Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/muvNU-EQm4_eD2zaAGqSPjwIQhg.roa
File: muvNU-EQm4_eD2zaAGqSPjwIQhg.roa (raw, json)
Hash identifier: uAp5BymeT8GBU1ghWCdOANkWe8iOxOT8gMVaIex/1xA=
Subject key identifier: 9A:EB:CD:53:E1:10:9B:8F:DE:0F:6C:DA:00:6A:92:3E:3C:08:42:18
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01856D8AE2A2DC5B7EAF5A2C35E128A4572A
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/muvNU-EQm4_eD2zaAGqSPjwIQhg.roa
Signing time: Sun 01 Jan 2023 13:34:56 +0000
ROA not before: Sun 01 Jan 2023 13:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 45.8.89.0/24 maxlen: 24
2.56.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e2:a2:dc:5b:7e:af:5a:2c:35:e1:28:a4:57:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jan 1 13:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aebcd53e1109b8fde0f6cda006a923e3c084218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:05:7f:b3:8b:3a:ac:1d:32:df:c7:02:d0:3e:
0e:ba:e4:4c:f8:23:e0:9c:99:74:63:d1:ce:f0:70:
f4:f1:08:7b:c9:00:d5:32:48:21:63:59:7a:6b:a1:
86:47:4d:28:cc:12:cb:34:6f:57:7c:bb:5c:50:28:
ae:4a:43:9d:c2:31:c2:e4:1f:df:9f:e7:4f:24:ff:
74:6b:39:5b:80:28:4e:b5:f8:8f:9c:c1:d9:9a:b7:
56:4a:ac:0a:17:cc:2f:53:8d:91:d5:5a:29:b0:4c:
bd:da:20:be:9c:1f:93:15:80:16:56:89:f2:31:bd:
14:3f:72:94:59:e3:09:17:66:5c:bd:b5:f1:8a:67:
5e:3c:ff:e0:71:59:f1:67:80:ec:af:13:b7:f5:54:
48:5c:9c:b4:cd:54:c4:74:71:16:e5:69:00:47:f7:
3c:09:e4:f3:e8:f1:75:b6:3b:05:ac:36:f7:53:b8:
6b:1f:36:fa:cf:b1:72:55:44:cd:96:b4:56:10:4d:
37:62:35:f2:a8:57:64:09:2d:95:13:eb:99:6c:7d:
22:9e:13:03:00:d9:33:32:03:8f:51:22:fd:62:26:
53:42:01:b2:ab:63:00:f5:88:7f:bd:b6:ce:74:a1:
0a:55:c8:32:52:80:fb:4d:4c:b2:f8:b1:a3:d2:77:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EB:CD:53:E1:10:9B:8F:DE:0F:6C:DA:00:6A:92:3E:3C:08:42:18
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/muvNU-EQm4_eD2zaAGqSPjwIQhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.243.0/24
45.8.89.0/24
Signature Algorithm: sha256WithRSAEncryption
64:89:ef:38:d2:ab:7e:ff:1e:a7:69:d8:24:d5:ae:8c:45:a4:
59:b3:0b:a2:94:4d:18:ab:be:37:b0:e3:1a:45:93:f6:8b:96:
f9:ef:b1:7d:47:4f:92:dd:db:d7:6c:3f:34:a9:2b:23:22:cf:
7c:18:9b:49:bf:bc:15:39:52:8a:e1:eb:a5:c1:79:cc:53:59:
c9:a3:68:49:8f:ae:90:fd:20:18:7f:bc:f9:ab:39:55:26:a0:
64:b8:0b:7b:a4:52:4c:ea:07:74:04:66:55:a6:75:8c:9b:bf:
1b:94:14:8b:23:11:65:a4:8e:ce:4b:eb:91:4d:ca:89:3d:a0:
c4:8e:c3:8d:b9:cb:24:5f:1e:6a:00:a1:0b:e0:45:58:47:e9:
f9:00:4d:28:91:bc:74:80:eb:17:4d:d9:5d:4e:2d:13:ae:a6:
f2:30:81:62:aa:c2:ee:a0:68:c2:ef:1c:9e:b8:df:4d:35:ab:
e4:ac:57:5c:9d:13:21:77:9e:0f:53:f8:04:14:ac:d1:30:d7:
1d:1d:1d:88:65:2a:25:32:0e:09:30:e5:01:8b:b7:95:2b:3d:
a0:75:ee:f7:d2:52:df:e7:b0:f6:bc:94:79:95:7f:ec:d0:27:
e6:a8:06:cb:79:59:5d:1c:64:73:16:f8:e3:97:4f:69:e4:fe:
01:34:61:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org