Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ERkiuW-cqZHzeKMZV53sAg2edOc.roa
File: ERkiuW-cqZHzeKMZV53sAg2edOc.roa (raw, json)
Hash identifier: E/cF5UEBCNS+Sz26if0jXta9hIxCXdZ7hvv5hdB/j3s=
Subject key identifier: 11:19:22:B9:6F:9C:A9:91:F3:78:A3:19:57:9D:EC:02:0D:9E:74:E7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01846532DDB70502851008ECC475F95FCBAD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ERkiuW-cqZHzeKMZV53sAg2edOc.roa
Signing time: Fri 11 Nov 2022 05:39:03 +0000
ROA not before: Fri 11 Nov 2022 05:39:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 185.172.172.0/22 maxlen: 24
45.91.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:65:32:dd:b7:05:02:85:10:08:ec:c4:75:f9:5f:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 11 05:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=111922b96f9ca991f378a319579dec020d9e74e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4a:86:56:2c:a0:8f:c7:fd:9a:2d:af:5e:9a:
8e:75:f4:dd:b9:c7:33:41:e6:87:86:72:f9:ca:ca:
a6:47:4b:d3:e6:4b:06:9a:86:c6:c5:07:f4:03:80:
93:38:81:ba:b4:b6:1f:b3:b0:b5:0b:44:1d:6d:08:
c6:25:5d:eb:87:12:13:73:59:ab:98:e9:71:52:b1:
e2:b1:f7:4e:f1:6f:5b:f3:80:dc:ad:fa:0b:1a:0d:
b0:31:39:ac:a7:94:8c:b7:95:dd:fb:dc:90:ae:36:
8f:d5:88:5b:5a:67:25:c2:a4:99:ef:51:24:a3:41:
67:80:73:1d:95:76:78:10:da:a6:b9:4d:e0:02:80:
c0:f0:6c:d3:96:9e:16:2a:b7:4d:74:54:b0:c8:9a:
c1:ee:d6:9c:23:56:f7:6b:b3:df:15:bd:0b:eb:3d:
a6:7e:67:10:a4:c9:4a:8e:a4:a3:b5:d8:b7:b9:b9:
cd:c4:ba:5b:ad:f4:dd:d3:41:cd:7f:53:fe:eb:4b:
66:98:e7:74:25:12:c8:09:12:51:58:11:90:ba:a9:
af:4b:95:2b:50:1e:fc:93:d2:6b:bd:d2:79:0b:b7:
ec:7e:e1:86:a1:68:07:96:4d:1e:35:92:59:c4:69:
54:7e:a5:62:b9:5c:b9:50:f7:66:81:19:2a:9a:0a:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:19:22:B9:6F:9C:A9:91:F3:78:A3:19:57:9D:EC:02:0D:9E:74:E7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ERkiuW-cqZHzeKMZV53sAg2edOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
185.172.172.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ba:dc:c1:aa:5c:01:13:d0:7e:a8:55:4a:98:c4:22:e3:90:
1c:da:40:03:19:82:b0:fc:b2:5e:fa:25:68:94:a3:b7:01:7a:
7d:30:2d:76:37:fd:23:37:3c:f5:ef:3e:1b:8c:f2:a1:d4:b3:
1a:b4:ce:4b:cc:d5:26:bf:49:d3:f1:24:5a:9b:6b:7d:2f:f7:
93:6b:eb:cd:b9:99:e3:69:e3:99:a4:af:38:1d:41:a9:2d:1f:
89:68:df:6c:47:00:69:0d:75:77:56:ec:16:47:e3:04:0c:84:
40:7a:b3:8f:aa:95:55:8f:ed:56:b0:1a:1f:45:79:aa:12:c0:
7c:be:ba:b0:75:69:e1:40:4c:8b:27:66:a7:0d:9e:4d:a0:ab:
1b:8b:c3:16:39:2f:33:2d:2f:d2:31:ad:22:8c:47:d3:a3:78:
d7:d4:d6:11:79:2c:c8:f3:37:c9:e8:df:67:bc:89:a4:36:51:
06:1a:7b:0a:f9:f1:c7:82:c3:88:d7:a0:a9:59:bb:a6:87:8f:
a7:0f:80:87:ca:d9:af:62:29:ad:69:25:49:8a:2c:ea:f5:1e:
4a:8a:97:33:cf:f8:8b:25:c2:9f:ff:2b:ab:cf:34:d8:cf:2f:
4d:c8:c9:f7:c3:24:35:18:40:62:c4:e8:5c:a9:e1:4e:1b:39:
5d:f1:dc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org