Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uNIGZMPJSVpGsmufwrwS2ZQHD2A.roa
File: uNIGZMPJSVpGsmufwrwS2ZQHD2A.roa (raw, json)
Hash identifier: W3UfK8bFDF7g7Q2s6UXfyGbuGrNaITVa2310GhXUxpA=
Subject key identifier: B8:D2:06:64:C3:C9:49:5A:46:B2:6B:9F:C2:BC:12:D9:94:07:0F:60
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D06FF8003748CFC681845C631978C
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uNIGZMPJSVpGsmufwrwS2ZQHD2A.roa
Signing time: Sun 01 Jan 2023 13:54:45 +0000
ROA not before: Sun 01 Jan 2023 13:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.132.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:06:ff:80:03:74:8c:fc:68:18:45:c6:31:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8d20664c3c9495a46b26b9fc2bc12d994070f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6e:e7:aa:61:98:d1:e6:1f:3e:67:d1:10:8e:
2c:7e:14:39:7e:4f:3a:23:9b:b7:5b:34:b4:00:b0:
5a:e7:59:28:a3:1a:66:4b:86:b1:a9:00:b1:66:e2:
f4:b6:8c:81:39:7f:78:31:c8:f4:3d:64:ae:7b:74:
77:08:f0:9d:9a:88:a8:01:03:0c:4c:c4:da:a3:40:
73:1f:e7:b2:d2:96:d1:75:e9:c0:5c:23:3b:e1:45:
a6:97:2b:f5:97:04:1e:02:0e:bd:6d:94:46:b0:58:
d9:47:91:7b:71:77:3e:73:97:f9:d3:87:58:c3:bc:
bc:97:df:16:bd:5b:e5:59:0c:a6:51:34:65:ce:61:
fb:14:7c:67:86:3e:c7:58:f4:3a:21:2a:75:bd:7e:
57:e0:45:14:66:ac:bf:39:a9:f1:56:09:f5:81:ba:
d9:63:5e:bd:b0:be:e4:5f:b2:db:45:05:1f:01:7c:
4a:24:07:c7:cf:77:fe:26:ef:95:c3:39:87:96:e0:
cf:2b:48:07:c7:bc:a4:91:25:80:2f:54:40:d9:fe:
da:22:eb:1f:6f:5d:f3:62:3a:c2:6f:de:e9:9a:6a:
a2:1d:b8:88:6a:7e:e3:79:c6:8b:3f:98:16:db:37:
60:05:df:a6:e1:fe:2a:4a:a0:18:7e:d9:86:7f:75:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:06:64:C3:C9:49:5A:46:B2:6B:9F:C2:BC:12:D9:94:07:0F:60
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/uNIGZMPJSVpGsmufwrwS2ZQHD2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.98.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:62:c7:59:e0:ce:35:99:de:a3:16:f7:4e:42:5b:31:63:6a:
96:80:bb:4e:5d:24:52:82:16:a8:b9:f7:8f:49:89:de:2e:73:
04:e3:06:cd:73:ee:df:4d:38:1f:70:1d:33:15:db:f9:20:c9:
d5:6a:bb:f8:1f:77:f6:55:6d:23:05:3c:4b:3c:c8:01:e1:86:
f3:37:1d:ee:90:1a:3e:47:2a:87:88:69:95:9b:2a:4c:9b:eb:
da:7f:a2:33:70:77:55:0e:0f:4b:89:c3:60:b3:9a:6d:e1:2d:
ba:d2:dd:da:7d:c0:bc:60:53:4b:e2:7c:05:5a:29:28:65:a4:
47:ee:4d:09:8f:4a:c5:d0:fe:58:b4:23:24:ba:d8:4e:e4:61:
8f:8d:f9:00:af:4d:83:77:13:4b:7f:eb:81:cd:1f:3a:3d:77:
5f:f8:65:84:70:eb:a9:85:99:ac:40:e3:58:0d:eb:19:86:33:
d2:c5:c3:c1:92:31:65:3a:28:aa:5b:fd:e1:b8:ee:c2:fd:cf:
97:9e:d3:e8:36:c0:1b:9a:b3:ca:3a:bf:8a:29:44:9d:ab:c1:
d6:49:c6:00:e7:20:67:cd:eb:85:da:c0:e2:a9:48:c2:64:21:
cb:31:87:9b:b2:2a:de:8f:ae:85:0c:9d:74:d6:cc:61:ca:e8:
82:83:bb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:41 2024 by rpki-client on console-ams.rpki-client.org