Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/cNk79LR2FEq-tykbZMu0P8Nakbg.roa
File: cNk79LR2FEq-tykbZMu0P8Nakbg.roa (raw, json)
Hash identifier: LhfiH9s0GQ/JumFY+fs2BMyu7OdDj5UCM/2rOiP4Sb4=
Subject key identifier: 70:D9:3B:F4:B4:76:14:4A:BE:B7:29:1B:64:CB:B4:3F:C3:5A:91:B8
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01838DCA998951ED1E8143F97E4CC66A771B
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/cNk79LR2FEq-tykbZMu0P8Nakbg.roa
Signing time: Fri 30 Sep 2022 09:46:48 +0000
ROA not before: Fri 30 Sep 2022 09:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:ca:99:89:51:ed:1e:81:43:f9:7e:4c:c6:6a:77:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Sep 30 09:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70d93bf4b476144abeb7291b64cbb43fc35a91b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:87:ac:99:00:3b:35:93:6d:de:58:2e:1d:
7d:4b:2b:55:e7:cf:8d:6c:35:9a:de:03:b3:85:c8:
36:2a:ab:df:b3:10:c3:54:6d:be:5b:30:e9:59:6f:
78:57:a7:28:b5:cf:5b:e9:41:7e:3c:11:3c:e1:27:
54:c2:d9:79:21:d6:93:5b:51:84:f8:6e:17:39:74:
a8:aa:37:97:48:01:9f:e5:85:44:9c:2e:03:fd:52:
69:8e:8a:46:b4:eb:43:74:05:1d:8a:3f:34:85:2e:
e0:d1:3b:1b:44:26:55:d5:c6:3e:34:76:1f:1c:8c:
e1:28:5b:18:0b:de:e5:1d:8e:9b:3f:4a:68:78:7f:
0b:7c:75:ae:c4:4e:72:1a:1d:7f:d6:3b:d5:03:9c:
ad:c3:3a:11:77:21:17:b1:85:a6:6f:f7:34:be:68:
34:5b:15:1a:de:26:4a:ee:15:8b:c4:c7:69:96:40:
e6:ec:21:10:1d:4f:6f:d2:6b:ef:45:39:9f:ed:d0:
25:5e:48:7b:1d:49:23:06:6e:b6:31:3a:a8:ac:07:
93:a9:d7:90:93:c4:f8:fc:18:ab:dc:d5:0f:10:10:
df:c5:ee:c3:94:3f:f3:b9:91:69:6e:1d:83:9b:84:
b2:06:a6:22:04:4f:0f:6e:74:7e:03:fa:55:a6:5d:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D9:3B:F4:B4:76:14:4A:BE:B7:29:1B:64:CB:B4:3F:C3:5A:91:B8
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/cNk79LR2FEq-tykbZMu0P8Nakbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:00:89:87:97:4e:05:e0:44:37:cc:cc:f4:bc:21:ac:ae:75:
4a:7a:3e:1b:81:47:c7:19:01:1f:8d:a4:c3:47:4e:70:35:fc:
a3:f6:cd:d1:41:8b:46:b4:3f:ea:44:f9:77:d8:31:27:c0:0f:
f2:5c:2f:1e:30:8b:5d:02:96:93:fe:6e:3b:e0:97:dd:41:2a:
70:56:0c:54:ff:56:c5:6c:a2:84:61:6b:d3:0f:0c:3b:e8:93:
1e:4e:b7:00:ea:87:dc:9a:3b:92:e4:61:62:a1:0e:4b:77:e6:
bb:11:41:b8:ec:e4:d7:3b:b8:db:56:91:e5:81:96:c8:5c:bb:
c2:ba:af:64:a2:9b:88:8b:ae:75:f3:6b:0c:9c:3b:9c:fd:0e:
b3:01:09:88:29:66:d7:aa:1a:8f:9e:58:6f:6f:9a:fc:96:40:
ff:c3:84:0e:a2:94:fa:5a:b0:bd:2a:f3:4d:8b:f1:bb:73:47:
4b:0c:6f:8d:66:bf:b2:1d:d7:91:2b:29:76:d3:2d:8e:82:af:
ac:0c:6c:ed:14:a4:b5:34:df:4c:07:a8:8f:f9:a7:94:99:a3:
36:d8:84:c3:d0:9a:50:f0:a7:15:7b:07:8e:8e:61:06:85:b8:
c9:95:01:2e:ff:22:55:21:67:a3:e3:41:5a:d1:73:1d:b5:19:
cb:84:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org