Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/H7j_gAAB3_PsgIj2E-K-YXa9eo8.roa
File: H7j_gAAB3_PsgIj2E-K-YXa9eo8.roa (raw, json)
Hash identifier: yCA5iOnR8eBEzJxL5/fwQiqpIPnPBDvEBrl1pXEvK0g=
Subject key identifier: 1F:B8:FF:80:00:01:DF:F3:EC:80:88:F6:13:E2:BE:61:76:BD:7A:8F
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0185536627B6DE66FD42692D9B8A0E1D2E50
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/H7j_gAAB3_PsgIj2E-K-YXa9eo8.roa
Signing time: Tue 27 Dec 2022 11:44:41 +0000
ROA not before: Tue 27 Dec 2022 11:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:66:27:b6:de:66:fd:42:69:2d:9b:8a:0e:1d:2e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Dec 27 11:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fb8ff800001dff3ec8088f613e2be6176bd7a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:c9:8d:30:3c:05:ec:6b:f7:f7:ef:53:18:
01:ec:89:d4:cf:83:18:49:62:a2:1a:61:26:00:82:
98:de:ba:65:04:fd:f2:c5:e9:3f:12:ee:c4:48:8a:
aa:ff:9b:2d:9e:6e:27:6d:8c:73:93:6b:c3:7e:8b:
aa:9c:85:93:39:a6:3b:28:66:7c:9c:25:5c:e7:52:
c1:77:e6:00:5c:0a:aa:d6:d7:4c:49:85:bd:25:2a:
18:87:fa:f7:b7:02:d1:a3:23:74:6c:1a:45:f7:78:
1d:31:06:89:37:ba:1a:2d:2c:90:f5:41:fb:59:24:
13:ee:34:29:8b:86:22:5b:21:52:bf:35:57:78:43:
7b:31:ed:e0:70:79:e9:8f:5c:75:78:23:c8:d0:43:
32:fb:bd:60:75:17:5e:ee:af:ad:fe:ff:4c:3f:be:
6f:55:88:26:fc:11:e8:0e:81:3f:fd:d1:8a:90:18:
6c:93:c4:81:6d:62:c6:40:54:e2:80:8b:b9:8b:97:
a6:dc:e1:38:a9:d9:38:bc:cb:a5:c6:17:c5:0f:b8:
23:14:6e:c3:4a:67:43:a9:44:24:ae:22:20:38:46:
19:c2:34:43:dc:99:7e:47:4f:14:21:4e:96:55:51:
df:47:04:22:00:3d:eb:c7:8d:59:bc:45:03:bb:c4:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B8:FF:80:00:01:DF:F3:EC:80:88:F6:13:E2:BE:61:76:BD:7A:8F
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/H7j_gAAB3_PsgIj2E-K-YXa9eo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
Signature Algorithm: sha256WithRSAEncryption
49:29:1c:38:a9:75:fd:88:79:a7:d6:e2:01:15:db:b7:84:1d:
5b:46:f0:bc:ca:b2:a0:f2:2b:7a:9d:66:52:fd:9d:c5:9d:bb:
6a:c3:25:1d:a3:5c:0b:fe:4f:d0:88:02:d8:e8:29:61:76:9c:
77:4c:59:f8:2a:7e:6b:4a:89:84:62:fa:95:22:7e:a6:52:d6:
2d:08:97:0d:4e:5d:c1:52:ce:05:2f:23:b2:4a:80:01:47:fc:
66:9a:36:d8:8b:6c:00:3a:56:87:cd:d0:a2:36:99:d2:4b:6f:
c2:53:e5:20:f7:e4:5a:af:a4:b9:61:60:75:20:5b:97:da:dd:
fe:b0:c5:f6:a0:35:fe:d8:ab:0e:ba:51:a2:dd:ca:6f:ef:29:
81:05:1f:82:31:be:b5:1c:40:98:71:55:a7:cc:b0:c7:a5:56:
63:f9:da:d8:16:a1:17:bc:fc:ca:0c:9a:c5:f2:03:4f:4e:ca:
f2:0b:38:56:7f:80:05:4b:0b:99:5a:b0:99:09:02:07:52:ab:
96:9d:5e:ca:95:70:ea:ef:30:b1:0f:19:68:f9:31:a8:36:c9:
c0:13:73:dc:36:ee:37:13:1f:91:37:85:a8:12:04:7e:ba:97:
78:fd:03:43:ae:a3:e2:24:42:65:de:3d:7a:52:5d:0f:b4:05:
dd:45:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org