Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ihcnroAlskUuaMuFSYMPykzKvps.roa
File: ihcnroAlskUuaMuFSYMPykzKvps.roa (raw, json)
Hash identifier: jffDF50KLmsSI/vWqr6Im4VJiqXUgMVg/xBuwzcEu9o=
Subject key identifier: 8A:17:27:AE:80:25:B2:45:2E:68:CB:85:49:83:0F:CA:4C:CA:BE:9B
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 056D5865
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ihcnroAlskUuaMuFSYMPykzKvps.roa
Signing time: Thu 16 Jun 2022 19:42:44 +0000
ROA not before: Thu 16 Jun 2022 19:42:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 45.148.142.0/23 maxlen: 23
45.148.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91052133 (0x56d5865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jun 16 19:42:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a1727ae8025b2452e68cb8549830fca4ccabe9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:d5:df:34:fe:6b:3c:7d:d5:18:7d:bf:a7:
3c:5a:b3:d1:90:2a:2f:5b:95:e8:fc:1c:18:a8:63:
45:72:13:0e:f7:2a:25:ce:6a:a6:0c:f1:76:53:17:
c1:6b:af:86:8a:57:20:99:47:3c:b3:c7:0c:ba:bd:
3e:d1:36:20:25:23:c7:df:36:3f:cd:c4:f0:29:a2:
74:59:ee:cf:ee:f6:35:6a:d2:ed:3f:a3:2e:b4:95:
10:99:1b:92:dc:10:49:23:dc:8b:3f:83:e7:d0:c2:
54:62:49:8e:1b:5b:d4:bf:5c:e5:0f:0e:9a:4b:55:
6c:35:20:3f:fc:8a:98:10:d7:60:9b:96:58:ec:dd:
f1:fb:1d:19:e8:76:7b:9b:eb:a8:22:b1:52:ae:52:
eb:a5:f6:a1:d7:62:a2:c2:f5:2e:5d:e3:81:50:40:
d5:47:f1:9b:94:9f:3d:5b:29:e1:4e:f5:a1:98:80:
8e:03:c6:9e:a4:81:fd:15:10:0d:63:ae:94:5b:9e:
3c:99:d0:ee:40:7f:0a:f4:ee:ac:37:8e:37:c2:51:
b3:28:17:70:df:1a:7f:ac:5d:34:63:fd:f3:36:78:
b7:3d:f7:0f:d9:52:cf:2a:ea:db:1d:c7:58:61:e2:
f1:a1:72:af:8b:0f:56:13:61:26:30:66:86:99:cd:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:17:27:AE:80:25:B2:45:2E:68:CB:85:49:83:0F:CA:4C:CA:BE:9B
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/ihcnroAlskUuaMuFSYMPykzKvps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.142.0/23
Signature Algorithm: sha256WithRSAEncryption
90:b0:68:03:ce:27:d6:4d:1d:0f:f0:22:c6:0c:07:ef:7d:a0:
9b:58:bc:88:6f:1f:a4:12:b1:78:f5:64:04:93:27:35:3c:e8:
06:52:26:42:7e:f6:e3:06:1b:ff:c8:20:6a:7d:97:5e:c0:bd:
9e:a8:90:55:17:38:1d:d3:03:83:af:ea:38:90:c6:4d:98:5d:
e4:7d:7a:f1:a7:40:0a:d9:12:ee:44:ad:3f:1e:df:69:61:ea:
19:54:44:b2:41:87:1c:c8:63:a2:7c:a9:4c:05:33:e3:c1:fe:
17:7a:06:13:62:34:6c:d1:02:f2:8f:9c:00:35:cf:80:29:57:
0f:98:7b:93:b8:eb:1b:df:d5:fc:43:51:a3:df:42:bb:aa:aa:
27:f3:a9:fe:17:64:1e:51:ca:3c:5b:d5:82:92:98:e3:e8:1e:
12:2c:54:f5:26:d6:48:b6:32:a7:62:6a:e3:e0:75:3e:39:42:
2e:02:17:0a:81:41:33:29:04:03:b8:92:2b:f7:6d:3d:0c:1a:
b4:8d:f0:71:f5:da:ef:4f:02:91:2b:8c:fb:53:b7:5c:05:bd:
2f:fc:1d:67:41:89:f7:f2:cd:04:f1:eb:6e:04:8d:29:cf:30:
d5:44:7b:53:1f:5a:52:29:05:ef:8f:d7:98:04:2e:7c:c9:64:
44:09:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org