Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/4xs_5z3hkV2SCZPJTWp7AmoSL_0.roa
File: 4xs_5z3hkV2SCZPJTWp7AmoSL_0.roa (raw, json)
Hash identifier: B1vTbZe110n9s7eRqDPKO8AnNrYl638KZTfrLhDOymE=
Subject key identifier: E3:1B:3F:E7:3D:E1:91:5D:92:09:93:C9:4D:6A:7B:02:6A:12:2F:FD
Certificate issuer: /CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
Certificate serial: 018CC6B9190BF14A39B5A7E73A7ECDCE2881
Authority key identifier: B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/4xs_5z3hkV2SCZPJTWp7AmoSL_0.roa
Signing time: Mon 01 Jan 2024 20:31:08 +0000
ROA not before: Mon 01 Jan 2024 20:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48551
IP address blocks: 45.150.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:19:0b:f1:4a:39:b5:a7:e7:3a:7e:cd:ce:28:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
Validity
Not Before: Jan 1 20:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e31b3fe73de1915d920993c94d6a7b026a122ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:4a:f4:b6:2f:82:0c:ee:7a:2e:e2:84:f4:
08:59:79:c2:4f:65:6a:a1:50:d8:59:3d:b0:65:9c:
ce:75:ee:49:42:a9:22:80:bb:90:93:96:9c:34:11:
29:9f:50:bd:93:1a:a7:4e:8a:15:b0:11:b6:a2:de:
c6:93:b0:3f:6d:f0:df:12:c4:c3:65:4a:21:a6:e1:
45:eb:0e:e8:33:4e:aa:d6:c4:2f:c0:bc:92:11:32:
16:17:5b:de:1b:5e:2c:3f:52:d5:70:95:26:11:6a:
fa:38:52:55:6b:53:ca:6f:75:39:45:56:96:35:b9:
83:56:6b:4b:46:cf:02:aa:7d:05:97:72:76:bd:8b:
cf:65:40:36:0e:36:69:5f:a3:92:d9:c7:23:c2:72:
34:0d:e8:de:32:dc:13:72:d2:fd:dc:29:60:c2:b7:
9d:e5:86:63:1a:f2:7b:58:e5:63:2a:bd:8f:63:49:
9d:50:0a:80:6a:0a:ed:30:4b:dd:b3:0a:db:c0:cb:
b8:02:dc:9d:6f:5b:26:07:72:a5:26:6f:62:01:16:
27:79:77:e4:88:c5:5f:1d:07:36:90:f2:d0:01:df:
46:84:a7:ff:dc:0e:4a:b8:f6:7c:50:56:67:a7:a9:
e2:b5:d2:5c:31:43:df:86:e3:bd:d9:59:92:47:5f:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:3F:E7:3D:E1:91:5D:92:09:93:C9:4D:6A:7B:02:6A:12:2F:FD
X509v3 Authority Key Identifier:
keyid:B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/4xs_5z3hkV2SCZPJTWp7AmoSL_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.150.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ff:97:15:cf:8e:ff:82:83:17:f9:03:e2:72:69:4e:85:05:
38:c2:06:8f:82:c5:e3:06:df:f3:82:f9:25:b8:53:c1:1d:ae:
d5:03:9d:fd:54:2a:8f:e0:d1:ee:c2:17:fe:77:8f:8f:de:88:
47:a1:bc:a6:46:06:64:85:31:01:e7:20:ce:21:bb:8a:cc:de:
31:b8:85:d7:98:82:e2:72:1e:69:8f:23:d6:21:80:1f:30:4c:
f2:ea:db:79:f8:e9:24:d9:ec:20:ec:92:1e:73:78:4c:b6:df:
af:14:f4:27:3d:94:e1:86:c6:33:df:fe:64:ce:cb:7e:d5:df:
44:2e:94:a7:e4:d1:b9:52:97:71:fa:83:1d:3b:e8:46:36:c0:
a7:6b:f8:24:64:02:90:84:21:47:31:c7:67:a9:ba:d4:41:25:
c0:39:06:70:5f:18:b4:da:39:50:da:ba:da:75:fe:da:ef:7c:
c6:19:ae:5f:d4:bb:6b:2f:3b:37:5d:c7:2a:44:2d:51:36:0e:
70:0f:d3:56:86:94:8f:31:c5:6a:cc:d1:77:21:83:32:d7:1e:
2c:23:5c:a8:d0:d8:09:28:56:17:68:12:77:03:01:92:8f:03:
50:ff:79:d9:f4:71:5e:e1:c7:16:9b:44:53:9d:0a:6b:0c:1d:
a9:a0:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:10 2024 by rpki-client on console-ams.rpki-client.org