Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/El9C3IN8ucTHYWJiUxrX6rugF0M.roa
File: El9C3IN8ucTHYWJiUxrX6rugF0M.roa (raw, json)
Hash identifier: QKOJq27ctuyHF5E8dL5p5Rx1H52bFnWwvDx6f8RSBfc=
Subject key identifier: 12:5F:42:DC:83:7C:B9:C4:C7:61:62:62:53:1A:D7:EA:BB:A0:17:43
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C47D116406A408AC2117431CD5FBD
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/El9C3IN8ucTHYWJiUxrX6rugF0M.roa
Signing time: Sun 01 Jan 2023 22:55:42 +0000
ROA not before: Sun 01 Jan 2023 22:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29538
IP address blocks: 45.158.56.0/24 maxlen: 24
45.137.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:47:d1:16:40:6a:40:8a:c2:11:74:31:cd:5f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=125f42dc837cb9c4c7616262531ad7eabba01743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:54:f5:0d:2a:88:ca:4f:34:e4:87:70:e2:a6:
54:95:a4:a1:5a:c1:c3:a0:16:54:d5:c9:51:05:72:
98:38:dc:67:1b:97:d5:8c:26:89:20:ce:51:93:10:
0a:47:43:35:f3:cb:aa:cc:2d:c7:fb:1d:97:7f:d4:
ac:17:67:36:05:8f:71:29:5c:9b:71:bd:9b:8b:e3:
0c:bb:1c:d0:0d:2a:14:51:30:62:e5:b8:7b:e3:58:
1a:91:d0:93:3c:83:4a:00:7c:a6:35:a3:5a:04:66:
ac:97:c7:90:cf:e6:24:04:37:0f:6e:cd:e3:d3:34:
54:4e:a4:e9:88:bd:3c:b3:ee:32:f3:b8:46:5a:ea:
61:b1:68:69:b1:b4:37:8e:f2:c7:91:e5:4a:f6:19:
fa:8d:83:1c:06:46:a3:46:02:3c:9d:c4:8c:1d:30:
40:6a:4f:84:36:26:06:d8:71:04:ae:0c:9b:ec:ae:
cb:09:a4:a9:36:b0:5e:70:73:36:5e:90:9d:52:d5:
4e:e2:46:23:a9:40:d3:59:8a:25:47:a9:5b:0a:1a:
e6:49:45:0f:5f:4a:68:02:8d:68:b1:dd:66:40:f2:
21:5b:b4:37:6f:ec:c9:11:fc:b1:3e:7d:e7:bf:f9:
c4:0f:33:a8:ec:4c:4d:bb:15:a2:39:52:cb:09:f7:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:42:DC:83:7C:B9:C4:C7:61:62:62:53:1A:D7:EA:BB:A0:17:43
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/El9C3IN8ucTHYWJiUxrX6rugF0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.99.0/24
45.158.56.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:06:4d:77:5d:42:eb:29:32:e8:41:38:57:bc:97:b9:b2:ef:
a7:9a:66:3e:3f:79:f1:78:5b:57:bb:66:a6:40:e2:b8:dd:f2:
12:7d:52:46:49:10:f5:4c:5f:fb:7d:b9:f2:b8:71:d6:66:76:
56:25:75:2b:47:6a:96:9f:ac:e9:4e:c5:dc:fc:34:de:cc:ab:
99:1e:06:20:e9:2d:65:49:d5:62:af:98:e6:41:8d:10:cc:5d:
fb:c5:e2:a5:dd:79:16:3a:01:cd:42:d1:42:46:e8:77:5e:dc:
fd:42:0c:1a:8c:1d:07:ee:ae:64:0c:31:94:4d:aa:05:e2:95:
1f:1e:a0:e9:cc:5f:c7:22:51:6b:d5:54:1e:43:37:5c:03:ff:
2b:30:0e:40:29:11:f6:e3:9d:c5:71:42:6f:1b:c4:41:40:a2:
8f:aa:c6:2e:6d:45:2a:1e:2e:5e:68:64:09:6e:66:cb:d9:99:
45:31:b3:e1:0c:d3:e7:d3:1a:4d:e9:8a:0a:b7:22:f9:25:09:
28:f4:2f:92:3e:93:c4:e7:c7:73:89:10:16:3e:58:e6:93:35:
9b:28:e7:3e:d3:77:57:1b:b4:7a:cc:ca:74:23:94:12:ec:ed:
a6:06:99:03:d0:6b:fa:a1:60:d8:35:e2:6c:81:81:2b:5d:9b:
96:e4:2e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org