Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/q0nLP2XhfrozbhDGvws8HQnR8nU.roa
File: q0nLP2XhfrozbhDGvws8HQnR8nU.roa (raw, json)
Hash identifier: 25o5oMm6GESiEaN/T1UcsMUQCZI9ZiIXMQMYavdxbws=
Subject key identifier: AB:49:CB:3F:65:E1:7E:BA:33:6E:10:C6:BF:0B:3C:1D:09:D1:F2:75
Certificate issuer: /CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
Certificate serial: 15D79C
Authority key identifier: 42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/q0nLP2XhfrozbhDGvws8HQnR8nU.roa
Signing time: Sat 01 Jan 2022 01:53:06 +0000
ROA not before: Sat 01 Jan 2022 01:53:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205775
IP address blocks: 45.93.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1431452 (0x15d79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
Validity
Not Before: Jan 1 01:53:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab49cb3f65e17eba336e10c6bf0b3c1d09d1f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:9d:8b:d7:36:d0:fd:b4:f8:5b:bd:02:7d:
f7:2b:e1:9d:c4:56:9b:40:93:d6:64:69:6b:57:1b:
fa:f6:d9:ca:8d:e9:3b:66:3e:b7:9b:92:4e:40:2b:
d6:c0:dd:20:55:0c:38:1d:5d:9c:e6:7d:3e:cd:19:
a0:75:2b:66:07:34:59:0e:b3:7b:65:e3:3e:a1:92:
1b:01:a8:2a:6a:d7:92:91:64:bc:e3:cb:4d:d0:77:
73:2a:c0:15:31:18:cd:c3:14:af:15:cf:73:26:29:
bd:e8:2f:06:3b:a7:33:fe:bb:7d:f6:81:ff:2c:f6:
51:81:b4:7e:82:f0:02:8a:81:38:f4:00:e2:48:73:
93:ee:95:4c:ea:51:c7:46:d8:bb:69:88:5d:7f:aa:
4e:98:c4:c9:c9:16:f0:9d:43:1f:6b:d8:85:86:ca:
58:c7:4d:9a:7e:13:b8:52:4a:53:0e:86:bd:4c:ae:
c7:4c:fc:7b:7f:a0:53:dd:7b:67:18:9f:07:37:b7:
d7:e6:e4:a3:17:71:88:99:c9:31:81:26:a0:06:4d:
f7:2c:8d:e8:8f:97:00:f4:a3:55:49:61:f1:98:5b:
ad:0b:23:f7:3e:fa:5a:65:1e:30:2a:8c:bf:18:1a:
96:ad:fc:9b:2a:a1:a4:20:c6:06:b4:a6:ae:4b:59:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:49:CB:3F:65:E1:7E:BA:33:6E:10:C6:BF:0B:3C:1D:09:D1:F2:75
X509v3 Authority Key Identifier:
keyid:42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/q0nLP2XhfrozbhDGvws8HQnR8nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:75:70:5c:93:7f:e9:c6:ad:b1:78:21:db:80:10:91:96:6e:
e2:15:63:01:08:f2:30:84:1f:a5:5b:97:78:8b:eb:fb:02:9f:
bf:d6:6e:b7:45:b6:31:25:55:d2:96:1c:f5:c5:ca:93:e1:0f:
bf:43:21:f9:2f:58:93:79:8f:e0:22:ae:1c:b9:26:b4:e4:b2:
af:da:7f:66:f0:45:ab:32:d4:67:e0:80:a9:0d:f9:93:08:38:
05:6e:cb:e8:81:82:43:f9:cd:49:b5:8a:36:f3:b1:94:28:86:
b4:8f:cc:70:cb:9c:e4:35:c2:8b:db:8e:2d:b0:69:7d:e2:05:
7d:1a:32:6d:95:a3:fb:6f:38:70:91:a3:12:09:a7:d5:8d:8e:
23:fa:5b:9d:48:d0:94:c7:10:aa:a6:a4:7b:80:34:5e:d9:9c:
2e:14:c0:a5:50:71:ff:9f:c7:df:4c:7b:ed:84:98:3c:ee:d3:
9a:4f:b7:81:71:1a:bd:bb:19:a5:17:2d:09:ee:ae:e7:e4:13:
91:27:3b:7e:b6:c8:56:fc:44:a0:8a:bd:93:f0:b2:9c:72:83:
a3:ae:c6:c9:a3:24:a0:ef:61:1c:f8:2f:86:5e:e5:d7:02:0e:
b8:f7:bf:d3:b9:4a:fd:0b:38:a0:4c:60:83:df:97:ce:f1:88:
cf:29:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:18 2024 by rpki-client on console-ams.rpki-client.org