Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/ICazag0FscmorL60Yh3VDjy1VQY.roa
File: ICazag0FscmorL60Yh3VDjy1VQY.roa (raw, json)
Hash identifier: TkS0FeXTL7bH4zWtNivgYcScrrP8mwpR33b8OkTyEdA=
Subject key identifier: 20:26:B3:6A:0D:05:B1:C9:A8:AC:BE:B4:62:1D:D5:0E:3C:B5:55:06
Certificate issuer: /CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Certificate serial: 01BDBDAA
Authority key identifier: 83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/ICazag0FscmorL60Yh3VDjy1VQY.roa
Signing time: Sat 02 Jul 2022 05:50:25 +0000
ROA not before: Sat 02 Jul 2022 05:50:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34224
IP address blocks: 45.133.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29212074 (0x1bdbdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83cbe56d14f2c3a2c65659b6d38a4c05838ded7d
Validity
Not Before: Jul 2 05:50:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2026b36a0d05b1c9a8acbeb4621dd50e3cb55506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:64:bd:c4:0e:07:cd:1b:fb:d3:43:16:59:
83:a5:48:2e:8e:af:0d:67:e0:9e:53:12:39:26:8d:
92:26:e3:41:90:97:ac:8a:4e:d0:9f:11:a6:da:08:
b6:4d:f9:76:25:60:cf:83:8e:39:68:c5:bf:44:1a:
8c:3b:de:95:90:80:ed:1b:2e:c1:00:6d:2e:46:52:
8c:1c:b6:ae:13:a1:80:30:dc:5f:ea:a5:f1:b4:c0:
3f:90:47:02:02:81:38:6a:4b:5a:06:7e:96:b4:3a:
48:45:c7:d6:28:88:6a:f7:6c:50:57:8e:e5:68:5c:
a2:e0:da:d1:7f:69:d3:77:dd:a1:9d:82:ad:3a:54:
df:e9:4e:13:d8:e1:17:21:52:87:84:9a:57:c9:dc:
88:9e:fd:14:1d:34:44:73:06:14:e4:6b:cf:72:f3:
e9:74:4e:d2:cf:e3:92:8f:46:f5:29:dd:75:5f:44:
0a:4a:74:5e:df:85:ca:76:06:49:fc:66:0a:7c:1e:
29:4c:a3:16:76:3e:71:7b:ce:56:68:00:64:77:1e:
67:ff:72:2a:2a:2c:27:43:ce:28:cd:2e:55:20:ca:
bf:9a:5a:5d:01:75:d5:64:b2:fc:00:86:e4:71:98:
f9:8b:8c:e8:2f:69:49:fb:32:b2:65:d5:96:bb:68:
91:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:26:B3:6A:0D:05:B1:C9:A8:AC:BE:B4:62:1D:D5:0E:3C:B5:55:06
X509v3 Authority Key Identifier:
keyid:83:CB:E5:6D:14:F2:C3:A2:C6:56:59:B6:D3:8A:4C:05:83:8D:ED:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8vlbRTyw6LGVlm204pMBYON7X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/ICazag0FscmorL60Yh3VDjy1VQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5166e6-a057-43a8-af38-c4b8f6765b6e/1/g8vlbRTyw6LGVlm204pMBYON7X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.251.0/24
Signature Algorithm: sha256WithRSAEncryption
81:dd:61:ef:84:27:c6:19:eb:58:ee:59:78:00:f2:52:6e:24:
05:56:06:03:bf:9b:21:5a:bf:4b:fd:2e:2f:15:27:29:19:7b:
76:2e:79:c7:c1:81:ff:64:6f:9a:4c:f8:23:94:97:6a:c2:45:
e0:31:5d:71:f3:f3:c3:30:80:09:ad:be:12:fd:90:13:22:11:
7d:5d:ed:45:88:ec:23:15:7d:02:69:76:97:06:93:b4:54:24:
99:bf:36:c4:ab:02:ca:cd:36:38:bf:b0:df:6a:8e:54:dc:f0:
1a:2e:3d:e6:b8:c5:45:ef:29:a6:9c:a0:9b:eb:8a:df:b8:53:
cf:8f:3d:9f:69:30:50:27:4a:89:cd:3d:c5:0c:89:06:b8:24:
c6:9c:1e:d8:27:ef:b4:3a:e1:a7:c5:4c:09:f1:cb:67:6b:31:
ce:83:cc:ba:43:aa:bb:55:4d:58:ff:47:e3:60:f3:aa:76:64:
c4:6f:22:7a:09:50:9d:ce:bd:f5:95:92:ba:4b:d1:9d:52:77:
a4:55:28:a3:21:79:21:df:b2:56:80:19:9c:6c:eb:70:25:6c:
95:61:5c:0f:89:8d:61:d9:e7:c2:95:26:96:89:0f:dc:46:5f:
fe:b1:f4:ff:9e:28:ce:2e:7c:03:79:f1:d2:aa:50:fe:b6:8f:
44:24:46:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:32 2024 by rpki-client on console-ams.rpki-client.org