Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/TnQBX16m5k5Faop1lAlsxczRiEk.roa
File: TnQBX16m5k5Faop1lAlsxczRiEk.roa (raw, json)
Hash identifier: EgsU05fmMkvXut/H83yuvBgQm3LmBAp+JHbOg5p/3HI=
Subject key identifier: 4E:74:01:5F:5E:A6:E6:4E:45:6A:8A:75:94:09:6C:C5:CC:D1:88:49
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 01856EB9097ED5D9D50ACEAC8864549C6BF7
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/TnQBX16m5k5Faop1lAlsxczRiEk.roa
Signing time: Sun 01 Jan 2023 19:04:58 +0000
ROA not before: Sun 01 Jan 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 109.95.124.0/22 maxlen: 28
45.150.56.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:09:7e:d5:d9:d5:0a:ce:ac:88:64:54:9c:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Jan 1 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e74015f5ea6e64e456a8a7594096cc5ccd18849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:f1:dd:30:f3:fb:44:08:3c:62:80:6d:d4:
84:b4:69:7e:c1:7e:0e:a4:f9:04:96:d5:35:a7:a6:
2d:0a:08:e5:eb:ca:4a:2e:6c:ab:09:42:90:32:b0:
38:2d:ff:a8:8e:a0:77:9c:90:62:5b:c0:88:5f:d3:
2a:11:b4:5a:71:f1:42:b8:fc:ad:9d:ed:94:0d:25:
80:77:e9:8a:9d:48:c0:f6:2c:3a:93:0a:92:87:33:
7a:f3:f3:74:91:2d:e6:3b:a5:e2:83:b4:ed:10:5f:
7d:c7:1b:97:09:67:11:e6:7b:f1:8d:33:d4:6b:fa:
e1:ad:15:ef:55:be:78:e9:b8:68:66:9c:d4:7c:a2:
86:cd:c4:0a:8d:01:13:95:10:af:a7:a5:71:d9:31:
ef:83:07:9a:8d:af:4e:d5:e0:9c:22:38:77:24:33:
f0:bc:94:cf:cb:22:08:79:71:35:8c:2e:1b:f6:3b:
0c:e0:28:80:89:93:e0:bc:30:8e:03:84:b6:86:2f:
df:eb:85:ef:ce:0a:c4:5f:99:f8:79:17:e3:7a:83:
dc:72:cb:fa:7c:38:18:43:9b:e7:54:a8:c8:52:46:
52:0d:a4:c9:7a:b1:36:2c:f9:75:8c:2a:08:7a:e4:
6e:39:70:fb:19:38:e1:c4:59:60:e1:e5:e7:37:c8:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:01:5F:5E:A6:E6:4E:45:6A:8A:75:94:09:6C:C5:CC:D1:88:49
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/TnQBX16m5k5Faop1lAlsxczRiEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
34:25:1a:9c:dd:c1:07:1c:f6:5f:25:88:10:ec:b5:ed:d1:16:
29:11:79:11:c0:95:4a:f5:29:db:8b:ad:7f:8a:e1:3f:e1:05:
48:b2:d7:10:46:90:11:ff:61:d1:93:19:66:1c:bb:67:38:15:
2d:3a:a7:a6:f9:6e:70:95:b8:95:ff:7a:cc:87:2e:1a:86:97:
a4:7e:01:b1:13:2f:ea:fb:9d:16:9c:3d:be:be:cf:ed:52:77:
c7:86:b8:b7:ef:6a:88:a9:7d:ac:ad:67:f9:bb:9d:8f:27:7d:
83:b7:15:6c:36:6f:5c:a5:a9:12:ac:d9:4d:ba:dc:37:38:f7:
f8:00:e0:7e:79:4b:74:ca:91:27:65:76:67:26:87:a0:1e:7f:
e1:c9:f0:d1:4b:40:3d:54:2c:6e:ab:9f:44:62:1f:8e:d0:1d:
58:e3:c8:f2:d5:99:98:68:08:13:cb:d3:67:9f:53:13:c6:2b:
02:62:72:23:7e:0e:ef:49:38:62:14:a2:48:77:da:fe:38:1e:
a0:30:87:d0:17:70:13:1b:6e:50:13:42:62:54:8c:ad:67:03:
4b:43:9a:28:a5:99:6d:9b:d1:69:4f:cb:7e:42:af:52:a3:6a:
54:69:73:2e:13:4d:a2:4c:43:2f:28:e2:dc:27:8c:21:2e:83:
a7:3f:f7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org