Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/mcdiwuL3bPKTdZHJVueq5iBvjMI.roa
File: mcdiwuL3bPKTdZHJVueq5iBvjMI.roa (raw, json)
Hash identifier: 4YJdWPmwcn2sjzjb51ogmgi1EJvJ7cdlU1kntW7EkJE=
Subject key identifier: 99:C7:62:C2:E2:F7:6C:F2:93:75:91:C9:56:E7:AA:E6:20:6F:8C:C2
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0191D34B731D31826E3337FDE5C3E41CB82C
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/mcdiwuL3bPKTdZHJVueq5iBvjMI.roa
Signing time: Sun 08 Sep 2024 20:20:22 +0000
ROA not before: Sun 08 Sep 2024 20:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60117
IP address blocks: 45.151.97.0/24 maxlen: 24
45.151.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d3:4b:73:1d:31:82:6e:33:37:fd:e5:c3:e4:1c:b8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Sep 8 20:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99c762c2e2f76cf2937591c956e7aae6206f8cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:42:b0:84:e5:8d:4c:f6:ed:f8:a9:65:d0:
d3:e6:98:82:37:ab:bc:52:54:b8:5f:2b:b8:b3:8a:
91:a1:0e:54:22:13:83:7b:e0:d8:77:92:e6:f9:96:
c7:7d:60:19:00:18:95:92:49:7c:6d:8e:e5:a2:d6:
a0:bb:e2:d2:ec:be:c7:c3:8c:c2:f2:8b:2c:b1:b9:
9a:71:3f:a1:90:04:2d:2a:c3:7e:41:81:a4:13:48:
22:96:f2:89:f8:56:75:72:2c:d4:6a:f9:19:2e:60:
d1:ed:76:df:5f:ca:a1:cf:3b:45:68:23:95:ad:d5:
43:70:f9:30:5f:c9:05:29:fd:40:3f:44:9b:dd:38:
5e:3a:46:30:eb:07:ba:3e:87:67:73:c9:a9:05:4a:
4b:82:61:e8:9b:ad:a6:d7:b4:dd:dc:5a:be:ad:40:
d8:f9:57:32:c7:ba:c5:ca:de:6e:89:be:99:48:ab:
12:0a:57:01:74:04:c3:e0:94:fe:30:39:9a:8d:96:
57:a9:20:1f:e0:91:4f:63:a2:e5:a2:29:68:ae:5a:
78:6d:51:ab:8e:a6:25:32:01:a8:f6:28:84:76:60:
d6:00:de:13:51:1d:42:8c:cf:be:d3:a0:c5:f7:dd:
53:b2:bd:e4:e4:40:45:56:52:09:2c:c8:64:76:46:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:62:C2:E2:F7:6C:F2:93:75:91:C9:56:E7:AA:E6:20:6F:8C:C2
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/mcdiwuL3bPKTdZHJVueq5iBvjMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
Signature Algorithm: sha256WithRSAEncryption
6e:b4:af:9b:84:0f:91:d7:b0:26:d8:81:59:3d:43:e6:64:e9:
b0:1c:89:06:c7:33:f2:94:f6:85:77:7f:fb:fa:62:8f:4d:06:
37:44:60:6f:6f:c4:64:48:66:58:2a:35:45:09:29:70:40:16:
d8:22:7c:d3:b8:d3:dc:29:71:6d:cc:27:ce:79:39:bf:bc:c9:
8d:19:80:c7:87:c9:97:05:ee:6d:f1:15:25:ea:e8:fc:90:72:
09:48:a2:dd:22:89:7d:e2:bd:52:8f:64:15:e4:8f:2a:4b:7d:
7a:28:23:e6:f4:05:8d:58:59:a6:35:5b:a5:60:c2:3e:b9:a8:
28:e5:4d:3b:d6:9c:12:4e:08:a3:4e:b9:29:f0:4f:03:15:0f:
2f:d8:3b:00:a1:26:f3:cf:55:93:ad:90:34:d9:20:fd:eb:e4:
55:70:71:7e:31:03:70:e0:a1:62:c7:f8:fa:25:43:03:3f:73:
c0:3c:2d:92:0d:b2:e3:41:e2:a3:90:0a:0e:e4:5e:51:cc:56:
ec:08:9d:e1:c0:fc:6d:38:75:94:d6:4f:35:48:14:f9:b0:96:
3e:e2:c3:d7:21:0f:b5:e2:d3:5d:5a:b1:aa:77:cd:28:d0:d9:
ef:30:ff:d7:14:c7:ec:f4:7f:94:77:c0:bd:32:8e:f5:e9:56:
8d:ab:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:43 2025 by rpki-client