Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e32628-7849-4d01-ace4-6e73c2863b4c/1/TvObs4ZVtzFnGT-Vq7jyV5m3q30.roa
File: TvObs4ZVtzFnGT-Vq7jyV5m3q30.roa (raw, json)
Hash identifier: w49IiH3OIbH2Tcx/WGfdRjXTmjAHjeFbNO4zIM1JC64=
Subject key identifier: 4E:F3:9B:B3:86:55:B7:31:67:19:3F:95:AB:B8:F2:57:99:B7:AB:7D
Certificate issuer: /CN=b51d37de4a2aefe9fd751cc40ae7204977d75f37
Certificate serial: 080D1B70
Authority key identifier: B5:1D:37:DE:4A:2A:EF:E9:FD:75:1C:C4:0A:E7:20:49:77:D7:5F:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR033koq7-n9dRzECucgSXfXXzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e32628-7849-4d01-ace4-6e73c2863b4c/1/TvObs4ZVtzFnGT-Vq7jyV5m3q30.roa
Signing time: Wed 16 Mar 2022 08:53:05 +0000
ROA not before: Wed 16 Mar 2022 08:53:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60233
IP address blocks: 45.158.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135076720 (0x80d1b70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51d37de4a2aefe9fd751cc40ae7204977d75f37
Validity
Not Before: Mar 16 08:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ef39bb38655b73167193f95abb8f25799b7ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:39:84:94:79:27:bf:86:9b:bb:cb:cf:f5:
73:5e:47:74:f8:a3:52:f0:4a:d7:81:21:86:9d:ca:
09:2c:f3:6c:4a:f0:3e:24:10:82:d2:89:ad:43:74:
f8:6f:79:9a:1f:92:ac:63:9a:0e:0e:00:f3:95:f5:
eb:12:f9:1e:b5:d2:00:33:12:ac:7b:30:a1:0b:69:
25:cb:8f:5d:6e:ec:1a:5d:9f:24:10:36:25:de:f5:
15:52:17:ab:c3:4b:5f:27:a6:81:45:b7:ef:4e:fc:
0e:f8:aa:6f:8f:fd:af:84:62:38:c5:5d:c4:03:30:
e4:9e:56:65:ac:b5:fc:36:22:af:cb:0a:1b:97:b5:
61:14:a5:e3:79:40:b1:b6:ad:9b:d0:df:7c:67:06:
78:a6:cb:88:0c:38:d4:6d:0d:a4:09:de:23:e2:0c:
42:fc:42:2f:d9:0d:71:fa:7f:db:de:87:29:ae:94:
ef:c2:3c:8f:27:5f:2b:df:f5:e2:8e:12:68:a2:f1:
db:0a:27:7a:db:b0:e4:98:de:2f:c0:fe:a8:cc:1f:
21:f0:05:37:e1:bc:e9:79:3c:31:02:54:35:03:b3:
92:14:32:4a:c8:c5:db:1e:ac:0d:6d:94:80:52:cf:
aa:3f:87:73:9e:5c:49:c7:ad:ed:98:2a:1e:aa:88:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F3:9B:B3:86:55:B7:31:67:19:3F:95:AB:B8:F2:57:99:B7:AB:7D
X509v3 Authority Key Identifier:
keyid:B5:1D:37:DE:4A:2A:EF:E9:FD:75:1C:C4:0A:E7:20:49:77:D7:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR033koq7-n9dRzECucgSXfXXzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e32628-7849-4d01-ace4-6e73c2863b4c/1/TvObs4ZVtzFnGT-Vq7jyV5m3q30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e32628-7849-4d01-ace4-6e73c2863b4c/1/tR033koq7-n9dRzECucgSXfXXzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.132.0/22
Signature Algorithm: sha256WithRSAEncryption
93:f4:b7:bc:03:a8:e4:ee:a9:9e:a4:d1:28:35:5e:77:79:ba:
09:e1:cd:e3:69:02:51:91:e6:d9:13:0c:85:45:59:f0:2e:cc:
dc:ce:62:bb:54:33:6e:21:12:fc:59:f5:24:d3:e2:0b:be:1e:
c2:d2:58:d6:d5:e4:75:33:51:cc:58:78:06:b9:76:fe:ea:5b:
85:dd:19:d6:3d:d3:04:53:de:d0:f7:b7:9b:08:71:4f:85:d3:
b6:11:de:df:40:0a:f5:1a:5c:d6:34:bf:47:71:39:8c:2b:ee:
ff:b2:5c:64:2d:00:eb:f7:b8:76:38:dc:e0:ea:a3:c5:f3:d6:
4c:e4:da:45:16:23:15:fb:59:16:79:ac:08:63:d4:77:c1:ac:
39:38:b5:70:95:7e:8c:7d:d9:d9:ab:d4:ae:83:9d:fb:a0:a6:
d6:9f:12:b6:12:61:fc:fa:1f:f3:f2:bc:c4:8c:f9:7a:71:2a:
9a:ea:d4:f8:64:41:63:2a:83:47:6a:a0:8c:92:47:03:8d:4c:
17:32:43:aa:50:87:ce:39:11:00:71:00:91:55:36:9e:82:7f:
60:ea:36:75:56:d0:4b:33:fd:58:67:05:81:0a:40:d9:8c:84:
18:42:6a:dd:fb:27:f4:3c:1c:8f:b5:49:b8:4f:e0:14:f9:31:
3f:fc:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:21 2024 by rpki-client on console-fra.rpki-client.org