Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/PuxGA8aJ0EgUUw04havVafWHMZ0.roa
File: PuxGA8aJ0EgUUw04havVafWHMZ0.roa (raw, json)
Hash identifier: ob4Z2muPkFObHUGPCHZaye0b/o6OPsax5m3dbcCMTWg=
Subject key identifier: 3E:EC:46:03:C6:89:D0:48:14:53:0D:38:85:AB:D5:69:F5:87:31:9D
Certificate issuer: /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial: 089749ED
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/PuxGA8aJ0EgUUw04havVafWHMZ0.roa
Signing time: Sat 01 Jan 2022 06:02:45 +0000
ROA not before: Sat 01 Jan 2022 06:02:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202125
IP address blocks: 45.13.10.0/24 maxlen: 24
45.13.9.0/24 maxlen: 24
45.13.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144132589 (0x89749ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
Validity
Not Before: Jan 1 06:02:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3eec4603c689d04814530d3885abd569f587319d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:a3:f9:cb:69:0c:d4:07:50:32:05:a8:4a:
80:c7:e0:83:b7:26:d9:a8:be:39:6a:63:f9:12:bb:
c3:5a:ed:6a:c2:5c:a5:40:2c:7c:81:e4:7a:71:41:
4d:06:0f:7e:97:fb:36:c2:73:14:27:b3:6b:08:68:
f8:cc:f2:2a:a8:24:6d:8a:59:ff:77:07:fd:69:5f:
e1:e9:ba:a9:ec:3e:ea:36:87:92:b3:bb:c1:8e:35:
1a:84:be:ab:1d:c4:02:20:04:78:61:25:40:6d:21:
fc:b3:8b:f9:95:8c:df:90:9f:74:2c:3f:b8:49:c9:
8a:a9:90:3e:c1:0a:7f:40:09:5d:bf:2b:53:e1:fb:
0a:b6:1e:6c:f6:83:7b:d5:c6:49:b1:e4:fb:54:5a:
8b:d1:9d:2e:b1:8d:85:e8:49:94:d7:1c:a0:a1:33:
b5:bc:62:72:e4:27:27:93:9a:fa:97:04:b5:94:4c:
47:f2:4d:85:19:6c:06:20:a7:fc:be:83:52:de:9e:
b2:6b:f6:c7:d8:99:89:70:29:eb:cd:fa:c3:23:18:
16:3f:bf:3f:a6:3f:6c:48:28:7f:75:af:45:24:f5:
23:63:cd:f2:0c:be:05:77:43:66:dd:b1:b9:db:7a:
62:cf:e2:2c:24:6c:d8:0a:8d:c7:94:89:ce:54:55:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:46:03:C6:89:D0:48:14:53:0D:38:85:AB:D5:69:F5:87:31:9D
X509v3 Authority Key Identifier:
keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/PuxGA8aJ0EgUUw04havVafWHMZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.8.0-45.13.10.255
Signature Algorithm: sha256WithRSAEncryption
3c:07:00:f8:5d:84:ee:8f:76:6e:01:ce:a9:75:f1:15:52:7d:
8d:8b:17:bf:8a:f7:ca:78:47:64:94:34:c0:8d:ad:27:23:72:
9c:91:48:56:dc:66:e4:d8:85:35:92:e8:d6:85:5c:9f:97:3a:
8d:81:e9:6a:67:32:d2:44:69:89:78:ef:d1:c9:2b:88:f4:c9:
9b:da:ee:8a:72:08:2f:a7:7a:25:ec:36:42:f0:b0:8c:76:da:
d6:d0:c4:4e:25:86:30:bb:24:f7:02:90:4a:63:9c:a6:62:2d:
5b:db:38:7a:bd:21:66:6a:7e:37:7c:6e:6e:70:da:60:74:33:
53:ac:92:05:ed:d6:99:23:03:f8:b1:35:39:a0:9d:05:5d:25:
2f:05:e1:2d:69:3f:c0:d9:f1:0c:40:a1:e8:4b:6e:c3:d3:7e:
d6:90:47:73:e5:c0:97:57:b0:59:58:a0:53:2f:29:1b:3b:e4:
b4:71:ff:cc:a0:e8:f8:b1:87:8f:b0:6e:47:c5:82:c2:59:0c:
7b:25:94:45:03:75:88:33:7b:80:a5:e2:8b:64:87:85:90:3c:
db:32:6f:c3:10:ce:f0:53:33:ff:bf:e9:65:61:ef:93:aa:a5:
55:d4:9b:86:c8:d6:ce:be:e6:9e:ca:6c:5f:2a:da:25:e8:75:
3c:56:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:50 2023 by rpki-client on console-ams.rpki-client.org