Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/vmPrsXS1-XZu1rlovgJD0LqS018.roa
File: vmPrsXS1-XZu1rlovgJD0LqS018.roa (raw, json)
Hash identifier: V1vw5irarm/HlkBeC6tf2F5+KXO+8CnUjSSbfOGu8gM=
Subject key identifier: BE:63:EB:B1:74:B5:F9:76:6E:D6:B9:68:BE:02:43:D0:BA:92:D3:5F
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 01856F0226E4A23668DC658867E99955851D
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/vmPrsXS1-XZu1rlovgJD0LqS018.roa
Signing time: Sun 01 Jan 2023 20:24:50 +0000
ROA not before: Sun 01 Jan 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48851
IP address blocks: 213.198.80.0/29 maxlen: 29
82.112.107.136/29 maxlen: 29
62.73.169.40/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:26:e4:a2:36:68:dc:65:88:67:e9:99:55:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be63ebb174b5f9766ed6b968be0243d0ba92d35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0d:29:64:f9:c6:28:7b:97:f3:a3:c1:a6:24:
8b:67:f4:0d:37:d9:d8:db:c8:e3:1e:1f:6a:65:34:
f5:fe:da:bc:23:02:83:e8:d5:66:ba:12:b1:6e:ae:
06:e2:2b:73:a1:90:ae:6c:46:9e:2f:1c:34:6b:b6:
d6:fb:a2:f1:20:94:32:c3:90:d7:14:27:6b:19:27:
27:06:9c:47:7a:99:e7:c3:1f:e5:ea:d5:0c:bc:14:
cf:b8:5e:41:b7:26:6e:ff:b2:d3:3d:e2:57:cf:e4:
0f:3a:b5:ed:89:2b:87:3f:4c:98:36:5a:23:2a:8a:
b9:c5:94:19:fa:12:cd:33:9a:38:ba:bf:ca:30:bd:
b0:8d:b5:44:ba:e5:40:d3:af:49:5b:3c:e9:00:5d:
3e:00:eb:eb:cd:8b:e2:ed:4c:d0:e2:54:a8:78:5c:
0b:ed:73:c4:b1:65:51:bb:ab:61:d4:ff:da:61:cb:
9c:ec:84:69:88:26:73:bc:ff:29:bc:81:68:99:d7:
e2:c3:97:d3:df:df:1a:1f:7b:2a:64:f0:c0:a7:b2:
b9:a7:46:6a:ae:7d:0e:6f:78:f7:a9:ea:06:f1:c7:
86:d2:06:79:b9:93:8d:6d:bf:53:fc:d7:53:1a:b7:
61:49:c0:3c:c2:4f:a1:7c:4d:fc:ff:6a:ab:7c:c1:
bf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:63:EB:B1:74:B5:F9:76:6E:D6:B9:68:BE:02:43:D0:BA:92:D3:5F
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/vmPrsXS1-XZu1rlovgJD0LqS018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.73.169.40/29
82.112.107.136/29
213.198.80.0/29
Signature Algorithm: sha256WithRSAEncryption
35:70:c9:b2:9f:e6:06:05:aa:1c:87:db:dc:7d:01:35:7a:30:
6c:2a:1b:7e:12:9a:71:ee:c4:03:32:4c:63:58:bc:81:e3:38:
0c:04:4a:d1:8c:56:a6:4b:7d:44:ad:66:fb:4f:7a:2c:28:1a:
8e:2c:f2:32:6f:5c:21:e2:a9:c2:a2:f4:cc:4c:1c:b9:f5:bc:
cd:6e:1a:65:c3:4e:ee:91:c2:ca:38:0e:25:56:73:b4:b5:31:
62:e2:4a:85:fd:bc:d5:cd:49:e4:7a:21:d8:d6:96:6f:56:6a:
6e:14:5b:0d:76:cf:e1:5f:c1:db:6a:e2:f6:2c:32:62:6d:40:
74:32:9c:fe:52:2c:c1:61:78:04:94:02:01:77:1d:a1:8a:61:
8c:24:4f:8d:8b:42:c3:ac:11:e8:28:65:fb:ca:e1:fd:99:62:
7b:6c:53:5d:91:5b:c9:3a:ab:21:e4:4e:ba:c3:33:7f:a2:db:
10:da:41:8c:58:1e:49:b3:46:ba:70:a9:c7:d6:e8:27:1c:be:
c0:b7:8a:ce:ef:15:8b:97:6e:c3:83:2b:44:93:c1:4e:1f:f9:
25:58:08:70:9d:f4:bf:03:67:cb:5e:63:09:f3:c2:74:41:c7:
ac:ae:3e:d4:96:a2:83:50:41:33:76:61:e0:3c:e4:bb:47:b7:
a1:12:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:06 2023 by rpki-client on console-ams.rpki-client.org