Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BdTcD8c5xIvJJz6GyX-KJzdRGdg.roa
File: BdTcD8c5xIvJJz6GyX-KJzdRGdg.roa (raw, json)
Hash identifier: MrM687+jxF2p6VlakUEkgN/l2N9Vgrr/qsbJime7ocg=
Subject key identifier: 05:D4:DC:0F:C7:39:C4:8B:C9:27:3E:86:C9:7F:8A:27:37:51:19:D8
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183B60D355F04C7CEBE36F312C0F8A6A8FF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BdTcD8c5xIvJJz6GyX-KJzdRGdg.roa
Signing time: Sat 08 Oct 2022 05:24:22 +0000
ROA not before: Sat 08 Oct 2022 05:24:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138195
IP address blocks: 45.158.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:0d:35:5f:04:c7:ce:be:36:f3:12:c0:f8:a6:a8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 8 05:24:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05d4dc0fc739c48bc9273e86c97f8a27375119d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:27:29:6c:8a:af:5d:87:87:e1:1c:f8:cf:
ad:76:7f:b0:e0:cd:30:86:5b:2d:a0:22:3c:fb:17:
0d:5e:2b:64:ed:87:56:ae:8d:47:aa:4e:51:25:a8:
a0:11:ad:eb:63:56:b9:18:b7:d2:81:5b:98:18:96:
4e:f4:e2:ef:97:a6:2e:12:2f:df:2c:48:9e:9d:73:
32:dc:87:53:fb:da:75:b3:0f:6f:69:71:89:08:ed:
55:c2:c0:e8:91:7f:c8:4f:08:c3:03:c8:b5:14:bf:
77:ab:b4:df:f7:ff:3e:9e:65:e5:70:0f:be:9a:d6:
ee:95:07:ae:e5:23:7d:33:b9:ef:b9:54:6f:05:7a:
11:4f:7f:68:9e:f1:78:b9:05:44:70:78:d1:31:8a:
65:fd:cc:ee:de:4f:e8:60:05:80:10:7d:6c:c9:c5:
4e:af:3b:93:f8:29:82:0b:f1:bf:11:03:c2:2a:b3:
a4:a3:26:de:84:e5:47:b1:6f:7a:07:51:3d:59:15:
02:8b:f0:37:df:21:54:21:89:33:b5:a3:ef:5c:15:
af:72:f6:96:d2:8a:94:27:bb:51:76:69:37:34:06:
7b:f1:70:e1:da:91:d8:ee:90:36:d2:34:27:2a:cf:
ab:9e:28:b1:9d:c4:f2:a3:bb:25:3e:6b:31:51:0d:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:DC:0F:C7:39:C4:8B:C9:27:3E:86:C9:7F:8A:27:37:51:19:D8
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/BdTcD8c5xIvJJz6GyX-KJzdRGdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.168.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:39:e4:bf:0c:dd:26:61:b0:f2:c6:7d:54:e9:3e:9b:59:b4:
b7:0b:c0:de:d2:a1:b0:4b:0a:5d:79:71:66:02:d2:6a:29:c0:
15:c1:ed:04:63:aa:99:62:3f:06:9f:be:33:40:ea:36:0e:47:
c8:9b:7c:e4:fc:61:ad:b0:ed:a8:4b:2f:de:25:87:b7:3c:13:
29:eb:0f:0e:fb:9a:90:1c:9f:e2:2f:bb:29:40:fe:a6:36:b5:
38:d0:87:4e:74:55:19:a0:71:20:c1:c7:da:6e:78:21:56:2e:
7a:f3:a4:39:31:3a:37:8f:88:41:ea:eb:1f:85:c5:7b:02:f9:
fe:32:bc:1c:4a:b6:a6:e9:09:9e:34:1d:c2:ee:4a:e4:bd:58:
5a:21:dc:9e:fe:e2:9d:5c:94:bc:0f:a0:08:a8:9e:21:35:dc:
a8:96:c4:03:4e:97:69:5b:08:41:ae:e3:05:5e:c9:72:c2:62:
1c:52:e6:c7:9e:79:5f:3b:39:ca:4f:6d:4b:0c:07:12:f5:74:
96:65:42:d8:fc:eb:87:e0:63:d1:49:9a:a5:2d:49:66:a2:fe:
4f:eb:f2:11:03:46:6b:c7:b2:41:88:19:27:2a:b5:a2:63:a1:
2a:d6:cc:c6:ec:2d:41:c4:6e:60:d1:c9:62:c7:5f:40:ee:17:
f9:74:c5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org