Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BPHiKGliCTmmyQzbjANPRrXSmPc.roa
File: BPHiKGliCTmmyQzbjANPRrXSmPc.roa (raw, json)
Hash identifier: dB80smRkMLe3pt+UeX5kNnRelg36jrk+C+SpfDJ/5DM=
Subject key identifier: 04:F1:E2:28:69:62:09:39:A6:C9:0C:DB:8C:03:4F:46:B5:D2:98:F7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 018216F3F6C162E4AFF3FE16957550531DAC
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BPHiKGliCTmmyQzbjANPRrXSmPc.roa
Signing time: Tue 19 Jul 2022 14:54:23 +0000
ROA not before: Tue 19 Jul 2022 14:54:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:f3:f6:c1:62:e4:af:f3:fe:16:95:75:50:53:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jul 19 14:54:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04f1e22869620939a6c90cdb8c034f46b5d298f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:b8:37:2a:a5:f4:47:23:84:02:67:21:02:
b2:79:82:96:0a:30:4e:84:61:a1:66:8a:a5:ac:0e:
a8:4d:38:fd:45:22:aa:2a:47:8d:d9:ea:d3:81:26:
fe:94:b0:b4:e8:0c:68:0c:5b:9d:12:1d:d5:d0:5d:
fc:ce:a5:8d:d2:30:c7:3a:b7:f8:be:e0:af:ed:0a:
64:f4:6d:95:db:0c:ed:6b:89:eb:64:84:09:9d:2a:
23:09:2a:e3:c4:62:2e:a7:ef:7f:1c:5e:27:61:12:
7b:1e:33:48:3f:17:8c:1b:00:76:73:c5:7a:28:0d:
31:e2:f4:13:32:f2:5f:4c:6d:b0:f5:95:1b:86:15:
93:7f:e4:0c:2b:5b:0a:bf:bb:80:c0:f5:90:7c:29:
d6:bd:98:b9:2e:a0:b0:94:c5:5f:bc:9a:dd:aa:fe:
63:a8:48:7f:4f:f6:d4:b4:e1:12:37:8e:c0:de:6f:
cc:1d:5e:8b:08:63:65:67:d2:40:81:33:6e:19:dc:
33:5c:02:70:7c:3b:31:46:2c:2c:c4:2e:cc:0b:c9:
37:a3:b8:d5:f3:e9:54:ed:a1:10:f8:82:bf:6b:47:
39:22:1f:af:da:ac:58:11:fe:69:35:0f:f3:95:51:
ea:85:20:8f:2a:c1:91:9c:13:77:1a:07:9a:c2:b8:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F1:E2:28:69:62:09:39:A6:C9:0C:DB:8C:03:4F:46:B5:D2:98:F7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/BPHiKGliCTmmyQzbjANPRrXSmPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
36:43:3d:a1:c0:89:d6:d2:95:62:c2:10:d2:86:59:94:35:8c:
16:20:7e:9e:7a:eb:8e:d5:b1:fb:f5:a4:2b:31:af:d2:69:d9:
d2:3b:32:19:37:b3:8f:f2:40:41:f0:e2:f5:6d:88:c8:f2:33:
c3:58:e1:f5:1e:fe:d7:b4:17:26:5b:55:d3:1a:35:d4:1b:ec:
e2:29:c7:f2:8c:03:4f:9d:91:b2:d9:b8:f2:06:e5:c6:ef:51:
21:9b:4d:d7:1e:bd:23:4f:c2:50:fe:21:29:93:27:ee:20:f6:
07:8c:65:90:94:35:0c:84:56:2c:a1:4f:bb:8d:26:03:7a:0a:
af:42:6c:99:87:61:fb:35:27:cc:ec:f7:d7:59:78:b6:65:29:
ff:3a:93:e8:29:0c:26:d6:33:9d:74:c4:7d:5e:5d:54:9c:3e:
b5:b1:fe:f9:f8:0d:84:c9:5d:25:f9:3f:5d:01:13:4f:fa:78:
1c:e5:ff:d4:16:e5:bf:ce:61:05:e5:89:9d:a5:67:89:17:08:
31:e6:e2:bb:fd:74:9a:09:9c:62:c1:2c:6f:f6:21:6a:6d:58:
3b:43:e3:3c:ec:06:18:39:c1:7f:30:ba:95:1b:8c:5d:2d:b0:
60:71:56:30:e2:44:18:cb:95:3a:5a:b3:44:34:02:bb:a5:e8:
9e:ab:e8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org