Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Mv8rHAw7NhM2N8XghKvyZqPk1Mg.roa
File: Mv8rHAw7NhM2N8XghKvyZqPk1Mg.roa (raw, json)
Hash identifier: CegqQt+vBlHtfjFoG0ywjgT+6aGD9KLmdRNwMoFrh+A=
Subject key identifier: 32:FF:2B:1C:0C:3B:36:13:36:37:C5:E0:84:AB:F2:66:A3:E4:D4:C8
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D0D2276DE0873CF9AB5E9813D91BF
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Mv8rHAw7NhM2N8XghKvyZqPk1Mg.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0d:22:76:de:08:73:cf:9a:b5:e9:81:3d:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32ff2b1c0c3b36133637c5e084abf266a3e4d4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:73:53:74:1d:10:fa:97:68:1d:f8:82:0d:
01:30:ab:1b:e1:d4:1e:be:06:7e:da:29:52:54:9b:
62:9a:e8:28:49:3a:ae:13:01:c6:cf:f7:ea:28:fc:
9a:3b:89:1c:fb:ea:93:39:e1:83:82:76:91:23:83:
74:9e:75:06:16:8d:61:df:75:8c:41:bc:92:5e:7f:
0f:c1:65:05:55:a4:a3:d5:1f:bc:82:15:e5:e7:b4:
a3:1d:b3:a6:45:2b:33:df:75:78:db:cd:90:a8:33:
12:9f:7d:5b:46:65:35:50:f5:79:60:b9:cd:bb:00:
a4:26:3b:28:22:6a:11:a0:a9:5f:92:e9:59:28:e1:
62:40:55:08:2a:ce:07:34:0b:47:fd:a9:f6:dd:41:
73:55:17:a3:ed:2f:9d:5d:c0:1d:47:6b:a1:4d:3f:
9a:b2:85:4e:0c:a8:7b:38:a4:65:3b:58:e7:2b:d1:
a4:8e:f7:30:57:d4:69:81:41:57:dd:4f:64:28:b4:
ea:44:72:06:dc:49:6e:94:4b:1b:a8:06:08:f2:d4:
c1:ef:e0:15:38:eb:8f:b3:08:13:5d:88:c7:a9:61:
b8:b2:bf:15:12:0a:80:1f:b4:04:a1:61:d8:f8:df:
70:69:b2:a7:e3:ef:f6:ab:73:40:e1:3e:17:b5:c4:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:2B:1C:0C:3B:36:13:36:37:C5:E0:84:AB:F2:66:A3:E4:D4:C8
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/Mv8rHAw7NhM2N8XghKvyZqPk1Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
80:66:07:44:7c:45:c6:d3:d1:93:f6:7f:3b:6f:f4:6a:18:1a:
68:41:a0:44:58:c3:60:ea:cc:fc:c8:13:3f:ae:4b:16:b3:20:
15:09:4f:53:e5:d7:f0:67:da:f8:cf:a7:ae:3d:f7:53:ac:40:
59:a2:66:e9:44:d8:8b:f0:08:4f:ac:e4:80:ce:b1:5d:c0:17:
ca:01:d3:c7:ab:2a:32:7d:79:ee:fe:ef:9a:d1:87:1a:8d:fa:
c6:55:e8:89:f7:5e:34:14:50:69:fd:08:fe:46:f5:3c:26:87:
91:e5:8a:88:2b:f4:b5:cc:f3:39:e1:52:6d:2a:ad:23:17:3d:
cd:18:a9:b9:28:04:45:db:31:a8:f9:a5:2f:32:9c:32:83:42:
26:ef:35:7a:97:8a:38:56:dd:f9:86:5f:56:23:fd:e0:5d:5f:
37:b6:ba:ce:b1:59:26:76:be:5c:47:cd:d2:ed:c6:ab:03:26:
b5:be:aa:30:d0:ba:8f:57:22:79:80:d9:6e:0e:51:76:e0:70:
88:2b:f7:41:a2:c5:af:54:f0:95:88:04:92:07:04:9e:5c:66:
bf:93:ed:03:ee:7b:ab:03:59:42:3f:0f:7d:83:15:ca:fa:04:
a7:3a:39:85:62:31:99:6f:40:d8:10:4c:31:3b:af:2b:b3:fb:
70:9f:1e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org