Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/mupUsqIP871N0bwwajEbX3jTgVc.roa
File: mupUsqIP871N0bwwajEbX3jTgVc.roa (raw, json)
Hash identifier: sp5k6H2BLcuBB3o4+5iETtW3bpY5yM2qZ5K6ft0N730=
Subject key identifier: 9A:EA:54:B2:A2:0F:F3:BD:4D:D1:BC:30:6A:31:1B:5F:78:D3:81:57
Certificate issuer: /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial: 018224F43FCB772804AE4DC0A8F08B8E79CC
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/mupUsqIP871N0bwwajEbX3jTgVc.roa
Signing time: Fri 22 Jul 2022 08:09:23 +0000
ROA not before: Fri 22 Jul 2022 08:09:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 45.9.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:24:f4:3f:cb:77:28:04:ae:4d:c0:a8:f0:8b:8e:79:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
Validity
Not Before: Jul 22 08:09:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9aea54b2a20ff3bd4dd1bc306a311b5f78d38157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:15:cc:ff:79:d3:5e:d3:74:6b:56:d8:fd:39:
a4:d5:82:ca:5c:ad:c4:e7:98:fb:e6:45:af:e8:49:
90:f5:41:cf:c3:40:a9:2c:a6:70:7c:6b:2d:c6:f6:
a1:8c:5e:45:de:6b:44:f8:c4:da:f3:f6:2f:27:d4:
a8:fd:ab:5a:a5:d4:48:eb:97:8c:9f:82:99:5d:86:
17:d2:ca:0f:b1:af:21:47:a7:45:9e:55:91:63:4f:
74:2f:00:07:a2:13:a2:b0:69:29:73:9e:82:1c:28:
fb:56:45:ff:8c:65:e3:b3:9e:9b:ff:2a:b3:d9:22:
ad:14:ce:6a:e4:8f:8b:d9:cb:7d:86:90:a0:0a:e9:
a1:d9:6e:55:62:8f:fd:73:73:59:6a:54:02:d6:09:
1e:e4:07:e3:c0:a7:ad:8d:88:a7:86:7f:b4:70:e8:
9c:3a:74:c1:6f:ef:d2:e8:e6:40:a6:6e:4e:c2:f7:
7e:23:f5:5a:52:e9:1f:40:d2:e7:45:3b:76:de:0f:
91:8d:e9:ae:3d:28:90:87:1a:aa:9a:02:7f:9d:c3:
a6:d8:8d:2b:c2:f6:45:c7:af:96:c0:22:6c:1e:29:
2d:88:e6:44:66:99:56:ce:ca:b3:75:8d:35:e9:ca:
6a:9e:eb:ae:2b:2b:e0:83:8a:d3:f8:08:8c:8f:fc:
be:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:EA:54:B2:A2:0F:F3:BD:4D:D1:BC:30:6A:31:1B:5F:78:D3:81:57
X509v3 Authority Key Identifier:
keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/mupUsqIP871N0bwwajEbX3jTgVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.156.0/22
Signature Algorithm: sha256WithRSAEncryption
27:38:e5:5d:ca:2d:3e:0d:04:83:df:9a:56:18:af:3b:5c:80:
72:02:17:a7:c9:dd:6a:b2:b8:83:9e:57:dc:65:39:6f:da:ad:
82:ff:7c:b5:29:37:66:5b:c1:a1:95:4e:73:80:00:bf:96:0b:
f0:5a:ec:2f:db:3c:f5:de:0d:52:75:2a:7c:74:a5:ca:37:eb:
41:e6:4f:02:a6:18:00:5b:5b:60:e3:ba:1d:b2:86:e1:a7:c0:
12:2b:70:0b:ab:5d:41:18:e2:4c:88:54:3f:32:f0:fc:65:3e:
92:04:22:6c:86:10:fd:d3:62:12:d1:bf:9f:9f:79:4e:06:45:
7a:18:87:7e:7b:6f:6e:53:2c:f1:39:44:7c:cb:38:a2:52:74:
4e:e1:b6:d3:42:f9:27:a6:ff:03:1d:e3:52:81:99:5d:91:80:
72:8b:5c:db:a8:1c:be:28:8e:2b:67:8e:e3:d6:fa:5d:43:a3:
05:6f:b6:e3:b2:73:c8:d5:9e:a9:92:03:30:d2:4f:aa:ab:b8:
71:4d:3d:16:45:0e:8c:5b:70:5c:d4:26:83:da:03:f3:a7:e0:
5b:4c:1f:0c:6c:2d:df:5c:a6:00:84:a2:80:12:e7:39:a9:b4:
1b:fc:f0:6b:ba:69:e2:78:49:ee:e4:66:98:d3:84:a1:11:87:
6c:44:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org