Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GeYenTt4yEkbpspquyPfEqFPiSg.roa
File: GeYenTt4yEkbpspquyPfEqFPiSg.roa (raw, json)
Hash identifier: ez1j6cT3npYb1uyLMa4MWcaBpRYLy54cB3b8c8zpOeo=
Subject key identifier: 19:E6:1E:9D:3B:78:C8:49:1B:A6:CA:6A:BB:23:DF:12:A1:4F:89:28
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184A32EFE5B61646A0E518E82BA671EEB92
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GeYenTt4yEkbpspquyPfEqFPiSg.roa
Signing time: Wed 23 Nov 2022 06:31:16 +0000
ROA not before: Wed 23 Nov 2022 06:31:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 171.22.76.0/23 maxlen: 24
185.172.174.0/23 maxlen: 24
45.91.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:2e:fe:5b:61:64:6a:0e:51:8e:82:ba:67:1e:eb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Nov 23 06:31:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19e61e9d3b78c8491ba6ca6abb23df12a14f8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:36:9a:fc:98:38:ba:bd:7e:57:34:f0:cd:92:
37:0d:2d:88:d1:4d:84:29:20:ca:eb:21:fb:1f:42:
2f:7c:e1:5b:91:02:6c:66:4c:2b:f2:b5:70:65:ed:
65:ca:f1:5b:81:bc:a4:ea:fa:2f:85:86:42:d7:ba:
f0:52:d4:8a:1f:c7:ce:fb:a8:90:97:c1:5a:43:b7:
d8:75:97:49:66:98:e5:a5:57:fe:a1:67:f8:0c:2f:
77:82:2b:f5:ee:80:bb:0c:66:67:85:3d:bf:53:f3:
1b:8e:bb:2c:72:b3:ab:ab:7c:9f:1e:38:8d:81:a5:
75:24:30:74:df:3a:a6:34:f7:6a:3c:c5:40:02:d7:
a3:ea:d6:98:fa:9a:44:b8:76:1e:93:4a:84:55:a6:
71:64:a4:40:52:54:03:81:8c:3c:62:71:bc:b9:a6:
96:2b:3e:64:c4:98:4b:50:cd:09:a4:1d:f7:9e:a3:
77:d2:6e:e4:8e:70:a7:b8:3e:2d:88:00:60:0b:6c:
9b:4c:e4:52:b0:03:64:2d:85:66:b2:4a:09:2a:1f:
fd:d6:0f:96:98:d1:ba:97:35:b2:14:4c:1b:bd:f1:
c6:4e:71:79:7e:c0:66:f6:b5:55:1f:f2:7e:9e:0f:
6e:89:47:ca:8d:24:9a:2b:82:1b:7f:12:48:91:e2:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:1E:9D:3B:78:C8:49:1B:A6:CA:6A:BB:23:DF:12:A1:4F:89:28
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/GeYenTt4yEkbpspquyPfEqFPiSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
171.22.76.0/23
185.172.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:e7:6f:75:6d:e1:34:76:87:92:41:f9:3d:c0:b6:59:87:90:
44:e1:58:ed:ec:c3:c4:92:9d:d3:c8:82:50:2b:49:8a:ca:c6:
61:a6:09:22:e6:db:d5:74:31:49:cc:38:d9:aa:0c:f5:59:00:
b0:54:0d:c6:e0:02:7a:15:f5:8e:a1:d4:11:a9:7e:4d:0a:02:
6f:59:af:13:96:21:d5:36:1b:00:45:b9:43:c5:39:7a:26:ac:
55:66:7f:58:ec:67:13:bd:aa:a5:f5:0e:ef:47:ed:0b:15:da:
d9:b4:84:d3:c9:6f:5a:5a:9b:07:3f:9e:78:44:2d:09:69:41:
f5:88:9e:ec:31:97:0d:b4:e1:a2:dc:15:d1:3d:66:27:76:6a:
61:5c:9d:b8:fc:03:37:a7:a4:e0:61:6f:08:d2:54:2d:b9:bd:
e9:85:32:4d:62:82:af:a2:53:fa:ce:a8:2d:f6:9e:3e:42:64:
53:f4:52:d6:3c:6c:47:92:52:94:3f:15:cc:1a:8d:7f:45:c4:
dc:43:92:1c:8a:b9:05:32:03:bd:36:00:57:3b:41:a4:de:0c:
1c:d7:19:d9:01:e9:46:a7:62:03:24:d7:1d:ca:7f:8a:db:90:
cd:94:16:e1:6a:e1:34:e2:81:b8:82:72:df:b1:d7:20:c1:d5:
e3:bd:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org