Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/oXHhpKU_1K937gmdidN4DWbdvkI.roa
File: oXHhpKU_1K937gmdidN4DWbdvkI.roa (raw, json)
Hash identifier: d5W6Z0Ll++Tegv20OWaS//VpvwYojbFSuAKDqPxhToI=
Subject key identifier: A1:71:E1:A4:A5:3F:D4:AF:77:EE:09:9D:89:D3:78:0D:66:DD:BE:42
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 01879ED4DC6D936DD747B4A486BA4660EAE2
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/oXHhpKU_1K937gmdidN4DWbdvkI.roa
Signing time: Thu 20 Apr 2023 13:22:42 +0000
ROA not before: Thu 20 Apr 2023 13:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.64.0/23 maxlen: 24
45.155.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:d4:dc:6d:93:6d:d7:47:b4:a4:86:ba:46:60:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Apr 20 13:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a171e1a4a53fd4af77ee099d89d3780d66ddbe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c2:9c:32:00:88:66:9a:e5:56:52:64:e5:b8:
ba:ba:2a:48:63:82:50:6e:1b:80:fb:7c:5e:d3:7c:
1b:70:87:42:9f:f6:b8:85:9c:67:2f:a9:e1:b5:01:
a3:dd:2f:8a:f7:24:19:63:61:ea:b0:cd:f4:40:a8:
bd:4a:1e:0d:68:87:5e:fa:9f:1e:ca:11:0c:5c:30:
3e:f0:b7:81:fb:b8:b2:bc:9b:f1:d9:12:3e:bd:12:
45:13:63:fa:c4:e1:a4:6d:96:f0:f6:66:03:8c:91:
a1:3a:e1:dd:7a:33:8e:85:13:fa:e1:81:6d:5d:c1:
c8:3b:2c:b3:08:6c:7d:6c:5f:6f:d4:85:ab:23:0a:
4c:54:57:e7:b5:ac:ed:75:4e:0d:06:9f:7c:77:95:
57:f5:80:13:9d:e0:88:f5:5d:ee:0c:62:f4:d3:e2:
37:dc:8f:0d:7c:8c:b1:74:b3:63:e5:1d:3f:1d:a7:
ea:f3:39:8c:10:5c:c6:75:e2:94:bd:f4:5f:40:9d:
cb:17:a0:52:63:a7:8a:68:66:5e:5e:8a:9f:f5:ce:
53:7b:0f:ee:55:94:f9:af:ce:fd:cb:c4:6d:f9:48:
d8:b6:68:f3:3d:8d:f7:20:30:26:06:be:e7:0f:75:
b8:8c:6e:7c:93:13:91:f1:e2:b1:61:ee:b4:df:c2:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:E1:A4:A5:3F:D4:AF:77:EE:09:9D:89:D3:78:0D:66:DD:BE:42
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/oXHhpKU_1K937gmdidN4DWbdvkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/22
Signature Algorithm: sha256WithRSAEncryption
14:eb:6d:bc:fe:60:8b:ba:aa:dc:93:ed:19:de:e0:5f:72:0f:
09:3c:65:3e:fc:0f:64:cd:a0:7d:ae:d1:06:28:26:29:fc:6f:
e8:e4:fd:b1:ef:96:35:be:52:be:86:bf:c8:f2:74:5d:97:e3:
24:ee:b6:de:3c:c6:cc:9b:d1:b5:4b:09:47:77:c5:f3:12:45:
c8:66:bc:0f:89:21:95:d9:15:39:a9:8d:b8:f4:ea:41:70:95:
4d:45:d7:ec:f0:78:e5:3f:13:e8:58:d5:ab:1b:d0:3e:b9:91:
80:86:c3:6a:eb:cc:6f:17:a2:1f:ec:a3:14:90:10:8c:66:14:
26:5e:56:bc:62:44:00:6a:18:26:8a:4f:cc:35:ae:a4:36:10:
d3:26:fd:b5:9b:ea:33:d1:30:09:4b:52:11:98:4a:b5:0d:23:
d1:c4:b9:42:d9:1d:84:e1:e9:6a:e7:b8:32:e4:3d:b3:6d:c2:
da:23:64:2a:6c:25:51:f0:3c:bf:84:86:47:9f:6f:d7:5a:d1:
bb:d9:b9:1f:e7:09:af:9b:bc:83:16:4c:b1:af:d4:77:86:fc:
a9:0a:3f:90:ec:a9:69:c6:c8:48:00:79:82:78:ac:bb:96:9e:
d5:fa:f5:97:01:4a:eb:09:b7:8f:c9:48:ff:fe:63:92:23:eb:
ba:d8:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:09 2024 by rpki-client on console-fra.rpki-client.org