Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/SCUronFWevb5DZEGOaW7DV55-2s.roa
File: SCUronFWevb5DZEGOaW7DV55-2s.roa (raw, json)
Hash identifier: 9+WAYXqstoC9OWqaT047XTI3PaRh3ucIcQ2VzsZLOAk=
Subject key identifier: 48:25:2B:A2:71:56:7A:F6:F9:0D:91:06:39:A5:BB:0D:5E:79:FB:6B
Certificate issuer: /CN=0e6661a5628c4512932182bdbda7f9272702b8e1
Certificate serial: 01856B532ECC4C4741B5A681FCE34FF791B0
Authority key identifier: 0E:66:61:A5:62:8C:45:12:93:21:82:BD:BD:A7:F9:27:27:02:B8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmZhpWKMRRKTIYK9vaf5JycCuOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/SCUronFWevb5DZEGOaW7DV55-2s.roa
Signing time: Sun 01 Jan 2023 03:14:51 +0000
ROA not before: Sun 01 Jan 2023 03:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 45.86.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:2e:cc:4c:47:41:b5:a6:81:fc:e3:4f:f7:91:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6661a5628c4512932182bdbda7f9272702b8e1
Validity
Not Before: Jan 1 03:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48252ba271567af6f90d910639a5bb0d5e79fb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:02:25:2d:ce:7b:15:d7:02:56:dc:81:a9:
fb:03:39:37:e5:a5:2c:6c:72:0c:62:12:f7:e3:f5:
8f:a8:fd:b6:da:cb:99:c1:fa:75:0d:ff:4a:7c:d4:
89:8b:6c:6e:54:08:bf:0e:fe:cb:e3:3b:b9:65:4e:
b0:6d:29:ab:98:7f:b7:2c:50:02:b3:d5:fb:a3:bc:
c4:28:31:c3:1c:55:b5:92:42:20:9b:be:f2:2e:a0:
9e:0f:97:df:e2:3e:70:28:4c:aa:5b:5a:cd:df:5f:
34:3b:26:9c:75:9e:6e:6e:ce:68:31:e1:31:a4:e9:
d1:6f:c8:d8:ea:d3:bc:26:9a:4d:d0:25:b2:ab:b6:
08:41:9d:05:f9:a9:9a:a6:27:3d:d8:f8:a5:82:3c:
12:cf:48:db:e8:2e:cf:21:26:72:87:28:af:4e:9a:
33:f0:ee:f6:ed:85:81:73:b5:86:03:12:a1:65:8f:
1a:9b:80:5d:a3:6f:a9:59:24:72:a9:b4:56:21:0e:
71:08:94:f5:fa:17:2b:bd:a4:89:2e:21:d0:49:68:
96:61:95:ab:da:f4:30:fa:0d:ff:4e:b0:9a:95:f5:
1a:cf:9b:a5:27:33:12:c3:69:0e:71:57:e5:a8:17:
0d:92:26:34:22:c3:13:35:04:5f:7d:58:cb:6d:a7:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:25:2B:A2:71:56:7A:F6:F9:0D:91:06:39:A5:BB:0D:5E:79:FB:6B
X509v3 Authority Key Identifier:
keyid:0E:66:61:A5:62:8C:45:12:93:21:82:BD:BD:A7:F9:27:27:02:B8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmZhpWKMRRKTIYK9vaf5JycCuOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/SCUronFWevb5DZEGOaW7DV55-2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/DmZhpWKMRRKTIYK9vaf5JycCuOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.86.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8d:5a:66:58:fd:c6:1e:67:9a:b3:c1:6e:08:3f:d8:f0:9c:
52:e4:0e:6f:19:c3:c7:52:8b:a0:26:58:83:5f:6f:76:d9:3c:
5c:c3:62:21:a4:54:91:12:8e:af:65:f5:85:63:f8:84:31:94:
ec:38:af:83:f6:e9:43:a3:9f:e0:d3:33:be:6d:30:ae:27:0a:
ff:d9:c3:2a:ac:e5:1a:08:35:be:90:93:dc:c8:53:8f:bc:31:
12:1d:8b:7f:e8:f1:15:c9:c5:cc:57:f7:2a:b4:61:34:b6:03:
0f:be:a1:8f:83:69:06:34:41:c9:c5:7c:4e:e9:6a:ef:90:f4:
1c:0b:f7:da:18:00:bd:26:c5:5e:6d:06:40:b2:63:bb:44:4c:
5a:72:08:a2:00:71:74:00:c8:fb:6c:9e:17:ff:26:e9:e6:85:
a6:b4:5b:10:5c:e2:89:57:26:7b:96:36:d3:fd:6d:76:4c:27:
43:a0:b5:ce:44:c0:5f:a4:1b:59:21:49:d4:f9:8f:87:12:82:
bb:e5:4c:a4:81:f5:6f:4d:b8:19:30:93:d3:b5:82:4f:ef:c0:
c2:b4:d0:ef:78:7d:0b:30:63:df:86:f2:d5:9c:b5:19:c8:49:
04:48:5d:af:3b:87:55:a0:a1:0f:45:5d:e0:ca:a2:12:6b:29:
d7:24:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:32 2024 by rpki-client on console-fra.rpki-client.org