Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/r2dNFkZpFSTm4IpwFdfXkk_lm6E.roa
File: r2dNFkZpFSTm4IpwFdfXkk_lm6E.roa (raw, json)
Hash identifier: g5Oqbtulhb8tmrIhY5Ol4qID280AjAZW4IUYzzwntEs=
Subject key identifier: AF:67:4D:16:46:69:15:24:E6:E0:8A:70:15:D7:D7:92:4F:E5:9B:A1
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 012657EE
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/r2dNFkZpFSTm4IpwFdfXkk_lm6E.roa
Signing time: Fri 27 May 2022 11:27:54 +0000
ROA not before: Fri 27 May 2022 11:27:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 109.95.124.0/22 maxlen: 28
45.150.56.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19290094 (0x12657ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: May 27 11:27:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af674d1646691524e6e08a7015d7d7924fe59ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:7a:70:12:58:b9:f8:b3:cf:15:2c:e7:0f:
c0:6a:42:8c:a9:15:06:c2:4f:b0:ac:96:04:48:3b:
bc:06:5e:e2:54:52:a5:2c:a0:c7:0b:73:3f:8e:d3:
23:12:88:f6:72:aa:2e:93:52:83:8a:df:bf:4b:7e:
cd:c4:bd:e2:ee:30:51:95:1c:68:ba:1f:91:e8:0d:
e9:96:e4:41:a7:52:e2:50:e0:be:a9:92:05:30:16:
a6:8d:8c:32:cf:7f:09:a7:bd:7d:ca:a6:19:6a:57:
7a:58:58:e1:1f:0e:bc:26:57:d3:f5:ed:ba:72:53:
75:74:9b:a2:a2:7b:de:c0:27:ed:4d:5a:cd:58:af:
68:88:74:20:ff:4a:71:2e:f0:29:43:a8:84:a3:08:
63:dd:78:68:15:09:05:74:04:73:d2:4e:ae:a7:45:
aa:96:11:99:09:05:50:c4:cc:3a:6a:aa:3e:87:f8:
f9:70:fb:81:17:12:0d:e6:5d:cf:06:dc:62:02:98:
5a:ed:26:01:31:37:ef:a0:c1:bf:1c:a0:02:f7:f4:
74:e4:62:2e:eb:0a:1d:fc:bf:2e:27:76:25:c2:94:
ca:85:0b:60:7b:f0:b8:40:9d:46:ff:2e:26:21:99:
e9:fb:3d:0b:1d:ce:38:ce:72:ea:6f:b7:fc:13:5d:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:67:4D:16:46:69:15:24:E6:E0:8A:70:15:D7:D7:92:4F:E5:9B:A1
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/r2dNFkZpFSTm4IpwFdfXkk_lm6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
29:4a:42:c5:40:b9:a5:c6:7d:4f:0b:89:69:ae:66:2e:20:9e:
48:a0:22:97:ea:cb:5b:cb:aa:d0:89:3a:92:33:68:c5:ed:54:
7f:a3:a6:90:ec:aa:d0:2d:b3:5d:ca:ed:2d:c9:bd:47:b5:bc:
50:e9:3a:09:98:85:9f:d4:bc:82:46:0e:82:2e:8c:94:b8:ea:
0d:2d:87:45:7b:62:44:e6:f3:dc:2f:ed:6a:88:33:bb:a5:d7:
9f:c4:c7:11:78:d1:18:fd:8e:8b:7d:c2:bb:0e:1e:9c:3f:ac:
c7:65:08:4f:ab:2c:cc:d5:23:29:ac:1e:53:b5:a0:33:23:71:
6b:fc:f0:51:f9:ed:7f:a6:14:ec:40:ba:74:30:da:f2:c6:a4:
a7:0e:6b:88:32:62:f5:92:52:b0:49:86:b2:06:cc:0f:ba:a5:
95:2c:d0:ca:ee:ee:7a:9b:76:21:d9:81:e0:be:5a:19:a5:77:
84:81:f4:ba:b0:ea:6a:c2:22:ed:38:53:b4:b0:52:1e:c1:a9:
0a:15:48:3b:20:39:ef:52:7c:eb:6d:db:a5:6e:07:fd:51:70:
e9:26:df:a6:5b:cb:cb:4a:07:87:17:12:f0:65:2e:4e:29:13:
02:98:8f:ed:c7:06:62:da:57:82:27:7a:60:f1:f7:6e:cd:e9:
8b:48:ff:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org