Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DCaHDRKVfaGPg_z4pIOy4dwtkaQ.roa
File: DCaHDRKVfaGPg_z4pIOy4dwtkaQ.roa (raw, json)
Hash identifier: EUtymAO3APK2G0xQqDl6kJl2OayFm4gUDwmaaF39TsY=
Subject key identifier: 0C:26:87:0D:12:95:7D:A1:8F:83:FC:F8:A4:83:B2:E1:DC:2D:91:A4
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C46B7B53EE4FCA375BDE2D38A3876
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DCaHDRKVfaGPg_z4pIOy4dwtkaQ.roa
Signing time: Sun 01 Jan 2023 22:55:42 +0000
ROA not before: Sun 01 Jan 2023 22:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6866
IP address blocks: 45.137.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:46:b7:b5:3e:e4:fc:a3:75:bd:e2:d3:8a:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c26870d12957da18f83fcf8a483b2e1dc2d91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:77:bf:35:8d:9c:3c:ad:81:d2:f3:75:37:b9:
4a:b3:1f:4b:9a:3c:a7:46:bc:21:17:32:e9:ad:d1:
a3:58:6f:0b:4b:90:c3:57:1e:be:10:e5:39:58:49:
2e:92:29:0e:74:df:2c:85:e5:18:93:b3:33:35:82:
07:21:0f:92:fe:5e:55:39:95:94:6f:6e:f5:e7:fb:
37:a5:62:a1:44:e0:dd:2a:07:75:ab:56:c0:9d:28:
02:09:cb:9b:19:44:bb:4b:e8:04:cd:f6:82:89:73:
4b:31:92:4a:5b:c9:b5:ea:09:d6:4d:ba:1a:7c:f1:
73:cc:18:31:16:81:13:b5:20:76:4b:8f:1e:da:61:
d8:eb:9a:0e:d3:65:6b:ee:80:9b:d5:90:da:7b:df:
96:99:70:0a:a2:e1:a9:4d:42:65:4e:75:b9:1b:c1:
dd:ca:f5:c0:7b:16:d4:86:19:d9:be:1a:8a:25:55:
ac:f4:fc:ec:e4:e1:41:73:47:14:5b:62:df:8e:ae:
12:70:78:f2:71:61:e6:b0:64:97:6c:86:d2:6f:03:
f2:94:32:f8:99:78:e1:6c:45:84:4f:4e:b7:e7:65:
ae:90:a0:6e:dd:3c:7c:81:a2:cb:ff:c4:a1:11:cd:
2e:9d:bd:11:9d:f2:ae:0d:11:84:ca:35:d8:91:bc:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:87:0D:12:95:7D:A1:8F:83:FC:F8:A4:83:B2:E1:DC:2D:91:A4
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/DCaHDRKVfaGPg_z4pIOy4dwtkaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.98.0/24
Signature Algorithm: sha256WithRSAEncryption
46:98:3d:e4:0c:2b:fd:1e:ff:24:16:4a:83:c9:61:7c:98:6b:
f5:f6:4d:00:c2:eb:b7:b0:21:0e:50:85:4c:b5:4e:79:85:3e:
f4:4d:ee:7a:6f:93:c0:81:24:fc:ce:82:1d:27:ba:3b:bb:25:
7f:a9:e3:e7:fe:50:41:6b:06:3a:88:70:a2:a4:ab:2a:af:0c:
18:b3:0e:5a:23:d4:af:ce:ec:5f:c2:be:b5:70:47:96:8f:75:
81:c5:1c:56:56:c0:d2:5e:b5:b6:49:e8:46:66:d6:ac:2d:4a:
c3:31:47:61:1e:9d:e1:db:f9:49:94:ca:3f:a9:d5:32:d6:c4:
d8:c3:d5:a9:47:a5:8e:98:e2:d1:b9:24:58:f9:f7:83:13:75:
8d:f2:f5:30:a7:02:02:ed:e8:96:40:ae:cd:58:8a:62:34:13:
ca:83:3d:f6:2e:8e:11:0a:f2:76:ca:5b:8f:1c:3d:c0:06:25:
de:3c:4c:59:a4:a4:e0:91:c9:b4:1c:6f:88:c0:1a:00:23:fe:
8a:1a:ac:f1:4c:f5:13:eb:29:39:b0:80:18:6d:d8:9e:88:9f:
71:4e:81:c1:41:47:d5:4c:b0:e9:c3:9c:b1:21:74:6f:18:57:
f5:b8:62:ef:d8:75:5e:40:0e:fd:87:2c:e7:c4:20:83:1f:09:
09:f1:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:08 2024 by rpki-client on console-ams.rpki-client.org