Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/mK0bBgNW7Q1LvJxtrEmdZqzPWYQ.roa
File: mK0bBgNW7Q1LvJxtrEmdZqzPWYQ.roa (raw, json)
Hash identifier: 7wr264x2qi62raQpk5FtxesMn7aeWT2FS13Rh38w/oc=
Subject key identifier: 98:AD:1B:06:03:56:ED:0D:4B:BC:9C:6D:AC:49:9D:66:AC:CF:59:84
Certificate issuer: /CN=06e2744666d85667d32f36aeb92ea27bb8ee84d7
Certificate serial: 07786D33
Authority key identifier: 06:E2:74:46:66:D8:56:67:D3:2F:36:AE:B9:2E:A2:7B:B8:EE:84:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuJ0RmbYVmfTLzauuS6ie7juhNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/mK0bBgNW7Q1LvJxtrEmdZqzPWYQ.roa
Signing time: Sat 01 Jan 2022 05:55:38 +0000
ROA not before: Sat 01 Jan 2022 05:55:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205199
IP address blocks: 45.136.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125332787 (0x7786d33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e2744666d85667d32f36aeb92ea27bb8ee84d7
Validity
Not Before: Jan 1 05:55:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98ad1b060356ed0d4bbc9c6dac499d66accf5984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:75:3b:3a:3b:a4:32:ea:69:ce:b0:e7:d7:
bd:a7:d7:34:33:52:64:46:db:6f:96:c5:c7:c8:76:
40:d0:46:d6:68:77:58:b9:f0:cd:d6:d5:5b:46:ee:
6e:e1:3d:e7:65:c2:bc:bf:88:39:4b:be:5c:5e:6a:
12:cd:3e:73:5f:23:8a:b6:0b:23:e4:e7:ac:fc:08:
8d:de:47:20:e9:4e:55:0e:32:3f:00:b3:09:74:0c:
f9:a8:e0:d2:c1:82:76:f3:3b:2f:9c:ba:d6:a3:38:
00:e6:5f:b9:e3:d7:c8:f5:1e:17:3e:62:56:54:08:
52:19:87:28:df:02:41:fe:79:19:d7:cb:1e:9e:f5:
d5:0d:03:b6:bc:c2:7a:31:d9:03:97:c2:cc:6f:d7:
ce:ec:1c:3d:a4:b5:79:83:f7:86:cb:3d:a9:45:1c:
1e:b3:29:ba:6c:11:fc:07:e9:24:4d:f6:83:9b:2a:
5f:4d:fe:a5:5b:f9:56:5a:50:f9:82:99:a2:3b:cd:
63:54:75:c0:83:f1:d3:c1:60:ad:de:5e:59:45:c3:
29:8f:e9:eb:c6:71:73:13:ce:67:55:e0:8d:7e:2f:
fa:e7:ec:a2:a8:a4:2e:4c:e1:f5:d0:cf:36:cb:97:
bf:67:1a:8c:a7:ec:cb:02:4b:02:98:1b:14:fc:ea:
ce:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AD:1B:06:03:56:ED:0D:4B:BC:9C:6D:AC:49:9D:66:AC:CF:59:84
X509v3 Authority Key Identifier:
keyid:06:E2:74:46:66:D8:56:67:D3:2F:36:AE:B9:2E:A2:7B:B8:EE:84:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuJ0RmbYVmfTLzauuS6ie7juhNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/mK0bBgNW7Q1LvJxtrEmdZqzPWYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f43df0-3cfb-43e0-a105-fe66a8e76407/1/BuJ0RmbYVmfTLzauuS6ie7juhNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.156.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b2:a7:79:da:bf:42:0a:3e:d1:08:a3:6c:b5:23:89:46:a4:
b2:b6:1b:f5:e0:8a:5c:05:2a:ef:72:5f:e4:6e:9d:89:d6:c7:
c4:1b:b1:65:a1:e6:52:c8:05:f6:b3:84:ff:de:fe:2d:c9:76:
03:48:1f:c3:8c:1a:42:6f:54:64:50:7a:db:39:cb:a2:44:21:
dc:e7:78:11:f9:f5:d5:7a:31:2e:e2:84:38:cb:3c:28:aa:91:
a0:56:3d:bd:59:97:3e:a9:33:98:c9:e8:7d:54:9f:c2:61:ff:
97:7a:96:e0:a4:38:75:6b:c2:29:7f:63:f2:60:e8:cc:be:20:
c7:a8:b0:71:54:22:bb:7e:6d:e1:d7:b8:bf:69:d0:04:73:86:
f9:85:77:78:dc:34:80:69:34:d6:db:c4:f1:46:bf:fc:bb:8b:
e6:bc:c3:83:9d:a9:19:22:22:31:7c:b7:51:34:97:ef:2b:cc:
df:40:d9:09:b4:5a:f1:1a:29:c2:4f:e8:74:16:4a:0c:b7:67:
64:2c:54:31:de:72:f0:af:4d:48:84:2e:2b:8b:99:bf:f1:8d:
5b:5b:c5:d3:7b:2b:67:75:60:71:06:0e:07:fc:74:16:eb:c4:
43:50:ec:17:f0:a4:4f:9c:0f:a4:d1:ee:37:df:82:91:13:cd:
f5:ef:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org