Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/ujy6uXLIn0aOHcgSLx5z2dtgI5I.roa
File: ujy6uXLIn0aOHcgSLx5z2dtgI5I.roa (raw, json)
Hash identifier: ZNB4tM1XjtlT4Uu7Osd3JhtdhBTjY0vkKeNwKrzI4AY=
Subject key identifier: BA:3C:BA:B9:72:C8:9F:46:8E:1D:C8:12:2F:1E:73:D9:DB:60:23:92
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 05F2BE
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/ujy6uXLIn0aOHcgSLx5z2dtgI5I.roa
Signing time: Wed 26 Jan 2022 13:20:20 +0000
ROA not before: Wed 26 Jan 2022 13:20:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 389822 (0x5f2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Jan 26 13:20:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba3cbab972c89f468e1dc8122f1e73d9db602392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:c1:3e:11:b0:f5:10:3b:93:5d:3c:c6:25:
62:fa:35:c1:57:e0:74:41:ec:f7:14:c0:a8:cc:16:
d6:92:75:18:e6:01:80:08:22:65:e1:41:63:ef:02:
38:34:da:b5:34:f2:3b:3a:15:91:d1:fa:a1:96:3c:
06:80:9d:69:b4:37:ad:05:8e:3e:d7:79:fd:0d:a0:
6b:da:63:30:3b:f3:21:42:10:51:12:28:3d:49:36:
bb:9f:ad:92:28:cb:4b:79:40:cd:87:54:20:40:16:
3a:20:50:a0:4b:24:85:dd:98:55:d1:65:3b:2f:64:
ae:29:c6:d0:51:10:05:77:1b:d9:42:c1:04:80:0b:
2f:fa:6b:d9:03:5e:36:74:3e:c5:76:4e:37:b9:44:
b6:1f:c0:6e:91:3d:36:01:7b:60:89:60:e2:56:59:
2c:b6:ab:cb:14:d2:e8:00:c0:d6:3f:9b:a4:85:e6:
28:43:94:4c:88:3d:54:17:12:13:03:71:b6:bc:92:
e9:12:94:3b:7b:a9:19:b4:7d:86:2c:d1:26:a3:66:
3f:f1:b9:a6:c9:64:89:d6:bd:9a:c8:1f:22:b8:09:
06:63:0e:8c:02:b2:37:34:1f:3d:54:be:80:c2:6c:
eb:4f:f6:2a:f6:af:1c:3a:7a:66:38:6d:df:31:41:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3C:BA:B9:72:C8:9F:46:8E:1D:C8:12:2F:1E:73:D9:DB:60:23:92
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/ujy6uXLIn0aOHcgSLx5z2dtgI5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
Signature Algorithm: sha256WithRSAEncryption
01:4b:34:6b:34:1f:a4:dd:7d:94:0c:ba:ee:a1:22:2b:f9:ad:
00:8d:43:54:e6:b1:1f:62:a2:2b:15:61:7f:1f:2f:85:22:3b:
68:06:1b:2e:73:38:bc:5d:8a:94:3b:10:06:db:19:23:f1:c5:
dc:3a:dd:eb:fa:5c:86:c7:61:cc:e9:2d:29:c0:66:05:4c:19:
31:e2:2d:42:6c:9d:2f:c6:79:10:b4:91:34:62:d5:55:b0:76:
c1:f6:d8:21:00:5f:6b:7f:31:c1:1c:e5:a8:f9:ea:ee:f9:0a:
77:09:25:f7:c1:7e:c6:ca:d4:f2:9f:03:79:76:d6:39:25:d0:
c5:ab:39:71:73:47:71:ab:90:bb:b1:39:83:d1:d5:76:6f:55:
3a:5c:7e:6f:7d:6a:d7:3c:7d:29:77:4f:02:0a:c7:af:83:9b:
52:51:d7:55:f8:49:e0:93:c3:d4:e8:a9:b3:d2:9f:9f:3a:7c:
14:97:71:4c:0d:5b:2d:6f:5b:6c:8f:c6:1e:53:e3:e8:43:36:
2d:28:18:22:c1:b5:57:65:8f:ec:da:96:18:8b:a1:4a:ea:33:
2f:b7:ef:4d:41:d2:44:24:53:96:e2:21:b1:8b:25:eb:7b:f6:
61:ff:fd:9b:6c:eb:d8:6c:9f:b4:ff:8c:77:e1:44:10:01:6f:
f0:59:33:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:21 2024 by rpki-client on console-ams.rpki-client.org