Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6Mq6fJGZVQDLQIH62LCBnb_1SsA.roa
File: 6Mq6fJGZVQDLQIH62LCBnb_1SsA.roa (raw, json)
Hash identifier: +KnQT5718ZRoj2DX4dbwcD8PFYxYbVBg9gp1L6Vqy8s=
Subject key identifier: E8:CA:BA:7C:91:99:55:00:CB:40:81:FA:D8:B0:81:9D:BF:F5:4A:C0
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184103419918790B5196B7BF1B772108AD9
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6Mq6fJGZVQDLQIH62LCBnb_1SsA.roa
Signing time: Tue 25 Oct 2022 17:32:40 +0000
ROA not before: Tue 25 Oct 2022 17:32:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 152.89.250.0/24 maxlen: 24
45.154.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:10:34:19:91:87:90:b5:19:6b:7b:f1:b7:72:10:8a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 25 17:32:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8caba7c91995500cb4081fad8b0819dbff54ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:5a:80:ed:a8:50:d2:98:c5:1e:91:1e:e0:
a4:45:73:8d:b8:8e:eb:22:31:b0:d7:0f:60:40:d0:
4f:da:9b:60:5b:fe:b0:8b:92:3d:1e:02:5b:2a:68:
ed:63:10:b8:cb:e1:6b:fc:01:6b:48:9a:b2:d0:9a:
b9:d5:ee:eb:83:88:3e:43:d1:6b:a7:50:ba:b5:40:
da:e8:c9:49:fc:88:56:d5:ce:37:48:67:47:80:f9:
6a:12:5a:d5:57:35:4b:69:b0:01:dc:44:6a:59:45:
7d:68:1b:eb:5c:f6:81:a9:ea:0d:f9:2b:43:cb:4e:
0e:9b:b8:72:44:d5:9f:36:65:18:b9:76:64:0d:85:
ed:c4:f8:13:98:89:fd:0a:84:5f:6a:b5:d5:e3:44:
d1:e7:3e:8b:25:8e:83:5a:40:cc:d1:ba:89:3c:6a:
c5:f9:25:45:86:f2:e2:d3:1d:78:b1:09:32:97:51:
57:bc:e6:84:28:2e:3b:e3:fb:38:20:3a:b9:20:32:
79:b5:36:6c:00:38:b1:3f:aa:51:a2:cf:1f:84:7a:
df:0d:50:c3:ba:f5:9e:cd:03:f5:8e:2e:fc:4c:aa:
91:09:45:6f:b8:b8:fd:a6:1f:7b:96:57:05:15:92:
ba:56:40:e5:b4:65:04:1c:39:fd:88:7a:a5:ba:4c:
8d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CA:BA:7C:91:99:55:00:CB:40:81:FA:D8:B0:81:9D:BF:F5:4A:C0
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6Mq6fJGZVQDLQIH62LCBnb_1SsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.104.0/23
152.89.250.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:64:74:fd:9e:01:83:90:f8:d6:2d:95:8c:31:04:a0:07:35:
2f:a4:81:84:ee:96:76:a6:95:70:41:48:6c:e0:5d:6e:cc:08:
dd:a9:62:0b:cb:55:7e:de:c0:02:ae:3a:10:62:16:eb:16:24:
64:ee:05:d3:7b:e6:96:c4:03:98:37:b6:e5:e4:2d:2e:bb:30:
b7:b8:70:1c:3b:9a:0a:f5:5b:d9:45:6d:fb:23:e0:35:80:30:
5e:ad:f3:5c:41:a9:05:e3:06:c4:9b:63:42:80:e6:eb:b4:02:
63:5c:24:de:d8:36:2d:54:99:dc:ef:79:39:e2:5a:c0:06:bb:
38:6a:74:11:6b:f5:b3:f2:34:d0:57:1c:fc:f4:f0:7f:aa:89:
e4:26:5a:14:cf:56:f4:b0:ce:88:36:fd:26:0b:ee:90:da:bf:
3c:49:14:e8:e6:10:1f:36:c5:1d:8f:d8:51:0c:40:1e:a8:bf:
8e:53:3c:3a:ef:c0:ff:a2:2a:a0:c9:db:f1:54:3b:84:48:6f:
18:e7:c7:4f:a8:97:45:b9:ad:3b:20:fd:94:d7:ad:0a:f2:e1:
42:d9:c7:ba:f8:b3:51:70:96:76:74:17:e6:67:a8:55:c0:32:
8d:65:67:a2:51:f0:11:c5:2f:a5:49:33:b4:36:95:d1:fd:1d:
96:66:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org