Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/sIIggPixyNEoBa5ivh4y_BP01Vs.roa
File: sIIggPixyNEoBa5ivh4y_BP01Vs.roa (raw, json)
Hash identifier: Hq+6Wsd4zOfLGqQxrijoA0o/OnMEQZjkncgYZowus2U=
Subject key identifier: B0:82:20:80:F8:B1:C8:D1:28:05:AE:62:BE:1E:32:FC:13:F4:D5:5B
Certificate issuer: /CN=936519b2e90dcc6f366210144140011786f7ac2e
Certificate serial: 077EFFE5
Authority key identifier: 93:65:19:B2:E9:0D:CC:6F:36:62:10:14:41:40:01:17:86:F7:AC:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2UZsukNzG82YhAUQUABF4b3rC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/sIIggPixyNEoBa5ivh4y_BP01Vs.roa
Signing time: Sat 01 Jan 2022 04:01:53 +0000
ROA not before: Sat 01 Jan 2022 04:01:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47730
IP address blocks: 45.148.160.0/24 maxlen: 24
45.148.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125763557 (0x77effe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936519b2e90dcc6f366210144140011786f7ac2e
Validity
Not Before: Jan 1 04:01:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0822080f8b1c8d12805ae62be1e32fc13f4d55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:99:17:b4:4a:d5:ae:5f:52:67:d7:91:8f:
b8:e8:aa:29:0c:b2:91:d5:c9:4b:cd:d4:18:28:73:
b8:88:d6:51:a6:ad:08:75:30:11:aa:8f:c1:32:b4:
9c:f9:f3:f5:e7:3d:ed:d1:fe:85:71:15:7a:b8:10:
c5:69:4e:b5:ea:59:73:79:c7:75:65:d6:a5:03:9b:
72:34:99:b1:8b:d9:1d:27:36:47:a0:6c:13:87:8a:
20:ac:f4:87:64:4c:fc:39:2d:f1:72:71:75:58:32:
57:40:87:3b:fc:0c:12:41:23:74:8b:31:f2:df:ef:
ac:0d:52:bd:f6:7a:c3:35:46:15:4b:6e:5f:10:4b:
de:09:bb:65:41:9d:56:11:67:be:e2:a5:13:c1:81:
d4:1b:12:cc:9e:0c:4d:d5:0c:6a:f5:c3:79:9e:29:
28:64:f5:15:fa:26:23:28:25:d0:e2:3d:ee:32:3b:
8c:71:b2:4c:a3:75:2c:4e:a9:f8:aa:cf:60:6b:c8:
4f:93:60:d5:ad:ed:09:b4:05:09:6e:99:c8:ca:60:
c1:02:d9:0a:fd:38:47:87:32:70:38:7f:ec:42:b9:
29:ba:39:a1:c2:4e:5e:be:b1:b2:1b:d4:40:c0:cc:
80:64:1b:33:b6:24:97:0b:95:e6:e0:91:b2:72:de:
50:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:82:20:80:F8:B1:C8:D1:28:05:AE:62:BE:1E:32:FC:13:F4:D5:5B
X509v3 Authority Key Identifier:
keyid:93:65:19:B2:E9:0D:CC:6F:36:62:10:14:41:40:01:17:86:F7:AC:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2UZsukNzG82YhAUQUABF4b3rC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/sIIggPixyNEoBa5ivh4y_BP01Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/00f6dc-b91d-44a4-967a-f3efaf5f1f87/1/k2UZsukNzG82YhAUQUABF4b3rC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:33:cd:47:49:1a:01:f0:ce:65:e0:6d:7a:d3:ef:02:b5:2a:
93:7d:6e:9c:0e:dc:15:d9:bf:ad:5c:c5:41:b4:e5:b6:70:c8:
48:4e:6d:c5:d9:03:4e:7d:0b:9d:42:32:3a:d1:98:01:d8:f2:
b2:f7:f1:64:54:21:3a:39:0b:09:4b:08:3c:c6:4c:5d:52:a8:
77:3f:bb:70:0b:c8:e5:ee:88:ed:6b:cf:29:2d:d0:4e:7f:02:
d5:77:be:21:f2:6d:50:03:f3:7b:d8:71:85:b2:08:70:9e:7b:
5a:98:24:a7:36:db:d8:0d:c6:fc:4d:d1:84:f5:3b:3e:d1:10:
a1:01:40:bd:37:a8:ca:2d:00:35:2e:a6:01:21:cb:7a:b9:01:
11:f5:93:f5:23:6b:e0:be:89:b5:2f:cb:21:4b:e2:62:9c:11:
f4:c3:40:9a:34:45:23:2a:d6:16:42:40:b5:1a:5a:0b:6c:f0:
16:69:80:46:10:c8:9a:cd:6b:8e:90:09:0a:22:bf:ec:ae:10:
20:f1:6e:b7:85:04:c6:d3:22:60:55:cc:01:60:83:ee:df:ab:
35:4d:b6:46:1e:c2:01:3c:e9:08:e1:9f:cf:60:79:60:13:67:
3c:0e:78:d5:11:ff:6a:79:bf:9e:90:7a:35:56:f4:3f:76:5a:
e1:b6:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:15 2024 by rpki-client on console-ams.rpki-client.org