Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2UTlPiFRFR9x-lXdYW_kYS1MGgQ.roa
File: 2UTlPiFRFR9x-lXdYW_kYS1MGgQ.roa (raw, json)
Hash identifier: EM01fjXGIvEuIW+CDME+H7zRorZaGPtqRcrnLGJQbtc=
Subject key identifier: D9:44:E5:3E:21:51:15:1F:71:FA:55:DD:61:6F:E4:61:2D:4C:1A:04
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D0AF10B8491122AE579A4C57D9438
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2UTlPiFRFR9x-lXdYW_kYS1MGgQ.roa
Signing time: Sun 01 Jan 2023 13:54:46 +0000
ROA not before: Sun 01 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0a:f1:0b:84:91:12:2a:e5:79:a4:c5:7d:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d944e53e2151151f71fa55dd616fe4612d4c1a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:d2:58:98:5f:87:c1:0c:0b:ac:17:29:b7:
dd:8a:cb:3d:7c:5e:33:ba:03:f8:89:7c:a3:9c:59:
ba:95:af:a4:cb:69:df:05:ab:85:9c:6c:fe:d9:17:
88:aa:ce:ea:e9:bc:64:4c:a5:a6:17:9f:c1:07:97:
88:a2:c9:78:7e:65:f7:3b:10:a3:0f:fe:e8:00:e5:
b4:4f:2a:83:48:0e:41:02:51:27:48:36:3c:84:a7:
ff:fe:f7:92:b4:26:e0:29:15:eb:9c:79:39:86:45:
1e:dd:33:63:61:44:43:da:cb:61:9a:22:ca:ad:3d:
b4:7e:e6:96:31:9a:37:5d:90:17:a8:fc:64:18:ac:
e3:21:9e:5c:8e:ab:6e:00:0e:79:63:cb:73:d6:d7:
bb:a3:4f:4a:fc:16:d1:89:f6:57:d9:3b:bc:9a:0c:
da:87:8a:76:0b:50:14:6f:c8:c9:b6:80:b0:aa:72:
bc:bd:ee:8c:3f:ab:ac:45:f7:93:4d:0d:52:4c:51:
1f:ba:a1:f9:32:67:cc:24:c9:b2:d1:a4:65:a9:7a:
8e:37:dc:0a:d2:df:b8:ac:f9:53:21:04:92:c8:be:
f8:f1:7f:bf:9e:81:7f:13:41:96:ab:af:56:9f:d2:
a4:43:76:b0:ae:cb:be:59:c2:e9:92:58:68:ee:eb:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:E5:3E:21:51:15:1F:71:FA:55:DD:61:6F:E4:61:2D:4C:1A:04
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/2UTlPiFRFR9x-lXdYW_kYS1MGgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d5:bb:8d:9a:f6:ce:b0:9d:b7:3e:66:d3:67:bf:5b:3c:c7:
3a:69:1e:1c:01:e8:f6:bb:25:69:db:60:10:d3:01:46:6e:0a:
f2:27:b1:f2:f6:d5:91:12:56:47:54:e3:b7:e0:b4:af:63:4a:
9c:46:38:f0:07:b6:55:e2:c3:30:44:e8:75:f0:6d:64:88:dc:
41:f8:80:9d:b5:f8:e1:9d:9a:64:75:e2:be:c1:ce:27:47:53:
d0:51:78:6e:97:94:fc:22:71:32:4c:32:90:9a:1f:2f:e6:a9:
2c:d5:f5:7d:bf:48:e6:a9:5f:87:f0:67:06:45:bd:6d:66:00:
c8:56:a8:aa:f3:88:fc:04:90:be:4b:12:5a:cc:58:be:20:83:
7f:da:c2:46:d8:02:30:78:e6:83:30:6c:50:e6:62:9c:6e:ce:
a0:4d:1d:af:d4:19:b7:88:0f:94:25:b1:36:3f:49:03:2f:e3:
13:d3:db:6b:57:de:87:3b:b5:91:b3:1d:d1:e3:79:0b:c1:2b:
1c:66:1a:b8:e9:b8:3b:c4:3b:4f:62:3a:cb:10:16:6d:fc:d1:
bf:e3:ce:8e:0f:14:28:04:5f:e0:a0:6c:8f:8a:83:21:2e:3c:
ff:97:45:52:51:41:95:1a:70:11:8c:15:aa:48:a1:87:5c:57:
9d:74:f4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org