Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/1tAjgfitzypq7sT0aSJhTnxaV4Q.roa
File: 1tAjgfitzypq7sT0aSJhTnxaV4Q.roa (raw, json)
Hash identifier: L3uV80qJ/wCt836PbPRl6EeSImnhPMntznP8GZnx9zQ=
Subject key identifier: D6:D0:23:81:F8:AD:CF:2A:6A:EE:C4:F4:69:22:61:4E:7C:5A:57:84
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 081BBAE7
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/1tAjgfitzypq7sT0aSJhTnxaV4Q.roa
Signing time: Sat 01 Jan 2022 09:56:33 +0000
ROA not before: Sat 01 Jan 2022 09:56:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49697
IP address blocks: 45.12.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136035047 (0x81bbae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Jan 1 09:56:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6d02381f8adcf2a6aeec4f46922614e7c5a5784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:7c:44:8c:d0:ff:0f:ed:f8:fa:26:5c:45:
7d:9d:29:36:32:1a:14:1f:36:ac:7b:e7:38:4a:46:
2e:00:23:77:1d:9b:50:a2:af:f9:d5:29:1d:3b:84:
4c:6f:e0:50:58:1f:98:c1:90:8b:51:6a:20:70:ad:
5a:96:25:9c:4c:8c:3e:ac:07:06:73:f0:24:0e:fe:
26:c3:d8:a9:42:5d:fc:46:3b:d5:5a:c1:9a:a4:f2:
4e:ae:15:ac:dc:fe:ff:dc:79:e8:39:a3:c1:35:49:
c3:7e:f1:50:79:9e:3a:8a:43:6f:83:ab:96:5d:55:
06:5f:6b:d2:60:fe:42:36:3e:08:e1:04:d9:09:c2:
3d:ed:de:6f:36:f2:31:7c:cb:47:17:72:8b:48:62:
68:ab:c9:78:8e:9f:64:23:4b:5c:60:1e:77:32:96:
29:7c:78:d1:59:93:78:1f:b9:3f:ca:02:69:5e:48:
41:eb:cc:01:36:c7:e6:40:5a:0a:a4:40:bc:45:10:
f8:fd:74:b5:82:78:1c:ae:f1:ee:73:c6:cd:54:57:
13:cc:11:4c:a1:7b:a0:a9:f9:f6:b7:23:3c:26:fb:
96:93:24:1e:12:5d:f9:c5:b0:96:77:a5:51:ab:74:
f9:b3:41:8b:d1:72:f3:64:af:d4:73:c3:55:70:fe:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:23:81:F8:AD:CF:2A:6A:EE:C4:F4:69:22:61:4E:7C:5A:57:84
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/1tAjgfitzypq7sT0aSJhTnxaV4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5d:88:30:b0:26:25:6d:82:37:61:bf:46:09:7c:c9:6e:d5:
ee:a9:c8:ba:b7:04:6b:b0:e0:28:2a:df:16:68:14:31:85:54:
9c:21:ea:b3:2f:d7:0f:df:4c:58:07:d5:62:41:a6:8f:9a:52:
9e:ca:51:b4:e7:9c:f8:66:a2:ff:0e:b2:17:2c:33:b8:93:72:
1b:5c:83:e7:a9:dc:5d:8c:63:19:30:79:ea:d5:21:5b:8e:4c:
b2:d5:b7:9f:1a:05:41:f8:ee:3e:12:1a:8a:d0:ff:95:7f:3c:
45:2b:d1:3f:c0:32:f0:49:ea:90:7f:5d:f7:81:c1:31:ac:be:
4a:b1:71:fc:ae:74:78:6b:43:2a:4e:9a:8a:b5:4b:54:c0:ea:
c7:46:c8:4c:55:e3:d1:a0:74:33:46:ab:ea:b3:e6:f5:e0:c2:
ba:a7:7f:90:9d:eb:71:a7:6c:e8:e3:1a:82:cd:69:2b:f0:07:
20:2e:35:b8:46:e2:6d:51:c5:6c:87:27:b9:e4:72:f9:2a:34:
a0:c3:22:ba:c2:b7:9a:6e:40:a0:54:45:9b:fc:61:86:44:1d:
45:f3:01:08:ab:80:80:68:57:1d:37:b0:48:8b:9a:6a:f6:34:
8d:e4:8f:e0:43:e7:62:a6:f9:c0:27:62:7a:b3:fa:f3:27:99:
df:62:17:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:31 2024 by rpki-client on console-fra.rpki-client.org