Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/AlnW-_lahWCjZL2g6mshPEzMa5Y.roa
File: AlnW-_lahWCjZL2g6mshPEzMa5Y.roa (raw, json)
Hash identifier: ADCnQRmTxeaXqBfWDnsLFXuaRLKqHlOHQ5OM+cktnPo=
Subject key identifier: 02:59:D6:FB:F9:5A:85:60:A3:64:BD:A0:EA:6B:21:3C:4C:CC:6B:96
Certificate issuer: /CN=7f5ded3c0fd8a7d659b3edc54529cb6db7a85a45
Certificate serial: 01D42708
Authority key identifier: 7F:5D:ED:3C:0F:D8:A7:D6:59:B3:ED:C5:45:29:CB:6D:B7:A8:5A:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f13tPA_Yp9ZZs-3FRSnLbbeoWkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/AlnW-_lahWCjZL2g6mshPEzMa5Y.roa
Signing time: Sat 01 Jan 2022 10:00:37 +0000
ROA not before: Sat 01 Jan 2022 10:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211500
IP address blocks: 45.136.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30680840 (0x1d42708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5ded3c0fd8a7d659b3edc54529cb6db7a85a45
Validity
Not Before: Jan 1 10:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0259d6fbf95a8560a364bda0ea6b213c4ccc6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:a9:a0:b2:ca:5e:f8:27:4f:dd:59:c0:3b:
4c:7b:5f:50:79:15:3b:f0:3b:29:ab:73:78:e1:9e:
9a:76:a5:f3:fb:f0:09:89:27:79:ee:35:33:2f:10:
d7:de:1e:6d:c2:c1:54:f4:45:87:7d:46:00:10:bf:
da:de:b5:64:78:f8:52:b8:af:73:ef:88:60:ca:af:
7d:24:b2:a1:d6:31:81:2e:af:ff:d4:fe:da:64:0e:
8f:04:ac:7e:98:8c:17:96:30:30:86:14:c4:31:7a:
25:5a:51:36:a9:6c:ac:6d:47:e0:af:1d:62:8b:83:
8f:9f:c4:2c:e2:d4:27:0c:25:69:49:23:0e:37:63:
49:69:81:6b:60:ca:fd:7c:fb:fa:fc:0c:17:98:94:
d1:9f:05:0d:10:a0:e7:ad:0d:27:92:4b:7e:01:7d:
1f:98:5a:2c:72:40:8d:f2:25:93:78:8c:db:9d:01:
56:30:5d:fd:a8:b8:36:ad:5f:67:84:36:75:f4:da:
56:fe:df:10:b8:f3:f7:1c:e5:e3:89:3c:1e:95:ca:
eb:b3:1c:11:e9:87:d5:91:bc:63:45:30:2a:bc:36:
5d:2b:cf:16:f4:f7:31:c4:c3:90:6a:b1:7d:55:4f:
ac:45:a8:ee:d2:58:4e:b0:43:bb:54:a1:3f:21:b5:
4b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:D6:FB:F9:5A:85:60:A3:64:BD:A0:EA:6B:21:3C:4C:CC:6B:96
X509v3 Authority Key Identifier:
keyid:7F:5D:ED:3C:0F:D8:A7:D6:59:B3:ED:C5:45:29:CB:6D:B7:A8:5A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f13tPA_Yp9ZZs-3FRSnLbbeoWkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/AlnW-_lahWCjZL2g6mshPEzMa5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/7e993e-b01e-4a95-a4a2-ba7c456a667f/1/f13tPA_Yp9ZZs-3FRSnLbbeoWkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.109.0/24
Signature Algorithm: sha256WithRSAEncryption
87:85:55:dc:77:d9:cd:42:4a:cb:4e:ef:4f:02:a9:b0:31:2a:
71:eb:35:55:d8:1d:8f:30:e1:d8:1e:9c:2f:6b:df:63:c1:59:
42:35:8c:e9:26:0e:5a:66:68:02:52:12:1e:72:1b:d4:53:ea:
b0:c8:0f:3d:6c:9d:73:a1:76:a0:25:5c:05:6e:ff:de:9f:28:
0a:4b:a4:18:d5:72:75:f3:eb:0f:ad:22:4e:ff:f6:9a:e0:ab:
9c:40:de:f4:fd:43:75:b5:c0:cc:f0:45:22:a9:05:06:d0:e9:
70:b7:80:38:c3:d5:d4:40:3e:04:14:d8:e8:ee:20:06:c2:96:
c1:46:ae:7d:e0:15:c4:20:83:f9:31:ab:6d:a8:3f:5b:1e:96:
70:38:cf:1e:96:8f:10:78:ee:93:0d:f0:b2:98:9a:d5:a0:59:
b5:90:5d:a2:b8:3f:04:e9:fe:df:c5:9c:99:74:7e:21:2f:d3:
14:1f:3b:8f:00:b6:1b:a9:7d:fb:fd:c0:31:f4:e9:60:f9:7c:
65:24:54:4c:34:80:ba:61:5b:3b:c1:18:6c:85:7f:26:3f:d5:
43:60:e8:af:f6:70:49:e7:d7:8a:af:1a:4c:ee:6d:7e:37:49:
dc:7e:da:29:87:91:26:78:f5:5b:26:0b:58:ca:e5:9a:15:f6:
e8:44:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org