Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/cPlS82AAbIsizoXoQy92uhDISPs.roa
File: cPlS82AAbIsizoXoQy92uhDISPs.roa (raw, json)
Hash identifier: yGBkYy4RVEBrdFRK1NNLxKZSPEljtxkOkNOaMpyeX1U=
Subject key identifier: 70:F9:52:F3:60:00:6C:8B:22:CE:85:E8:43:2F:76:BA:10:C8:48:FB
Certificate issuer: /CN=01f9a54df6796fd2d7a936f647759f7327965e13
Certificate serial: 01856D787C2DEB0359CE3C31219A12F0BD7E
Authority key identifier: 01:F9:A5:4D:F6:79:6F:D2:D7:A9:36:F6:47:75:9F:73:27:96:5E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfmlTfZ5b9LXqTb2R3WfcyeWXhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/cPlS82AAbIsizoXoQy92uhDISPs.roa
Signing time: Sun 01 Jan 2023 13:14:50 +0000
ROA not before: Sun 01 Jan 2023 13:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42263
IP address blocks: 45.140.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:7c:2d:eb:03:59:ce:3c:31:21:9a:12:f0:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f9a54df6796fd2d7a936f647759f7327965e13
Validity
Not Before: Jan 1 13:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70f952f360006c8b22ce85e8432f76ba10c848fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:c7:97:9b:ef:85:3c:40:ef:db:8a:16:89:
91:0a:ba:23:25:eb:6d:33:bb:7c:a9:1d:86:78:4f:
a5:94:6b:d7:fc:8a:bc:8e:6a:2b:61:d8:19:96:b1:
60:db:0b:b7:1f:a9:20:9c:95:64:f3:5b:00:14:41:
ec:b9:37:9c:4b:a6:49:b3:98:60:6d:70:d6:cc:8a:
1c:3c:1a:70:8e:e1:fd:f5:66:1d:4c:fc:f6:43:d0:
d3:1e:74:0b:a0:f4:ee:3e:17:1a:b5:f6:af:2f:1b:
c6:eb:9d:17:e1:0c:07:64:40:76:22:03:c4:f6:b4:
f6:6a:6c:fb:2f:74:90:4c:38:d0:b5:ce:08:17:7d:
2f:0e:43:2c:45:e6:33:5b:16:93:45:e6:26:c1:6b:
9e:02:08:ef:e6:f6:3e:bb:e5:7a:06:de:a2:b5:be:
42:d0:cd:f6:21:40:43:db:5d:fb:51:4e:7c:b5:cd:
97:68:0a:3c:80:8f:55:67:62:72:bb:15:1a:63:ee:
b5:8b:06:cf:b4:85:c5:18:8d:7a:55:93:b9:e4:c3:
5f:70:59:3b:c9:16:60:df:ed:23:6e:cc:34:65:72:
84:2f:b2:a0:42:75:8b:d9:6f:d9:5b:c1:33:89:e0:
6c:09:e6:d4:d2:4a:1c:54:0a:27:a2:73:31:e3:c8:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:52:F3:60:00:6C:8B:22:CE:85:E8:43:2F:76:BA:10:C8:48:FB
X509v3 Authority Key Identifier:
keyid:01:F9:A5:4D:F6:79:6F:D2:D7:A9:36:F6:47:75:9F:73:27:96:5E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfmlTfZ5b9LXqTb2R3WfcyeWXhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/cPlS82AAbIsizoXoQy92uhDISPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/AfmlTfZ5b9LXqTb2R3WfcyeWXhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.116.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:23:68:1c:26:da:dd:a1:a7:82:11:61:c5:21:83:cf:8e:d4:
5a:ef:dd:31:05:a1:81:8b:7e:37:59:a1:77:e5:33:a3:14:c4:
58:4a:eb:c3:46:a3:88:dd:61:2c:88:e5:47:a0:9b:f3:df:b8:
cb:98:1b:d3:f0:bf:d1:29:06:d4:26:c0:42:39:90:2b:07:5d:
e4:e2:85:27:64:10:c9:61:22:91:35:23:67:1f:7f:db:40:2e:
39:d8:6f:a9:8a:61:c9:79:6e:18:42:69:a8:4b:bc:76:ba:7d:
ea:b3:b4:7b:61:8f:42:08:49:b7:90:d6:33:84:7d:22:92:06:
6e:74:4c:f6:bc:5a:11:5f:f9:69:f1:44:88:bd:52:43:52:66:
90:33:aa:70:8d:43:63:e6:ea:1a:6b:8e:d5:d1:05:3b:9f:5f:
60:69:5a:1d:16:3c:ec:b0:f7:46:4e:b4:8d:bd:83:a4:c1:ea:
6d:85:0a:28:98:21:13:55:4f:85:5c:96:f4:4e:6d:33:e8:60:
18:b8:ba:7d:6b:ee:96:e4:f5:7f:2b:62:e9:3b:bf:35:a5:0b:
66:e7:a6:01:7f:6f:86:2f:7d:4c:2f:c2:bb:83:ab:47:12:92:
a9:f1:0f:1a:9e:2d:f7:06:f9:60:ce:a5:90:90:35:83:4b:a1:
f3:09:e6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:10 2024 by rpki-client on console-ams.rpki-client.org