Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/APCq6Q0VwFm0ftjmC-0MKvRY7z0.roa
File: APCq6Q0VwFm0ftjmC-0MKvRY7z0.roa (raw, json)
Hash identifier: NMWjK6+JDGfCdQIrRhwVJXW+BR0uyg70agbg8/bUKJ8=
Subject key identifier: 00:F0:AA:E9:0D:15:C0:59:B4:7E:D8:E6:0B:ED:0C:2A:F4:58:EF:3D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849EB5AAC4FCB5F296A2888E11D695BEF2
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/APCq6Q0VwFm0ftjmC-0MKvRY7z0.roa
Signing time: Tue 22 Nov 2022 09:40:16 +0000
ROA not before: Tue 22 Nov 2022 09:40:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.152.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:b5:aa:c4:fc:b5:f2:96:a2:88:8e:11:d6:95:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 09:40:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00f0aae90d15c059b47ed8e60bed0c2af458ef3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:95:0b:e1:ef:95:64:bf:04:53:00:b6:1e:
d2:d0:7c:ec:47:b3:8c:8b:22:56:86:23:55:8c:90:
16:4b:a2:6a:0b:3c:7a:f8:60:be:62:55:41:38:60:
42:38:5a:b1:28:87:d1:60:79:c8:a0:ab:23:09:b7:
ba:77:f7:9a:e3:6c:84:53:d4:55:9c:46:36:30:33:
e1:64:f4:94:c1:6d:5d:49:6e:7c:73:9a:1c:4a:5f:
90:59:c6:1b:d8:10:36:87:f2:8a:91:de:10:d6:25:
7a:79:de:61:34:21:b7:59:3f:e9:f1:ab:f2:36:3f:
2a:64:24:f9:ce:a4:27:e9:c4:e5:c9:7d:a8:24:6d:
21:f3:ee:91:67:8a:30:9c:aa:1b:e7:5f:a5:cb:d5:
1a:f0:dd:df:32:f9:36:d5:3d:43:f5:fd:94:65:cd:
82:59:15:8c:5a:21:e2:2c:02:a2:a4:a5:1c:25:4c:
7c:e3:15:6f:4b:af:9b:10:34:d2:f0:1e:10:84:a4:
66:89:3e:ab:81:71:54:bb:e5:50:2a:67:4c:c6:c3:
ac:41:05:70:02:bd:b8:78:2f:ba:d2:9c:47:70:d6:
49:e4:be:86:fb:72:50:eb:ac:2b:91:1d:59:7d:27:
30:95:a4:78:da:80:4f:e2:32:60:91:60:74:9f:dd:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F0:AA:E9:0D:15:C0:59:B4:7E:D8:E6:0B:ED:0C:2A:F4:58:EF:3D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/APCq6Q0VwFm0ftjmC-0MKvRY7z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/23
Signature Algorithm: sha256WithRSAEncryption
59:e8:4d:7f:a9:cc:81:fa:8e:05:73:8f:5a:3c:f2:58:b6:2f:
2f:66:93:a2:05:55:99:5b:c5:8b:61:3f:66:08:6d:9e:9c:2a:
8e:39:9d:9c:0d:80:d4:d7:f8:47:ff:fc:48:36:de:2f:4f:cf:
bd:c1:3d:c1:16:3a:d4:50:21:4e:cd:b5:1d:11:ef:0f:2f:ad:
3c:aa:cb:2e:5e:5f:6c:b4:f4:cb:f6:f8:08:b2:29:26:4c:12:
3d:cb:0f:0f:1c:de:7e:f9:e7:60:54:63:3c:b7:53:60:1f:37:
ba:b7:9e:a5:b1:91:c4:4f:8a:bc:f0:7a:b2:91:45:79:25:c5:
84:c2:d8:44:1f:0b:d9:b3:bf:62:65:b3:28:a8:3b:11:dd:aa:
89:d4:8f:0e:8b:64:da:05:b0:5f:ff:39:b2:22:1d:aa:16:2a:
43:91:86:36:b3:ec:51:c6:52:40:4d:a6:e4:9c:15:9b:18:2a:
a1:95:ab:d5:69:33:24:b9:73:7a:c0:95:cd:9d:9b:e5:09:31:
3d:8a:b4:e8:c6:df:11:09:96:fc:b2:58:25:a4:af:ad:0e:3c:
11:5b:63:16:dd:2c:21:9a:b2:da:56:b9:56:17:0a:e3:fd:ae:
10:02:15:6a:02:0e:32:a7:0a:c8:68:95:de:d0:1e:0f:83:74:
31:28:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org