Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/qSsNCuBrB1iHn7yKSlmOsFvYsHc.roa
File: qSsNCuBrB1iHn7yKSlmOsFvYsHc.roa (raw, json)
Hash identifier: 8t2xdBi9z2dqrriullMGvmFakyIAWdDIyINTf+Fa5yg=
Subject key identifier: A9:2B:0D:0A:E0:6B:07:58:87:9F:BC:8A:4A:59:8E:B0:5B:D8:B0:77
Certificate issuer: /CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Certificate serial: 0184FB7EC65CBEAB0A5D5027FC478AF1B9E5
Authority key identifier: FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/qSsNCuBrB1iHn7yKSlmOsFvYsHc.roa
Signing time: Sat 10 Dec 2022 10:05:00 +0000
ROA not before: Sat 10 Dec 2022 10:05:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47536
IP address blocks: 45.12.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fb:7e:c6:5c:be:ab:0a:5d:50:27:fc:47:8a:f1:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff94c4b1d33ba3094ec388f7a73d8d39cd950861
Validity
Not Before: Dec 10 10:05:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a92b0d0ae06b0758879fbc8a4a598eb05bd8b077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:50:e3:f0:22:8d:a7:38:bb:66:ea:81:64:
3a:9f:04:4e:38:12:82:09:0f:ef:24:5d:eb:97:6a:
8f:53:e5:70:b1:de:7a:5c:c0:d3:00:b0:aa:68:55:
6d:41:3b:a1:76:26:cc:70:78:55:54:57:1e:60:b8:
20:d8:58:3e:71:3b:3d:0a:46:73:aa:34:4f:04:95:
0c:42:c7:90:15:54:0a:97:98:13:e5:b0:bd:cc:a3:
5a:9e:81:3c:77:d9:03:08:a6:fb:f1:4d:43:0d:97:
b2:b3:e3:29:57:92:22:7d:3d:8f:45:db:68:97:cf:
ef:88:bd:19:f9:a9:4c:0c:84:e4:cb:9b:1d:5e:59:
f1:31:b9:d0:23:06:61:a9:56:91:71:e6:3b:a6:cc:
70:05:82:9a:f1:8f:b5:19:c4:3d:19:bc:ee:a8:f0:
78:2d:2a:90:f5:f5:db:98:26:09:a8:bf:da:bd:0b:
67:f7:ab:01:0d:aa:b4:c6:cc:0a:a1:f5:50:d7:a1:
5b:39:2a:81:e7:ca:44:09:62:4a:c1:63:b9:ee:57:
0e:ad:3f:74:5a:50:a8:72:5f:19:0d:5a:5d:29:d6:
53:91:b2:d3:49:b2:6a:1e:1d:30:ba:84:1b:c7:78:
f4:4a:f5:9b:1a:b8:36:b6:5c:82:8f:3f:60:f4:4a:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2B:0D:0A:E0:6B:07:58:87:9F:BC:8A:4A:59:8E:B0:5B:D8:B0:77
X509v3 Authority Key Identifier:
keyid:FF:94:C4:B1:D3:3B:A3:09:4E:C3:88:F7:A7:3D:8D:39:CD:95:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5TEsdM7owlOw4j3pz2NOc2VCGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/qSsNCuBrB1iHn7yKSlmOsFvYsHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/177f29-c4eb-411f-95ff-5e102d197742/1/_5TEsdM7owlOw4j3pz2NOc2VCGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.201.0/24
Signature Algorithm: sha256WithRSAEncryption
56:86:03:ab:b1:c2:15:06:23:04:ac:43:a3:1b:22:cb:c2:e2:
df:9f:ae:0f:85:c4:09:6b:b2:ba:74:b7:7e:65:96:58:bd:80:
5b:97:e9:86:41:f7:12:d2:1f:21:c1:6a:18:c7:22:61:46:49:
20:d5:81:40:e3:14:d9:fe:0b:f3:20:71:49:73:17:a1:67:4a:
94:c1:0f:bb:c3:3d:9a:bc:50:4f:56:ca:e9:c0:94:cb:2e:c3:
ee:01:51:db:05:29:5a:e7:d3:aa:99:57:53:39:d2:de:fb:c1:
56:35:49:27:0d:94:54:20:ce:95:b5:24:f0:2e:06:f1:29:0d:
2f:33:96:42:ef:ac:94:b8:c0:77:ab:26:00:38:44:82:cb:b9:
3e:5b:10:ce:b3:31:74:cf:3d:34:4f:49:d4:de:8f:2c:93:e2:
bb:8c:0d:d2:b5:75:82:8b:f1:6d:78:46:94:74:48:86:a9:ca:
87:12:7a:4a:5b:91:7e:71:e9:f4:f8:b8:f7:50:f9:42:3c:3b:
35:56:d1:43:7e:10:44:1a:23:11:0e:ad:2c:12:0c:2f:c0:ff:
f8:26:5e:1d:65:b9:01:f1:b7:fa:b8:dd:1a:d8:9a:42:a8:0c:
a6:45:eb:65:69:16:65:0d:f2:e4:08:0d:0a:d4:43:06:80:d6:
c5:fe:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:35 2024 by rpki-client on console-ams.rpki-client.org