Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/mRm2HFjnDvurCsscbZ5CWbhFK6I.roa
File: mRm2HFjnDvurCsscbZ5CWbhFK6I.roa (raw, json)
Hash identifier: l4lQVVn7byZYA6luyl8vRni7w00pvvx1VX6alvNTk+4=
Subject key identifier: 99:19:B6:1C:58:E7:0E:FB:AB:0A:CB:1C:6D:9E:42:59:B8:45:2B:A2
Certificate issuer: /CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Certificate serial: 01833C788AD09FB61AA41702C4A380DA724E
Authority key identifier: B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/mRm2HFjnDvurCsscbZ5CWbhFK6I.roa
Signing time: Wed 14 Sep 2022 14:47:56 +0000
ROA not before: Wed 14 Sep 2022 14:47:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.84.89.0/24 maxlen: 24
45.84.88.0/24 maxlen: 24
45.84.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:78:8a:d0:9f:b6:1a:a4:17:02:c4:a3:80:da:72:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2569bbd0a9ea5b705fabb90203aee3158d80553
Validity
Not Before: Sep 14 14:47:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9919b61c58e70efbab0acb1c6d9e4259b8452ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:56:ab:fe:e9:cd:36:a3:53:eb:89:b2:67:
a5:27:b0:b1:c6:25:3d:88:37:70:6b:e2:5c:20:80:
94:b2:38:94:44:28:2b:6f:4c:35:9b:13:b1:07:eb:
a4:96:b9:22:60:a7:82:4f:ad:79:a9:a9:63:d8:c8:
91:b1:ec:24:f7:3d:ea:b4:e6:dd:ed:09:11:ac:14:
95:5f:f8:4f:b3:85:ef:86:d5:e5:67:1b:76:be:6c:
58:8a:81:a9:fb:b0:a3:73:3e:3c:e4:52:d8:44:05:
7a:ad:30:e0:e4:03:f7:17:1e:15:a8:27:e0:be:18:
b5:1c:75:8b:81:4a:0a:c1:dd:f1:8c:9c:f0:08:09:
eb:12:92:19:1a:17:8c:b8:08:d9:07:77:52:8b:b7:
be:5d:c9:4e:e3:40:a6:10:9e:07:3f:fe:d0:06:af:
30:e5:e4:09:9a:2c:46:6f:ce:d4:2b:ba:77:3a:5f:
56:86:61:20:6f:62:bd:7c:d5:af:d5:79:91:7b:ee:
6e:a2:bd:cf:85:fc:c2:74:6a:78:79:57:0b:6f:b2:
5b:6e:37:5c:ec:17:82:8b:99:a8:e7:94:da:38:15:
be:07:3a:33:62:61:4f:62:a8:78:22:06:4f:d7:da:
ed:78:c7:ee:07:54:e7:a2:b3:59:ac:79:fd:d0:22:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:19:B6:1C:58:E7:0E:FB:AB:0A:CB:1C:6D:9E:42:59:B8:45:2B:A2
X509v3 Authority Key Identifier:
keyid:B2:56:9B:BD:0A:9E:A5:B7:05:FA:BB:90:20:3A:EE:31:58:D8:05:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slabvQqepbcF-ruQIDruMVjYBVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/mRm2HFjnDvurCsscbZ5CWbhFK6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a48a91-ca30-44fd-a200-ba7750537ac0/1/slabvQqepbcF-ruQIDruMVjYBVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.88.0/23
45.84.91.0/24
Signature Algorithm: sha256WithRSAEncryption
63:57:29:d4:89:47:e1:01:2c:a7:5d:4b:3c:31:f3:92:59:f9:
a6:dc:75:6f:c8:ff:72:ab:6c:47:90:38:0c:05:1a:d9:be:3e:
9f:4a:19:e1:dc:8b:85:24:8e:49:1e:f4:07:0e:bb:79:db:61:
b9:0a:82:c8:3a:ea:84:de:2a:05:78:93:df:b7:37:b7:3e:98:
cc:1f:0b:4c:0d:a1:60:3a:ab:e1:a8:66:91:a2:e5:0e:a5:f0:
29:03:27:ac:49:c5:e2:fd:90:90:2f:97:8f:ac:0a:58:92:6d:
f2:e5:37:6a:ee:8d:b0:dd:94:d4:52:ef:f1:3b:33:42:4d:9c:
8c:b2:ad:36:f9:05:ae:39:5b:3e:ab:7b:85:95:c1:72:86:bb:
b0:a4:94:46:90:c8:dd:73:b9:a3:e6:fb:1e:20:1d:6a:80:e9:
d0:32:4f:0b:8a:e0:d5:fa:e4:ee:67:f3:de:1d:0b:e2:b8:e6:
88:9a:8c:15:18:3e:49:15:d6:34:d1:c4:ad:14:a7:88:1a:f3:
e4:9a:cf:96:0e:a2:11:d1:71:61:ac:16:10:11:09:d3:c5:f3:
de:78:fd:98:c8:1d:4f:53:41:6e:5e:43:51:2c:7b:04:17:f9:
57:63:fd:26:09:45:59:5d:68:34:bd:4a:53:29:6b:49:d5:1a:
85:87:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:36 2023 by rpki-client on console-ams.rpki-client.org