Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/1hoosp8tUwL9fWPvcEBuR1MtxbY.roa
File: 1hoosp8tUwL9fWPvcEBuR1MtxbY.roa (raw, json)
Hash identifier: 8iDngWQa8Md6jMiaH1wLTyXWCfIwVslArtaT1OnPQwg=
Subject key identifier: D6:1A:28:B2:9F:2D:53:02:FD:7D:63:EF:70:40:6E:47:53:2D:C5:B6
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 01856F0B30D77583FB6F8AEAC4A5F553DEC5
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/1hoosp8tUwL9fWPvcEBuR1MtxbY.roa
Signing time: Sun 01 Jan 2023 20:34:42 +0000
ROA not before: Sun 01 Jan 2023 20:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202539
IP address blocks: 45.12.200.0/24 maxlen: 24
2a0e:bf00::/32 maxlen: 48
2a0e:bf01::/32 maxlen: 32
2001:67c:1160::/48 maxlen: 48
2a0e:bf01:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:30:d7:75:83:fb:6f:8a:ea:c4:a5:f5:53:de:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Jan 1 20:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d61a28b29f2d5302fd7d63ef70406e47532dc5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f1:20:c8:f1:4b:51:0f:4d:fc:48:f0:0f:46:
61:35:00:14:a2:66:f3:b1:74:61:f1:e5:3c:08:89:
84:fa:82:af:7c:73:52:17:83:9f:be:8d:31:df:fe:
b7:ff:21:36:b4:59:af:7e:71:2e:4a:62:82:10:49:
12:05:6d:70:bd:2e:9b:a4:fc:42:3a:da:41:20:98:
b3:4d:4b:45:c6:b9:8e:85:e6:5a:cc:8b:8f:96:1a:
10:e9:8d:7c:5a:51:2f:b7:b1:72:42:c1:27:52:77:
30:b4:e6:84:ab:3e:87:be:d4:13:10:a8:0b:fe:55:
7e:7c:86:1a:9a:10:90:c3:b3:86:c1:47:01:aa:72:
18:7f:92:d8:31:0d:fc:7b:cc:71:39:0f:fe:fe:1d:
8b:05:3d:b3:32:ed:36:09:79:b1:af:3f:db:e1:65:
45:b2:e4:57:6c:65:92:44:03:88:61:9f:6b:04:26:
43:e1:e1:00:dd:76:62:a2:ff:ed:68:4b:f9:c1:cb:
8b:6a:0f:a8:a1:21:8b:af:68:cd:37:23:f7:9b:5f:
5b:ee:79:ed:0e:bf:c6:cd:cd:94:66:42:bc:c4:9d:
ab:4e:e3:c4:ab:60:f0:57:f5:17:0d:61:92:3b:89:
aa:6f:a0:9d:19:fd:7e:a3:2a:1d:41:34:b5:53:60:
26:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:28:B2:9F:2D:53:02:FD:7D:63:EF:70:40:6E:47:53:2D:C5:B6
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/1hoosp8tUwL9fWPvcEBuR1MtxbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.200.0/24
IPv6:
2001:67c:1160::/48
2a0e:bf00::/31
Signature Algorithm: sha256WithRSAEncryption
4d:b8:d2:74:52:98:d9:73:5a:00:c1:17:9e:7b:7d:f8:6c:5b:
7c:45:94:b6:77:e0:ec:be:78:b7:c7:2f:8b:c5:8a:56:32:d1:
98:be:ed:05:58:4b:f5:f0:76:b4:c8:6d:11:31:d2:da:24:52:
78:dc:e4:d0:a2:1f:a9:60:23:52:50:f0:c7:64:8a:34:e7:65:
ef:9c:d3:7c:47:8c:b4:cd:1c:c2:62:9b:95:a5:ea:d4:40:d5:
9f:54:7c:9d:b3:ee:b5:4b:b1:0a:6c:fd:ad:81:8e:95:0d:4c:
ab:22:1b:0d:6d:9f:16:62:80:29:0c:42:7a:6b:28:ab:c3:d3:
b2:9f:72:92:88:bf:5f:e0:d0:8b:fa:13:76:23:6f:f4:e8:51:
4b:91:f3:56:17:a3:f9:67:01:69:a8:0b:3c:46:6f:e2:02:43:
3b:53:ad:90:e9:d6:79:8f:40:0e:30:e7:12:6e:13:b8:72:41:
63:b9:ea:d2:6f:49:e9:fe:9b:ed:80:d2:33:db:83:58:77:74:
c2:49:d6:c7:1e:78:39:fe:3c:b4:fb:06:6d:2a:79:b7:10:c1:
39:ef:f7:29:38:b9:7f:0d:1d:a8:bc:20:bf:18:24:f4:9e:ec:
1d:d5:fa:12:c6:82:0e:d9:6a:af:16:12:11:3d:de:0d:4e:e5:
f7:af:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:35 2024 by rpki-client on console-ams.rpki-client.org