Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Mr6CqslbzWACzSD3NfEesZrSV60.roa
File: Mr6CqslbzWACzSD3NfEesZrSV60.roa (raw, json)
Hash identifier: YZxHkp42clKl9FCUCGXFbmBjK96CTf8CD0Xmzz4F+Xc=
Subject key identifier: 32:BE:82:AA:C9:5B:CD:60:02:CD:20:F7:35:F1:1E:B1:9A:D2:57:AD
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01850AD1666AF0198DFD522FAD4C334F40DF
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Mr6CqslbzWACzSD3NfEesZrSV60.roa
Signing time: Tue 13 Dec 2022 09:29:33 +0000
ROA not before: Tue 13 Dec 2022 09:29:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.132.98.0/23 maxlen: 24
45.132.96.0/22 maxlen: 24
45.132.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:d1:66:6a:f0:19:8d:fd:52:2f:ad:4c:33:4f:40:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Dec 13 09:29:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32be82aac95bcd6002cd20f735f11eb19ad257ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:b2:ad:23:f3:a9:8f:1f:ab:e5:2c:cf:d1:
7a:11:db:10:61:89:15:49:1d:75:c3:be:64:55:04:
00:5c:40:a6:ec:0b:94:cf:ba:f7:2a:89:14:fc:ee:
96:ee:56:01:2b:93:48:ab:2f:1a:f0:da:01:c2:62:
ab:9b:4e:16:fe:7a:71:07:f1:ae:25:8c:95:77:46:
fc:15:88:09:5e:20:cc:77:1c:a2:15:2b:89:07:73:
5c:99:78:a7:66:e5:3e:44:7f:ae:49:de:57:ba:52:
a5:4d:31:1d:d2:8b:09:8d:9f:42:89:9b:53:cd:21:
3e:bb:91:4d:c5:84:23:b9:6f:2f:12:13:90:07:1f:
7b:a2:32:ba:ee:e0:f7:ef:21:9f:47:df:86:59:77:
d5:c8:49:c8:d8:2e:59:f0:a5:4b:2c:d6:25:c1:6b:
57:dc:56:94:6f:7f:b2:74:63:35:ab:8e:b0:16:d7:
55:e5:37:9a:a2:2f:70:bf:7e:21:cc:e7:62:9e:14:
46:d0:33:0f:1a:77:a0:29:ec:7e:33:58:9b:be:97:
24:31:c1:c3:be:41:94:6c:2d:2c:82:1e:48:84:5b:
69:e6:bd:94:c0:66:7f:0c:01:67:38:5b:ef:10:5a:
63:45:7a:e7:30:8e:8d:d4:9c:c2:3e:ca:45:cd:0e:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:82:AA:C9:5B:CD:60:02:CD:20:F7:35:F1:1E:B1:9A:D2:57:AD
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Mr6CqslbzWACzSD3NfEesZrSV60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f8:0f:d7:44:5c:d3:3e:65:3f:0a:9d:52:3a:72:aa:1e:79:
da:ff:b4:59:9c:d8:40:45:ad:18:4e:63:6c:64:e1:29:72:7f:
80:23:cf:75:3d:ee:52:a6:93:b2:11:38:87:a6:07:ca:54:50:
c0:c3:6b:71:51:f7:d0:dd:2e:96:fe:ed:31:40:05:fe:e3:b5:
f8:9f:91:42:06:07:f6:88:30:08:3b:63:28:ca:7b:03:8a:2e:
e2:fd:40:0e:fb:47:2c:c5:57:01:eb:a7:73:6c:1f:be:ad:9f:
35:cb:1f:f3:20:7e:14:63:a7:19:7f:af:a4:b7:1c:b5:e2:33:
d4:b9:c3:05:db:40:6b:84:5b:da:5f:9f:b9:2e:db:fd:cc:b8:
14:40:33:37:b1:fe:43:cd:a5:0b:79:23:98:cf:05:e0:5e:16:
f2:85:af:c9:03:5b:60:26:bf:c0:e3:1d:32:db:8c:b9:45:cb:
f0:95:16:46:be:73:67:c7:13:e9:fa:d0:17:03:a8:a5:55:63:
9f:26:72:a0:c5:13:60:ef:d3:7a:b7:ba:68:3d:c9:92:d6:54:
92:81:96:98:53:af:68:f5:a6:94:bf:8c:09:54:86:da:22:1f:
3a:db:61:98:0a:dd:83:82:ca:0b:6e:33:c4:4d:8c:42:92:3b:
3d:b8:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:48 2025 by rpki-client