Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/xgnikyzKuO23SETTKX80WWl9GlU.roa
File: xgnikyzKuO23SETTKX80WWl9GlU.roa (raw, json)
Hash identifier: 8zdY8Jj4hklmigFShRdwfhfa9ojHtd9lJxvdTs7e6c8=
Subject key identifier: C6:09:E2:93:2C:CA:B8:ED:B7:48:44:D3:29:7F:34:59:69:7D:1A:55
Certificate issuer: /CN=829e0e8ab4db83a62d318c69304840e5ca76fe86
Certificate serial: 01857079821AF14D6090F5369F19E6689F15
Authority key identifier: 82:9E:0E:8A:B4:DB:83:A6:2D:31:8C:69:30:48:40:E5:CA:76:FE:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gp4OirTbg6YtMYxpMEhA5cp2_oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/xgnikyzKuO23SETTKX80WWl9GlU.roa
Signing time: Mon 02 Jan 2023 03:14:49 +0000
ROA not before: Mon 02 Jan 2023 03:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202074
IP address blocks: 45.91.184.0/22 maxlen: 24
45.91.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:82:1a:f1:4d:60:90:f5:36:9f:19:e6:68:9f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=829e0e8ab4db83a62d318c69304840e5ca76fe86
Validity
Not Before: Jan 2 03:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c609e2932ccab8edb74844d3297f3459697d1a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:4b:90:ed:ce:39:2f:bf:02:e2:60:bb:4e:
82:2f:47:82:ea:0f:15:ae:5c:ee:64:71:8c:9d:9a:
d4:74:af:50:99:34:dc:42:b7:a6:bc:5c:ea:36:19:
1f:51:3f:0b:d5:30:6e:e1:ac:a8:73:1f:8a:7b:ef:
72:41:0f:e7:4e:11:5e:a5:e7:cc:f5:ec:28:df:df:
57:0c:61:05:fc:76:73:76:cb:f3:0e:55:6e:4d:7d:
87:0b:10:e6:7b:32:18:d8:5e:0e:03:d1:d1:25:e6:
02:f1:d1:6c:64:7c:7e:33:3d:4f:a7:99:62:a9:88:
14:c5:7a:04:61:30:d5:97:ee:7b:7e:14:d7:7e:e8:
30:f2:42:86:74:9c:5b:2a:03:2f:10:38:20:96:07:
96:57:64:eb:93:7d:cd:76:16:a7:37:53:cf:dc:1b:
fe:c7:52:c9:8f:48:88:7c:0b:85:1b:33:77:55:3c:
c9:ed:50:eb:34:f9:e9:d1:a0:82:2f:72:a3:37:a2:
ee:e8:d1:54:68:d6:f2:52:c8:29:19:cc:22:3a:69:
b4:e9:4c:ad:3c:1a:12:31:8c:0b:30:84:14:00:ba:
00:ea:00:71:46:e6:f8:9a:4f:f5:68:5e:49:9c:11:
ef:ef:48:13:e5:c4:92:94:6b:2d:1e:bd:54:3f:d3:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:09:E2:93:2C:CA:B8:ED:B7:48:44:D3:29:7F:34:59:69:7D:1A:55
X509v3 Authority Key Identifier:
keyid:82:9E:0E:8A:B4:DB:83:A6:2D:31:8C:69:30:48:40:E5:CA:76:FE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp4OirTbg6YtMYxpMEhA5cp2_oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/xgnikyzKuO23SETTKX80WWl9GlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a17dac-87b7-42c5-bf5a-d478ca1d4dd0/1/gp4OirTbg6YtMYxpMEhA5cp2_oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.184.0/22
Signature Algorithm: sha256WithRSAEncryption
60:94:cf:d2:83:f5:e4:ba:2c:63:ad:da:08:0b:40:71:75:07:
96:a4:fe:11:5b:ca:6b:d7:5f:20:8d:6a:2a:1f:7b:da:0b:c7:
56:06:e3:52:c6:48:42:a5:ef:89:e1:3a:ad:44:3d:e7:c0:65:
1d:76:fa:65:66:2a:70:12:9a:9b:fe:5f:b3:3d:a3:6c:17:59:
91:8d:43:7f:18:c3:db:d5:5c:1c:06:cf:58:93:24:90:9d:68:
f4:da:7e:52:d4:fd:9e:d8:43:26:25:24:1e:56:f0:b2:ba:71:
fa:8a:09:26:b4:90:12:06:72:2c:80:5c:b8:41:ca:69:b1:0b:
ba:84:17:e5:6a:06:34:36:ef:28:c8:fc:80:69:6b:48:3d:db:
e4:f6:a5:8e:c7:65:2b:94:d3:da:3a:a7:7d:e8:be:47:41:3e:
4e:55:8e:81:00:56:8b:bf:b4:12:69:35:8c:58:d5:d2:fc:5b:
e1:6f:6e:68:ba:78:d1:85:55:cf:bb:a6:83:03:f1:85:83:74:
1c:de:8c:fa:91:85:96:8b:69:3c:66:86:2f:57:30:01:c7:34:
82:db:28:b5:43:d7:b1:b6:5e:8e:5f:6a:1e:e0:5f:94:a9:be:
0d:35:7b:d2:5f:00:70:c7:31:b3:2d:ce:56:56:cc:c6:bc:2c:
12:47:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:48 2024 by rpki-client on console-ams.rpki-client.org