Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/AewlQLKkI3UvxCLgQi8M45eFx_Y.roa
File: AewlQLKkI3UvxCLgQi8M45eFx_Y.roa (raw, json)
Hash identifier: 3BKwBjIPOtEmftvNRI13xKoyTyCk9Ab9050YbSUDW+A=
Subject key identifier: 01:EC:25:40:B2:A4:23:75:2F:C4:22:E0:42:2F:0C:E3:97:85:C7:F6
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 06654E22
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/AewlQLKkI3UvxCLgQi8M45eFx_Y.roa
Signing time: Thu 17 Mar 2022 04:57:57 +0000
ROA not before: Thu 17 Mar 2022 04:57:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133115
IP address blocks: 45.88.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107302434 (0x6654e22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Mar 17 04:57:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01ec2540b2a423752fc422e0422f0ce39785c7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:58:db:59:cd:39:da:ab:df:24:23:f7:5e:cd:
cf:41:4a:d3:73:59:ba:4e:ea:b3:49:c8:ad:62:5c:
63:d3:9d:55:1d:1f:08:c1:8e:71:b9:36:21:e9:2f:
f5:48:58:8f:84:69:40:b6:cd:5e:6a:dc:7b:e4:f4:
38:ad:00:54:5c:c3:bf:fc:34:b5:2c:b9:d5:94:e4:
45:5e:07:85:8f:04:34:aa:ed:72:35:a3:7d:ea:69:
27:45:fe:87:10:83:79:eb:f8:68:08:dc:42:09:18:
55:b8:f1:70:b7:97:2c:db:6a:45:01:9b:83:aa:0c:
6d:58:e9:0a:de:2d:d0:be:27:80:1c:81:16:ec:aa:
f7:4b:34:f1:64:55:00:70:b7:71:36:c6:28:24:ae:
a1:51:63:44:90:ed:9b:b0:c4:dd:74:65:00:17:42:
5f:92:b7:60:86:c9:fd:c9:48:fb:44:5b:59:62:6d:
51:f4:56:06:78:f8:81:c3:e8:47:d3:77:89:d3:34:
38:8a:8d:35:70:92:48:fc:3a:5b:01:05:f9:5f:dc:
fb:64:34:24:73:10:52:17:a1:2e:ba:cf:7a:87:2f:
eb:2f:7b:c6:41:06:8a:d2:4d:aa:58:cc:ee:15:5a:
fa:e7:8c:c6:9f:d9:a2:49:e3:76:5b:df:75:3d:e4:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:25:40:B2:A4:23:75:2F:C4:22:E0:42:2F:0C:E3:97:85:C7:F6
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/AewlQLKkI3UvxCLgQi8M45eFx_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:82:6f:0b:b6:9f:2f:32:87:9a:73:fd:f9:ad:6a:b4:82:42:
51:4f:12:39:fa:2e:97:42:98:9c:ca:3c:1c:0d:a1:2b:36:68:
1f:eb:40:d2:f9:95:cd:12:73:6e:e9:e4:26:62:0c:10:be:58:
2a:6e:d1:bc:bb:29:3b:7b:77:6c:19:27:5c:4d:81:71:a9:06:
4e:e6:74:ba:3e:2d:d4:56:7c:df:2b:8a:62:58:1c:27:3a:ee:
78:d4:28:11:a1:af:6b:73:ad:9a:c5:a6:32:9f:8b:8f:25:0d:
42:ec:bb:37:81:08:06:a1:b0:3b:f1:59:0a:b4:09:78:db:cf:
9c:e5:c3:80:da:50:1e:91:96:01:54:ee:ed:3a:91:ce:45:11:
a2:66:f0:4b:6a:b8:d5:d8:06:19:0b:4c:3c:fe:39:87:0b:fa:
81:ef:2f:9a:02:b7:ce:fb:68:d0:31:e5:5f:6d:ff:01:cf:47:
cc:e3:b4:d5:e0:f1:14:9d:63:01:a0:66:d4:3d:3c:2b:14:38:
1b:ca:82:27:05:2f:93:37:35:8b:78:d4:eb:87:b7:94:58:cf:
e6:f0:01:16:23:1f:8e:1b:38:69:53:05:56:90:4a:b8:27:2b:
9d:e3:a8:19:e4:4c:8c:5b:6c:80:66:c7:8b:08:57:02:55:c0:
08:d9:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org