Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/kjCEKFyd_g50SDpARRxr8xOVV5M.roa
File: kjCEKFyd_g50SDpARRxr8xOVV5M.roa (raw, json)
Hash identifier: E23RLN8UlUTdSog0jdE+6V7PhDsQJPz+2ynK0MdeNRM=
Subject key identifier: 92:30:84:28:5C:9D:FE:0E:74:48:3A:40:45:1C:6B:F3:13:95:57:93
Certificate issuer: /CN=a1a01f76a42be8717befdce1676215988a4dfc73
Certificate serial: 0189D0E33526865172E3C9D336CEF814D60C
Authority key identifier: A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/kjCEKFyd_g50SDpARRxr8xOVV5M.roa
Signing time: Mon 07 Aug 2023 16:44:58 +0000
ROA not before: Mon 07 Aug 2023 16:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136038
IP address blocks: 45.142.152.0/24 maxlen: 24
45.142.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:e3:35:26:86:51:72:e3:c9:d3:36:ce:f8:14:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a01f76a42be8717befdce1676215988a4dfc73
Validity
Not Before: Aug 7 16:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923084285c9dfe0e74483a40451c6bf313955793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e9:a3:25:7b:11:3c:ee:d6:e5:a5:8c:55:d4:
5a:e9:e2:63:48:48:5f:b0:ed:d9:fe:ae:8e:e7:a6:
1c:3a:27:67:db:cf:69:d4:72:67:6e:9e:61:58:77:
8e:69:83:49:e4:9e:9a:3d:58:ca:d3:01:c3:d9:3f:
ce:64:e6:5e:67:54:8b:6d:c1:9a:bb:18:3c:cb:32:
07:9d:35:2a:30:02:b3:4a:d6:ce:63:ae:40:20:74:
c6:09:79:c1:01:35:ce:96:cd:f3:ac:62:be:6f:72:
59:67:25:74:58:d3:0e:d5:15:b9:3a:6a:2a:90:df:
a4:48:30:a6:3c:9f:91:95:b1:47:d5:d4:ee:3c:2d:
06:f3:f6:12:10:0e:ee:88:90:7e:8f:75:b2:ff:c1:
97:7b:28:8a:42:d4:ec:15:2b:a1:21:42:05:e7:40:
da:e6:6b:0f:1f:48:f0:d1:ed:86:96:a5:f8:f6:90:
8e:cc:3f:41:2d:72:bd:f6:90:5d:34:d3:26:8d:30:
c9:1e:d4:b5:fb:1d:17:da:cd:46:a8:ca:b5:8e:4c:
cc:0c:48:f9:64:aa:ee:8c:0c:94:58:00:cf:2d:16:
ec:31:a2:60:b3:9f:a0:08:36:7d:bf:12:b3:e9:27:
d9:72:22:e7:b1:45:25:62:6c:dd:16:c6:83:62:ec:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:84:28:5C:9D:FE:0E:74:48:3A:40:45:1C:6B:F3:13:95:57:93
X509v3 Authority Key Identifier:
keyid:A1:A0:1F:76:A4:2B:E8:71:7B:EF:DC:E1:67:62:15:98:8A:4D:FC:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaAfdqQr6HF779zhZ2IVmIpN_HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/kjCEKFyd_g50SDpARRxr8xOVV5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/eda54a-772c-49db-a012-6100cd15e260/1/oaAfdqQr6HF779zhZ2IVmIpN_HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.152.0/24
45.142.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:48:83:48:4c:96:d7:79:58:56:a5:40:07:ce:fc:72:7c:b5:
a9:0a:cf:1b:b0:b2:23:92:78:92:64:4a:41:f9:f7:60:d9:5c:
cf:4f:eb:e1:62:0a:8c:a5:23:1f:c3:81:de:3c:2e:c6:92:9a:
6d:95:18:93:e5:06:a2:94:dc:47:61:e3:d8:09:08:d1:9d:1c:
29:ae:f8:da:94:b0:f2:a4:66:68:cf:41:85:00:72:94:aa:05:
8b:d3:f3:84:3f:3b:9e:78:1a:84:78:13:2e:d8:b8:ab:01:88:
92:37:4a:2e:5e:8b:76:16:db:c6:35:ec:db:28:a5:d0:c5:5a:
3e:04:8b:bb:e7:c8:40:d9:32:ea:e1:a5:22:bb:17:f2:08:53:
a7:95:0b:11:ea:67:c1:63:ad:29:ca:2c:13:67:67:02:02:08:
21:37:13:16:d5:5e:63:58:18:63:e4:92:20:cd:6b:b0:21:78:
ae:7a:23:7d:f8:62:ca:8f:b1:77:b8:a6:b7:f3:99:57:cd:eb:
48:d6:3b:1c:4e:c8:63:55:96:f9:76:08:34:ac:04:95:23:bd:
44:47:19:6d:9e:1f:32:29:1f:d0:cb:ab:a4:d6:eb:ec:02:73:
92:22:c5:3a:df:74:7e:e9:e9:13:c2:c2:8c:4e:98:48:c9:ec:
b2:e3:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 15:32:52 2023 by rpki-client on console-ams.rpki-client.org