Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/p-J1ihlV5rmJs54eRMoOeqFPyzE.roa
File: p-J1ihlV5rmJs54eRMoOeqFPyzE.roa (raw, json)
Hash identifier: eqjmgiAYJc/zDTAeFxgGuBDfT2YhrPWOIqiSgLUPRCE=
Subject key identifier: A7:E2:75:8A:19:55:E6:B9:89:B3:9E:1E:44:CA:0E:7A:A1:4F:CB:31
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018931C8318B4A6A90BCF09F10D681F1DF11
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/p-J1ihlV5rmJs54eRMoOeqFPyzE.roa
Signing time: Fri 07 Jul 2023 19:15:50 +0000
ROA not before: Fri 07 Jul 2023 19:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:c8:31:8b:4a:6a:90:bc:f0:9f:10:d6:81:f1:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jul 7 19:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7e2758a1955e6b989b39e1e44ca0e7aa14fcb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:08:8b:66:da:31:5e:c5:40:ef:0e:2e:14:
52:41:44:91:e5:dc:d9:cf:f9:a2:e6:4d:9b:54:ea:
a9:c0:27:5b:c2:65:20:0b:c9:7f:43:fc:03:1c:92:
7c:3e:a6:01:95:df:4d:1a:5e:9f:42:0b:b7:cc:ec:
18:3f:17:22:f3:a8:fb:df:9a:81:7f:56:52:6d:5a:
fb:26:cc:57:08:9a:16:be:6c:d5:bf:d1:92:b8:f5:
0f:b9:8d:9a:ef:da:e8:09:6a:b0:b7:a9:31:28:06:
be:0e:0b:e0:e8:e4:f6:b6:c8:ee:11:3d:5f:c0:6b:
fe:73:50:77:e2:a2:f2:94:21:cd:c8:06:fb:ef:6c:
56:a8:0b:8e:e0:a0:97:3f:94:da:da:80:ae:2b:99:
3a:b2:7e:4a:49:76:38:16:0f:8d:41:ea:f5:3c:76:
fc:d9:44:35:0c:79:8a:3e:6a:a4:63:98:15:20:6e:
cf:1f:5e:d0:89:5b:57:98:f0:64:09:4b:f8:84:40:
1e:7a:d0:82:36:29:96:e2:43:50:85:9f:d2:f2:d5:
75:04:af:6a:1d:ba:91:42:01:f9:8e:c4:85:71:3f:
fc:9b:d8:72:38:1a:e7:0e:3e:99:e1:5a:1a:15:ce:
9b:50:30:ba:b7:5f:45:06:e3:a6:f0:d1:0a:33:7c:
1d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:75:8A:19:55:E6:B9:89:B3:9E:1E:44:CA:0E:7A:A1:4F:CB:31
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/p-J1ihlV5rmJs54eRMoOeqFPyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:4b:84:e1:7e:89:d1:d8:dc:0f:e5:a0:5c:4b:d6:44:39:67:
e8:6d:0d:49:bf:d4:a5:c4:51:de:16:c0:e3:c5:6e:ef:ff:53:
99:05:15:1f:86:a1:32:f5:0c:ba:2a:32:ec:09:53:68:ce:6a:
51:86:99:79:c4:cc:6e:36:f7:61:54:ab:9c:71:ce:b3:cc:ea:
df:3d:85:79:8f:04:1c:56:99:e7:d0:23:a3:c7:3f:22:f7:56:
ac:2c:fe:8f:2e:08:e4:b4:9d:d7:e6:34:02:68:fc:54:4a:9e:
fe:e8:83:8d:0c:14:cb:65:49:ef:dc:44:74:7c:1f:e0:3a:d5:
81:2e:52:7e:34:17:62:cf:6b:d8:bb:28:3b:b5:78:d4:e4:d9:
e2:1f:04:cf:02:eb:5c:b5:06:89:23:bf:ee:39:8b:d1:16:eb:
a3:6a:b2:a4:e0:c0:7c:99:fd:6c:31:01:38:4c:7f:b8:59:07:
df:6f:40:44:b6:2b:77:83:a5:8f:81:8a:b7:f2:f3:ac:7e:39:
81:ec:c0:d2:9f:0c:86:9c:fc:15:16:dd:4d:62:21:fb:7a:f1:
f4:f6:27:8c:af:c8:f1:aa:03:e1:5b:0b:3f:2a:1b:75:88:a8:
0d:34:b2:b6:1c:59:d7:6f:e1:07:51:4a:3a:a9:ea:09:d7:85:
a0:59:ab:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:48 2024 by rpki-client on console-ams.rpki-client.org