Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/OInaqUll_QDslZDz6Dn4aho81NA.roa
File: OInaqUll_QDslZDz6Dn4aho81NA.roa (raw, json)
Hash identifier: rswtIn80LIWyiGkAraNohS2ch6BJaEobII3Y3v8PJZE=
Subject key identifier: 38:89:DA:A9:49:65:FD:00:EC:95:90:F3:E8:39:F8:6A:1A:3C:D4:D0
Certificate issuer: /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial: 014C061E
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/OInaqUll_QDslZDz6Dn4aho81NA.roa
Signing time: Sat 01 Jan 2022 12:59:29 +0000
ROA not before: Sat 01 Jan 2022 12:59:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.81.57.0/24 maxlen: 24
45.81.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21759518 (0x14c061e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
Validity
Not Before: Jan 1 12:59:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3889daa94965fd00ec9590f3e839f86a1a3cd4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:fd:2c:ca:e0:da:0f:82:7a:ec:9d:16:2b:
07:bb:71:6b:67:63:e2:8d:22:05:39:64:dc:26:5c:
3d:39:65:48:b2:ac:3a:b0:5f:72:31:92:18:28:dd:
b6:8c:96:3a:53:61:ad:75:5c:41:a1:a8:26:a4:f8:
5e:62:ab:3e:14:14:54:7f:95:35:2d:c1:cf:a0:ca:
60:1b:2d:34:f7:6f:24:2e:df:a8:68:f8:34:c4:65:
8f:ab:43:65:63:87:c1:d2:75:49:c7:4c:59:84:f0:
ca:1d:5a:9b:02:b1:ca:66:2c:20:f5:93:63:d4:56:
80:84:be:d8:da:15:0e:67:bd:a7:54:81:0f:9a:88:
1c:24:e0:68:67:ec:09:73:10:06:b3:dc:92:9b:e5:
f7:9a:9e:b9:e9:96:ce:92:8a:a9:e9:d7:84:32:39:
b7:b0:ac:3d:4d:63:2f:b2:84:4c:3d:99:c8:6f:5c:
60:24:fc:4d:3e:71:fe:46:7c:f9:95:37:3c:6e:74:
a1:1e:26:32:a6:88:c5:a0:88:5b:2b:ee:5b:d8:e8:
1d:43:8c:e2:12:59:ee:2a:72:33:27:fe:ac:4a:c8:
3a:22:6e:14:85:ad:3a:45:3d:ff:96:2e:6a:53:ea:
00:53:2a:7f:fa:64:33:54:9f:80:e7:44:51:7a:58:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:DA:A9:49:65:FD:00:EC:95:90:F3:E8:39:F8:6A:1A:3C:D4:D0
X509v3 Authority Key Identifier:
keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/OInaqUll_QDslZDz6Dn4aho81NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.56.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:ba:7b:20:e0:f0:55:fd:c2:9c:d2:26:31:db:58:0b:39:93:
db:22:b0:fa:76:e6:0a:94:c4:0e:71:72:ce:da:4c:59:25:9e:
39:57:b4:3c:8f:cc:b1:e5:c6:da:66:d5:54:db:47:fb:60:44:
3d:39:97:74:bf:1d:30:d0:3b:2c:1b:79:c4:e2:d7:80:7d:d7:
8a:27:c3:64:43:5f:62:0c:db:2a:8e:54:7b:14:40:b4:97:d8:
a4:eb:ab:9b:f8:bd:8f:68:f6:78:46:09:fc:76:95:ff:9a:7f:
33:fa:06:91:59:56:2a:d8:eb:3b:b2:d1:72:88:e4:62:4b:64:
32:3f:05:d0:d9:cf:d0:6a:d3:5f:39:a4:4f:3a:3f:fe:aa:aa:
82:dc:97:8a:75:f4:92:c1:41:25:45:22:13:c1:be:80:6a:6a:
df:3b:11:9f:3b:ac:53:af:e8:8d:0a:24:fe:08:74:87:68:86:
4e:6e:7e:8d:51:36:f4:06:0b:f9:ed:79:8a:ee:f5:7c:26:8b:
75:f8:71:a1:1f:05:cd:71:3c:d9:2e:e5:48:3e:b9:c8:5c:92:
dd:85:98:11:ef:a4:09:9d:e6:d0:20:48:2e:5e:e3:8d:ab:79:
70:d9:ea:0e:c4:15:91:0e:2c:42:8c:8a:89:3b:6b:31:13:bd:
79:a5:49:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:00 2024 by rpki-client on console-ams.rpki-client.org