Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/pkjLWGIaziTWDxX57G6xGrEvCR4.roa
File: pkjLWGIaziTWDxX57G6xGrEvCR4.roa (raw, json)
Hash identifier: 2+XpCUXE9Zw7ZnUa4MsrxCaZj2Y+fQrFCF17S8Vqns0=
Subject key identifier: A6:48:CB:58:62:1A:CE:24:D6:0F:15:F9:EC:6E:B1:1A:B1:2F:09:1E
Certificate issuer: /CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Certificate serial: 0183D1D199FFD72971BC5A9758C8D9E5BE5F
Authority key identifier: 5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/pkjLWGIaziTWDxX57G6xGrEvCR4.roa
Signing time: Thu 13 Oct 2022 14:48:37 +0000
ROA not before: Thu 13 Oct 2022 14:48:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.14.165.0/24 maxlen: 24
45.14.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:d1:99:ff:d7:29:71:bc:5a:97:58:c8:d9:e5:be:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ba1abf7df1e026646a9ef0a71e8769521bc9f81
Validity
Not Before: Oct 13 14:48:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a648cb58621ace24d60f15f9ec6eb11ab12f091e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:9e:77:88:06:2f:90:c4:4c:88:0f:21:4f:
03:a0:29:9a:7a:43:96:fe:14:44:f9:df:00:63:29:
44:3c:04:e3:7e:cd:70:72:fc:41:4a:1d:9e:55:78:
b9:c0:8a:d8:74:81:af:14:e7:a3:d5:4b:a9:0c:9e:
1d:cc:29:97:4e:12:ac:f3:2c:9b:a8:ff:ed:f0:39:
b3:4d:3d:cc:52:8b:a2:66:ac:2d:ba:33:7e:9b:42:
d2:c9:61:f6:db:8c:40:8f:f2:c5:f3:c8:ce:6a:1a:
7b:22:cd:22:59:75:40:40:74:e3:6a:53:f0:b9:ec:
06:3a:4a:06:c5:8a:2a:de:ab:7b:63:7b:97:ef:07:
4d:aa:2a:40:34:e8:02:1a:ae:24:24:70:b8:e6:26:
89:c4:5a:f9:53:0d:99:fa:ba:0f:76:7d:4d:e0:dd:
bc:cc:33:9f:8d:1c:7f:47:33:d7:a3:85:6d:52:41:
6e:e3:19:9e:f9:37:be:b4:10:d7:fd:cd:ca:6f:f4:
e7:a1:b2:01:3c:a4:7c:af:2d:e3:b8:ab:a5:73:26:
09:3c:b4:d3:c7:25:fc:a8:24:ce:81:da:82:6e:f6:
65:c4:1d:22:22:7e:59:f3:c6:d7:63:21:32:be:d2:
21:a0:77:c7:b0:e1:5d:39:03:45:73:46:d6:e4:95:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:48:CB:58:62:1A:CE:24:D6:0F:15:F9:EC:6E:B1:1A:B1:2F:09:1E
X509v3 Authority Key Identifier:
keyid:5B:A1:AB:F7:DF:1E:02:66:46:A9:EF:0A:71:E8:76:95:21:BC:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6Gr998eAmZGqe8Kceh2lSG8n4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/pkjLWGIaziTWDxX57G6xGrEvCR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/aba05f-83f9-46c3-841f-26e754b42e07/1/W6Gr998eAmZGqe8Kceh2lSG8n4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.165.0-45.14.166.255
Signature Algorithm: sha256WithRSAEncryption
27:39:7a:22:5d:99:6b:18:48:61:fd:ff:d9:99:fa:45:ce:c5:
4a:9c:6c:80:bb:bc:48:00:04:ca:a7:48:12:a0:ba:1d:d2:08:
47:04:57:06:44:18:9d:1e:9a:c6:80:a4:59:3b:bd:1d:06:bb:
21:5b:4c:e6:10:cd:3e:06:e9:90:f0:d7:f5:ca:06:ba:bb:92:
33:c6:4b:fa:14:7f:10:6a:eb:56:72:7b:a7:b2:76:32:00:d8:
3c:ce:76:24:df:a4:5d:c0:4e:f6:5b:40:85:6e:a2:2f:76:fb:
01:a6:e8:fb:86:37:b9:de:25:20:fb:8f:fc:f2:45:e3:b9:63:
23:6d:bd:16:9f:93:a4:7a:4e:fa:96:78:ba:28:8e:1e:f1:db:
44:b9:f9:a0:ba:d3:fd:aa:8a:7d:b0:9a:a6:3b:86:ab:68:c8:
7c:09:af:20:72:37:82:74:2b:c9:97:c4:53:1d:4d:d0:7b:45:
b3:1d:db:33:95:0d:67:77:04:67:6a:2f:ce:8e:0f:6c:ba:0f:
81:06:a8:52:2f:f4:57:e7:e2:de:2f:e7:2b:da:8a:55:6c:07:
67:d7:53:0a:64:2d:24:92:57:5e:2b:2d:2c:84:5e:7b:55:56:
c2:e0:d4:e5:bc:cc:8f:15:e0:d0:88:cf:a5:fc:13:a7:58:6e:
d2:1a:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:54 2024 by rpki-client on console-ams.rpki-client.org