Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/M-TTV-lYHIyDH2c5XBU-AU4DIYU.roa
File: M-TTV-lYHIyDH2c5XBU-AU4DIYU.roa (raw, json)
Hash identifier: pMazpU1345/XcnmpfVs5TPQZVqkMRuRTN253feujFxU=
Subject key identifier: 33:E4:D3:57:E9:58:1C:8C:83:1F:67:39:5C:15:3E:01:4E:03:21:85
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184E63601DCDD0C1752FBFE9B0FBA234BCA
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/M-TTV-lYHIyDH2c5XBU-AU4DIYU.roa
Signing time: Tue 06 Dec 2022 06:53:29 +0000
ROA not before: Tue 06 Dec 2022 06:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.146.83.0/24 maxlen: 24
45.154.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:36:01:dc:dd:0c:17:52:fb:fe:9b:0f:ba:23:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 6 06:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e4d357e9581c8c831f67395c153e014e032185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:3e:cf:0c:61:5a:72:a5:fb:b3:f0:93:1f:
2c:21:2e:ad:a4:19:66:af:c3:8d:4c:c2:44:ce:2f:
01:aa:67:83:06:f2:ec:0f:7f:b3:02:dd:e0:06:d3:
b8:51:d9:60:4e:8c:0b:64:41:7b:ac:d6:83:ae:2b:
4b:46:b4:1f:c6:9e:61:35:6b:79:d4:49:7b:b9:75:
8d:ff:b9:e5:2d:a3:76:04:da:5e:ae:69:c1:bc:32:
2f:d3:2c:b3:32:89:95:cc:1d:26:1b:94:34:d3:0f:
5a:83:1a:1c:24:15:dc:21:03:69:66:90:23:0f:3f:
31:9c:59:fa:07:e5:e2:32:c3:43:80:27:80:33:cf:
ee:5d:ec:5d:3b:c6:7a:8c:b6:1d:19:88:e5:f1:bc:
7e:d4:72:cb:b6:3f:cb:47:82:e0:8b:0d:ef:c2:e6:
06:74:60:ad:e4:d0:e4:5e:94:50:4f:bc:00:24:41:
ee:28:a3:d4:60:8f:79:bd:b8:0a:8b:58:76:6e:15:
ce:cd:e1:00:c8:29:23:30:85:3d:4d:cf:7f:ee:f4:
da:27:5c:eb:85:85:82:7b:d8:1e:8c:4f:ad:f0:37:
9d:ad:c6:46:1b:4e:3e:3d:3a:cf:62:ba:38:f7:40:
d3:40:74:a0:29:81:6b:99:bb:95:a2:6d:76:50:27:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:D3:57:E9:58:1C:8C:83:1F:67:39:5C:15:3E:01:4E:03:21:85
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/M-TTV-lYHIyDH2c5XBU-AU4DIYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.83.0/24
45.154.106.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a7:09:80:42:ce:35:7a:06:39:fc:03:40:f6:fc:c9:9d:7e:
1b:80:c4:a5:40:08:77:00:a4:c8:e9:5f:99:8c:d7:9f:20:ef:
47:af:a5:4a:91:94:19:75:cf:ea:46:84:3d:cb:cb:14:f2:74:
f2:a4:89:ee:bd:2d:82:ff:ea:26:b9:a5:b6:94:43:97:aa:b5:
3c:ad:a8:2f:2f:17:24:45:88:11:15:43:44:7d:60:88:66:fa:
e2:d2:7e:22:42:2b:8b:0a:07:dd:f4:3f:10:76:3b:8c:7b:cc:
4b:ad:ed:c1:c5:a9:bf:b9:bb:7f:8d:32:35:16:60:42:6a:d6:
45:bf:87:54:3f:61:8b:e3:6e:25:1a:a2:64:25:a7:f3:31:af:
7d:f9:8c:7d:bb:39:97:9c:a6:13:b9:39:ef:05:f9:63:f6:5b:
48:ad:45:c2:f3:3e:bf:8c:d7:ee:4d:0b:50:8d:40:55:03:e8:
53:ba:ef:62:3e:c7:82:f3:dd:ad:e8:44:fa:9b:27:49:a7:31:
dc:2c:94:42:db:2a:88:a4:2b:de:2e:66:62:a6:92:fa:4c:2e:
7b:27:66:02:b0:e6:60:59:fe:bd:c7:f0:be:42:dd:66:70:c3:
63:8a:c1:77:44:2a:92:b3:45:0e:e2:63:e1:11:43:d9:f2:19:
47:2f:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org