Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/C1iAvdzJVk8Nzz04ui3qcRJRUqc.roa
File: C1iAvdzJVk8Nzz04ui3qcRJRUqc.roa (raw, json)
Hash identifier: XYsLRKyNj2U/6PFg84UeeZMMyUMis0ead6C05Dy1R04=
Subject key identifier: 0B:58:80:BD:DC:C9:56:4F:0D:CF:3D:38:BA:2D:EA:71:12:51:52:A7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186C7993C82A13C13856A47F6D56BB3B361
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/C1iAvdzJVk8Nzz04ui3qcRJRUqc.roa
Signing time: Thu 09 Mar 2023 18:19:13 +0000
ROA not before: Thu 09 Mar 2023 18:19:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.172.172.0/22 maxlen: 22
45.137.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c7:99:3c:82:a1:3c:13:85:6a:47:f6:d5:6b:b3:b3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 9 18:19:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b5880bddcc9564f0dcf3d38ba2dea71125152a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:93:60:12:09:f4:29:5d:c8:d7:b6:bf:41:
37:a3:d4:fa:f8:97:d1:63:3b:7c:c3:d5:9c:b6:cc:
39:53:7c:80:ad:a2:a9:aa:9b:af:e2:a7:5a:e0:ec:
5d:04:8c:72:1a:81:15:50:18:1c:b9:8e:e9:f2:6a:
03:3e:fc:a4:59:9c:fd:49:ae:a9:50:47:63:6e:6c:
20:4c:cc:06:bb:77:f0:9e:6a:88:c3:7c:eb:0c:f5:
68:ce:17:77:67:a3:b2:f3:6e:23:01:69:11:ba:22:
3c:1a:10:1b:81:f4:db:83:8d:14:75:c2:58:75:4e:
01:b4:6a:3c:a6:e2:09:50:27:30:e8:3f:54:ee:fe:
97:c8:60:0c:d8:e2:a3:45:1a:e7:d3:42:2a:2b:ac:
4a:6c:09:17:d2:f2:69:a3:dd:35:7a:fb:b6:23:83:
0a:71:2c:50:01:93:eb:c1:a7:03:a8:20:1f:0c:82:
5f:06:c6:c5:58:bd:2e:30:b1:f5:ca:9a:6b:3e:99:
7b:37:da:03:c0:a1:09:cd:46:ee:70:f6:a5:23:b2:
ce:e9:67:dc:65:82:54:af:2e:ab:1c:d5:18:c8:f8:
cd:51:c6:8e:ed:68:25:28:40:41:cd:00:a0:cf:de:
86:18:be:0a:a2:cc:2e:3f:c4:93:f7:1f:6b:4a:68:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:58:80:BD:DC:C9:56:4F:0D:CF:3D:38:BA:2D:EA:71:12:51:52:A7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/C1iAvdzJVk8Nzz04ui3qcRJRUqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.98.0/24
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:99:bc:7d:37:3a:fb:d6:9b:3c:a5:be:a4:7d:94:50:4a:94:
5b:e5:6e:dc:5f:ac:09:6e:32:96:0f:94:5c:13:d7:1b:ea:2c:
5a:ae:c0:03:c3:de:b5:ff:9a:03:44:0a:59:dc:1d:ad:d6:c7:
1d:35:72:7d:7e:da:60:fb:96:22:d7:db:92:a2:10:79:38:da:
75:64:5e:51:8b:19:01:76:41:dd:94:dc:9d:74:df:c8:17:e1:
93:8c:ba:55:c4:06:7d:6e:bf:77:67:18:50:7a:04:68:6c:c7:
2b:53:45:ed:c3:41:15:37:85:65:18:69:b5:82:22:75:f7:93:
55:5a:12:e8:39:2a:cf:c1:42:26:68:a2:6b:09:7d:83:33:34:
bf:02:4d:a4:26:29:1f:30:7c:11:b1:95:eb:02:1f:fc:da:b6:
d8:13:79:12:80:ff:d9:51:75:37:24:c9:1a:d9:59:0c:41:30:
77:09:f3:71:b3:0c:54:51:02:50:7d:f7:7b:41:0a:68:06:98:
fd:c4:0d:bd:c6:91:3b:16:bd:ae:09:84:9f:ae:5d:92:9c:ac:
1e:7c:25:a4:31:e3:94:39:08:b5:3a:4d:31:c2:00:f2:38:95:
6c:99:20:2c:b6:e7:2d:55:e0:45:b0:3c:23:fb:9b:b2:1f:26:
90:6d:90:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org