Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Qa6clahHQcB1zWfiD1abc3UrdkM.roa
File: Qa6clahHQcB1zWfiD1abc3UrdkM.roa (raw, json)
Hash identifier: Thwo1BIu/7ZBZ9SIEjYdTA5oN5gaq5AhcX+Ra77jC2Y=
Subject key identifier: 41:AE:9C:95:A8:47:41:C0:75:CD:67:E2:0F:56:9B:73:75:2B:76:43
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01840FB3CDBE346E135B6DE58707272AA21C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Qa6clahHQcB1zWfiD1abc3UrdkM.roa
Signing time: Tue 25 Oct 2022 15:12:32 +0000
ROA not before: Tue 25 Oct 2022 15:12:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 45.87.174.0/24 maxlen: 24
45.91.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:b3:cd:be:34:6e:13:5b:6d:e5:87:07:27:2a:a2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 25 15:12:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41ae9c95a84741c075cd67e20f569b73752b7643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:35:7b:52:b9:7f:86:05:52:f5:81:ee:d0:
96:1c:2f:80:33:3e:fc:d9:7d:78:bc:4e:fe:0e:bd:
3a:45:e7:c8:b0:90:26:af:c7:2e:a1:07:01:b4:ff:
99:ac:a9:c5:26:5b:3d:37:e6:14:5c:73:e5:7b:2c:
ef:03:b9:63:aa:30:39:62:59:84:47:66:13:e9:7f:
79:41:a9:14:83:80:07:5d:29:fb:63:2f:72:88:01:
11:69:8b:d0:e5:8b:30:32:32:2b:2e:e5:d8:7a:3c:
c6:9f:01:58:0e:1b:44:8e:72:ad:15:2d:2c:b4:2d:
1e:e3:dc:54:2d:2e:02:94:28:61:8f:0a:41:57:74:
ca:52:5a:48:5a:eb:1f:fe:4d:bc:0a:cf:ea:7f:44:
1d:1b:ea:5f:e6:35:bb:0e:80:e9:15:d3:84:83:21:
fa:b3:3b:ee:c7:bc:dd:88:01:09:5b:9d:fa:ce:b5:
ef:b3:7d:cd:b1:04:ba:b7:82:c0:b6:bc:a7:9e:9f:
99:9b:7d:de:45:a6:2d:0b:ac:08:5f:10:c7:6e:66:
95:98:58:48:ab:8b:9c:a5:57:22:bd:86:c8:0f:c8:
8d:0b:50:68:1d:7b:a2:01:8d:34:f3:ac:23:6d:21:
81:d0:92:70:53:49:11:7e:07:7f:a0:1e:b9:4c:b9:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AE:9C:95:A8:47:41:C0:75:CD:67:E2:0F:56:9B:73:75:2B:76:43
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Qa6clahHQcB1zWfiD1abc3UrdkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.174.0/24
45.91.136.0/24
Signature Algorithm: sha256WithRSAEncryption
03:aa:43:c5:be:66:26:b1:48:60:68:ac:52:5f:3b:c4:56:b9:
16:e9:34:ac:3b:8a:61:f2:c0:10:61:e4:42:68:99:e2:3b:dd:
12:38:ee:b0:b0:b6:25:d8:66:47:44:cb:e9:b3:3b:f1:04:f0:
c0:86:fc:d1:4b:fe:c5:25:5a:7d:30:24:73:a8:43:66:e2:5f:
b6:2c:b2:62:f3:67:35:7f:db:43:6d:88:7e:ca:32:d2:3f:c7:
11:06:cb:b3:e1:ed:f1:30:93:17:ba:cc:18:8c:59:87:46:dd:
cf:9b:3a:06:94:7b:8d:b9:83:ba:88:aa:73:cf:c3:33:a3:48:
94:d0:44:d8:0e:8f:f5:6c:d8:73:6a:f0:95:84:2c:45:7d:a2:
b2:19:35:2f:60:86:69:44:7c:59:76:ca:4b:0f:0d:95:7a:a4:
d2:32:c6:6e:ff:53:4b:88:af:51:6f:d3:e1:53:51:ae:23:70:
9f:e0:79:cd:76:f6:0d:4a:cd:04:ea:9b:f1:2b:8f:c8:2b:09:
f6:32:f4:df:04:60:c5:16:b3:50:56:67:65:e8:ec:0b:7f:ef:
5c:85:c5:3d:43:b5:97:90:05:af:6d:0f:19:67:b7:27:32:91:
a4:8c:9b:31:bd:5e:39:28:83:24:4e:b6:45:99:51:6d:18:46:
f1:a9:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org