Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/1f400d-38ff-4913-ab82-5105e4df81a6/1/5NeDshgk1d1LxLqAgTk1OZwCbjs.roa
File: 5NeDshgk1d1LxLqAgTk1OZwCbjs.roa (raw, json)
Hash identifier: 7M57ycDS5fCb/q01iyd74pvDc4O5eSAo+TfZ/DaaZrY=
Subject key identifier: E4:D7:83:B2:18:24:D5:DD:4B:C4:BA:80:81:39:35:39:9C:02:6E:3B
Certificate issuer: /CN=e7468920fd98de9c111548b5e8bbf8108cf679bd
Certificate serial: 076D5DDB
Authority key identifier: E7:46:89:20:FD:98:DE:9C:11:15:48:B5:E8:BB:F8:10:8C:F6:79:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50aJIP2Y3pwRFUi16Lv4EIz2eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/1f400d-38ff-4913-ab82-5105e4df81a6/1/5NeDshgk1d1LxLqAgTk1OZwCbjs.roa
Signing time: Sat 01 Jan 2022 02:59:59 +0000
ROA not before: Sat 01 Jan 2022 02:59:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198610
IP address blocks: 45.147.179.0/24 maxlen: 24
45.147.176.0/24 maxlen: 24
45.147.177.0/24 maxlen: 24
45.147.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124607963 (0x76d5ddb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7468920fd98de9c111548b5e8bbf8108cf679bd
Validity
Not Before: Jan 1 02:59:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e4d783b21824d5dd4bc4ba80813935399c026e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:bf:f3:a4:14:2a:8f:ca:0f:d0:4d:3f:6f:
85:23:6f:7e:19:21:51:4f:8e:83:db:9e:f7:c3:29:
6d:f5:c6:b9:88:25:49:39:84:f7:d9:ee:0f:b2:84:
c8:74:03:29:d2:2e:20:bb:05:89:ae:be:15:05:57:
b3:99:d3:08:9b:c3:ab:1d:91:8b:a1:d4:ed:d7:99:
86:41:de:86:c9:03:8f:0d:e3:e3:4d:74:a5:2b:65:
f5:15:80:95:e5:99:6f:d4:bf:85:98:62:72:be:c2:
b5:64:87:51:4b:e4:57:48:34:5d:bb:1c:de:b8:dd:
66:d5:fb:5d:d6:f6:ef:96:a9:1c:63:71:75:64:b6:
48:e3:31:f3:5c:f3:f2:66:5a:93:12:d4:d9:fb:80:
f8:82:2f:28:d3:e8:7f:7a:e5:3e:64:17:25:df:9e:
27:f5:8e:f2:82:50:2a:ba:04:36:ce:4d:d8:59:b5:
68:39:e0:f2:1a:80:a6:1f:12:04:71:2a:59:ed:f3:
4a:4b:66:03:77:0d:d0:4f:52:94:51:a9:29:49:98:
70:9b:bb:e2:e7:7a:7e:2b:b5:27:ec:09:e8:9c:c9:
c3:9c:f6:dd:00:22:26:c4:c5:be:0b:4c:13:b3:a8:
3c:b2:f0:50:27:a4:04:bf:5f:c1:42:18:6b:2d:2f:
dd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D7:83:B2:18:24:D5:DD:4B:C4:BA:80:81:39:35:39:9C:02:6E:3B
X509v3 Authority Key Identifier:
keyid:E7:46:89:20:FD:98:DE:9C:11:15:48:B5:E8:BB:F8:10:8C:F6:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50aJIP2Y3pwRFUi16Lv4EIz2eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/1f400d-38ff-4913-ab82-5105e4df81a6/1/5NeDshgk1d1LxLqAgTk1OZwCbjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/1f400d-38ff-4913-ab82-5105e4df81a6/1/50aJIP2Y3pwRFUi16Lv4EIz2eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.176.0/22
Signature Algorithm: sha256WithRSAEncryption
64:10:a6:a4:b9:1a:38:41:11:a7:a6:6e:cc:ac:67:41:c5:5d:
af:ff:6b:f7:b5:11:bc:96:f3:ee:5b:fd:c3:4b:b5:60:e5:8d:
34:25:43:2e:e7:5e:13:90:4d:30:82:c0:36:ea:a4:af:5a:6e:
ec:04:e9:45:37:bd:05:a8:05:81:96:f5:69:10:a4:0b:e0:d8:
b0:bc:cb:bb:e4:bb:45:07:30:9e:8c:e0:50:0e:e1:6f:f4:0a:
a8:51:66:71:f4:dc:c7:02:10:c2:79:94:87:6f:5f:52:a6:d2:
1d:b9:e2:4d:0d:ff:fb:65:cd:5c:b9:ac:7b:21:68:7f:bf:e0:
f4:3a:0d:73:49:0b:2b:54:a6:f0:bc:c6:3a:12:7b:64:af:8d:
8c:13:5d:f9:c9:ef:56:64:24:d5:4b:9c:42:1f:eb:ed:e4:f8:
9a:9b:6f:90:1c:b9:e0:dd:8f:c7:9f:40:01:ec:73:1f:03:d5:
27:de:e3:c5:21:61:03:1a:b4:c9:54:b6:9a:b6:3c:26:22:eb:
66:0c:12:56:cb:2c:60:2b:f6:10:24:b4:98:c5:91:f9:dc:d1:
db:f5:bc:0f:29:cc:54:5e:f5:7f:dd:ea:8b:34:8c:68:ba:a2:
51:03:9b:a1:db:02:56:dc:23:78:ab:e4:5b:48:a1:0b:70:32:
a3:30:27:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:38 2023 by rpki-client on console-ams.rpki-client.org