d9:14:7c:cf:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9D:0B:54:F8:C4:10:64:20:D5:7C:13:B8:C7:00:62:28:5B:85:DD
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/wZ0LVPjEEGQg1XwTuMcAYihbhd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.112.0/22
185.245.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c3:ee:06:04:2a:ee:d1:63:0c:2c:cf:33:0c:0d:01:13:a7:
76:63:1d:03:3c:2d:8c:17:c9:da:8c:d5:19:14:aa:c4:bf:7d:
ba:4e:2c:bd:ed:d3:69:8f:b0:f5:f1:97:8e:c3:82:91:5d:ee:
f6:c4:47:f0:73:2b:91:cf:8d:54:e8:f9:2b:8f:c0:47:f9:d7:
a9:c5:ec:cf:d6:75:f3:78:74:31:24:3a:7c:70:0a:60:ff:0d:
1e:9b:02:8c:bf:db:c7:ab:68:c4:a4:2c:12:56:10:8c:8c:68:
f6:82:ab:08:47:7c:1e:b1:a4:3d:45:74:a5:1b:99:cc:7a:60:
90:9a:aa:88:59:7f:4e:11:38:fb:64:b2:a2:e7:2b:33:70:38:
33:76:89:17:b8:bb:c6:cc:22:1f:c3:ba:8a:62:4e:eb:bc:17:
62:5d:c1:fb:80:71:f2:cd:29:10:24:d2:3a:7d:62:ef:e9:c7:
71:e6:ea:03:01:a6:21:50:b1:e6:97:3b:f9:39:05:49:b9:b6:
4f:35:17:c7:6f:5c:e1:bb:9f:d7:6a:85:74:36:4f:32:56:16:
6b:aa:c2:a1:4f:c3:42:35:14:55:b3:4d:d7:d0:35:24:9d:f7:
c4:da:75:72:1c:86:0f:1e:67:e7:6f:33:ef:4a:cd:33:29:83:
b3:82:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:42 2024 by rpki-client on console-ams.rpki-client.org