Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/331f31-9e46-4869-99e2-ba61ed087329/1/qAER11K5OJc-ljA7IbPb1B_JUwY.roa
File: qAER11K5OJc-ljA7IbPb1B_JUwY.roa (raw, json)
Hash identifier: TyNZpmNHl/aJls3Py6P85r5aQdSdiusQfyZwyR0YVM4=
Subject key identifier: A8:01:11:D7:52:B9:38:97:3E:96:30:3B:21:B3:DB:D4:1F:C9:53:06
Certificate issuer: /CN=c1213ebf02c5e802e03b08a3ad5d61caa8eb96d2
Certificate serial: 077242B3
Authority key identifier: C1:21:3E:BF:02:C5:E8:02:E0:3B:08:A3:AD:5D:61:CA:A8:EB:96:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSE-vwLF6ALgOwijrV1hyqjrltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/331f31-9e46-4869-99e2-ba61ed087329/1/qAER11K5OJc-ljA7IbPb1B_JUwY.roa
Signing time: Sat 01 Jan 2022 00:57:34 +0000
ROA not before: Sat 01 Jan 2022 00:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200567
IP address blocks: 45.146.132.0/22 maxlen: 23
2a0f:1000::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124928691 (0x77242b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1213ebf02c5e802e03b08a3ad5d61caa8eb96d2
Validity
Not Before: Jan 1 00:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a80111d752b938973e96303b21b3dbd41fc95306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:97:c4:c9:53:d2:54:47:ab:f2:8f:80:99:
d2:1f:07:36:15:29:96:36:d5:37:62:a5:53:5c:1b:
86:32:6f:83:5e:e5:c3:87:a9:df:8a:65:2b:fa:0f:
e7:b4:d7:25:56:5c:09:8e:70:cd:a8:72:29:21:4c:
60:73:3b:5a:2f:ac:f5:52:30:e4:00:5a:3c:95:e6:
5f:0f:1a:44:ae:89:12:7c:61:78:8c:05:e3:b6:31:
2b:a3:09:37:64:da:bd:25:20:b1:f3:67:37:c9:f7:
af:2b:38:19:9d:87:c5:e3:7f:b5:2f:67:53:77:6e:
dc:2c:2e:4f:84:28:d4:b4:ae:08:be:83:91:d1:65:
a2:51:ca:61:55:83:f3:eb:11:10:6f:ee:12:85:61:
ad:51:a6:b6:ed:c3:91:e7:8b:fe:f2:db:c0:c7:58:
61:b0:84:23:58:48:b5:38:fc:ff:cd:69:5c:d5:68:
51:a1:33:92:ca:a2:7d:d5:71:c6:ad:29:47:8b:f1:
de:17:6c:e2:fc:2c:d8:7b:6e:39:1a:a8:7f:96:4a:
ac:3d:90:6f:27:be:dc:19:22:2f:05:56:9e:3e:e4:
db:36:fd:ce:77:64:32:e7:84:76:fa:c6:52:5b:f0:
4c:bd:9f:80:73:ab:9f:df:54:a3:e9:0c:bd:1b:d4:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:01:11:D7:52:B9:38:97:3E:96:30:3B:21:B3:DB:D4:1F:C9:53:06
X509v3 Authority Key Identifier:
keyid:C1:21:3E:BF:02:C5:E8:02:E0:3B:08:A3:AD:5D:61:CA:A8:EB:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSE-vwLF6ALgOwijrV1hyqjrltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/331f31-9e46-4869-99e2-ba61ed087329/1/qAER11K5OJc-ljA7IbPb1B_JUwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/331f31-9e46-4869-99e2-ba61ed087329/1/wSE-vwLF6ALgOwijrV1hyqjrltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.132.0/22
IPv6:
2a0f:1000::/29
Signature Algorithm: sha256WithRSAEncryption
03:74:07:f1:da:62:36:2c:5e:f9:c7:a5:0d:20:29:8c:af:97:
c4:0c:2f:55:e1:60:3d:89:88:61:3a:11:0e:6d:b7:34:ab:cb:
16:b0:86:e4:18:83:82:c1:4d:c0:98:7a:59:7c:2c:a1:03:41:
f6:99:28:9b:8c:c7:b1:93:1d:75:2d:01:b5:b7:38:99:29:96:
6e:3e:54:b6:6f:06:bc:58:5d:fc:4c:82:cb:38:b8:0e:6a:5a:
34:92:e6:43:10:a1:cc:0b:31:7c:20:85:66:e7:2a:32:fe:45:
c4:6f:0d:75:04:a5:52:41:d8:88:07:81:c8:d5:21:64:17:27:
b1:ac:b7:15:5b:eb:d6:b7:d9:49:93:28:47:20:2a:7b:8a:db:
f3:a5:5b:72:3b:69:3f:05:fd:eb:38:7c:31:55:66:0b:8b:8c:
d9:5d:77:d3:76:58:1c:3c:fa:97:ad:04:b2:d4:10:f3:1d:54:
fd:4c:08:b1:9b:85:ca:c9:ea:95:9d:16:99:15:7c:71:26:1a:
dd:f0:68:1f:cd:5d:bc:dc:1c:c6:0c:70:89:1f:cd:e6:20:62:
85:ba:87:02:dd:a2:eb:6d:4f:3b:46:a7:d0:b9:b4:88:81:f6:
1d:4b:b7:4a:b5:d8:08:9d:03:e1:0f:11:98:7d:56:8a:67:ec:
f7:a1:9d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:24 2024 by rpki-client on console-ams.rpki-client.org