Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/AUYWYV-LXbYsKfVrsa2xUEZYVNY.roa
File: AUYWYV-LXbYsKfVrsa2xUEZYVNY.roa (raw, json)
Hash identifier: PnInyW5nGmdbieN1wZLWcrZKWLhZ6kyXYFxeJ2eAhcQ=
Subject key identifier: 01:46:16:61:5F:8B:5D:B6:2C:29:F5:6B:B1:AD:B1:50:46:58:54:D6
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D0C572A034AB2CBF3B877F6883660
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/AUYWYV-LXbYsKfVrsa2xUEZYVNY.roa
Signing time: Sun 01 Jan 2023 13:54:46 +0000
ROA not before: Sun 01 Jan 2023 13:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0c:57:2a:03:4a:b2:cb:f3:b8:77:f6:88:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=014616615f8b5db62c29f56bb1adb150465854d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:ca:c1:49:67:f1:6c:db:07:59:80:3b:c2:
8e:c5:42:59:0a:7e:78:ae:60:a9:41:72:bb:dc:21:
38:76:45:d0:52:54:b3:81:04:d6:b9:45:00:bd:de:
c2:e9:b9:93:52:52:be:72:9e:34:d7:ee:00:0c:d3:
c0:ec:80:02:30:cb:fa:e8:37:4b:fd:40:53:23:e9:
0f:85:62:26:01:97:35:b4:2a:27:78:4b:23:2c:2d:
f4:00:e8:70:a5:8e:4a:31:00:67:8c:49:6f:2b:fd:
e0:a8:da:f1:89:ca:f6:dd:e9:27:73:1f:35:4a:3c:
23:82:b4:54:09:21:21:24:6f:cb:56:dc:d0:04:9e:
07:11:1e:07:ed:d5:da:b2:91:72:8c:bf:43:91:8c:
b2:cb:e5:f6:0b:f0:88:66:11:b9:2e:d2:3c:9a:55:
e4:a8:bf:9c:e1:0a:30:53:fb:ce:14:66:c4:b8:0a:
ea:57:9b:f5:ca:35:83:52:da:b5:0e:45:a0:e5:be:
12:0d:81:6f:3b:73:27:13:6a:a8:7f:5b:df:f5:5e:
a7:a2:60:81:b9:ea:97:d7:c6:f5:f5:0e:a4:63:0b:
df:e7:24:63:9e:56:7f:50:7d:99:44:85:83:fb:30:
7e:0b:73:b6:ba:4d:a1:64:69:87:cf:16:b9:a3:97:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:46:16:61:5F:8B:5D:B6:2C:29:F5:6B:B1:AD:B1:50:46:58:54:D6
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/AUYWYV-LXbYsKfVrsa2xUEZYVNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
15:cc:ae:f7:fd:2b:1f:0b:43:30:05:9f:3c:35:aa:9a:34:94:
e9:21:c3:1e:dc:9f:77:1a:69:0f:b1:f4:07:ca:6a:bb:c9:ed:
0e:85:ee:df:23:8e:0c:54:79:4b:f6:eb:66:ed:f9:b3:70:bd:
2f:ed:71:e8:5c:e7:4e:9c:a3:ae:5f:e4:cf:c1:51:53:c3:db:
f9:55:38:08:a5:ab:09:2f:22:4f:e9:17:d5:de:38:1c:6b:6d:
38:78:59:bc:82:08:76:9d:63:9c:7a:fc:3d:7d:ad:50:db:ff:
28:11:c8:a7:bb:9d:d3:38:46:68:a5:0c:77:f9:4b:09:69:cf:
e2:7d:0e:f7:50:f4:c9:b3:52:c1:b5:9d:ec:f0:f0:3d:27:b2:
9e:9d:fd:54:a0:7c:90:8a:27:b6:36:2a:9e:f4:58:df:93:33:
13:e5:af:9a:68:d1:05:e1:e0:c0:53:30:f8:de:20:ed:37:23:
83:d2:5d:67:4e:be:09:da:db:84:8a:e1:45:62:ec:f5:18:1d:
72:a4:49:d3:32:e2:b1:49:fe:dd:e9:12:29:71:ce:2a:cd:9a:
d9:80:da:4c:2f:b7:e7:06:b5:af:3a:fe:11:66:ff:3d:0c:66:
67:f4:88:9b:49:f9:97:46:38:6e:cb:cd:c6:0d:33:25:23:7d:
d2:91:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org