Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/QcEQzI8tBqNWWiOI_-clk5b6AUQ.roa
File: QcEQzI8tBqNWWiOI_-clk5b6AUQ.roa (raw, json)
Hash identifier: vA9O4Hm1Aft00ryZE0L2qBxMlyqkzQsHRpTBCyLkI+s=
Subject key identifier: 41:C1:10:CC:8F:2D:06:A3:56:5A:23:88:FF:E7:25:93:96:FA:01:44
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018414EA3D42F464766E824B98C3690057EC
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/QcEQzI8tBqNWWiOI_-clk5b6AUQ.roa
Signing time: Wed 26 Oct 2022 15:30:06 +0000
ROA not before: Wed 26 Oct 2022 15:30:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.91.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:ea:3d:42:f4:64:76:6e:82:4b:98:c3:69:00:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 26 15:30:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41c110cc8f2d06a3565a2388ffe7259396fa0144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:55:a1:40:f8:46:2f:73:af:89:ab:d7:a3:61:
ff:e3:b8:e3:55:b6:a6:4b:cb:2b:6e:be:c8:af:21:
0b:17:2e:c2:5b:26:16:27:5e:ed:31:f0:62:27:3a:
81:b9:41:11:15:49:72:3b:ba:e6:04:29:cf:bc:8c:
de:33:da:da:a1:bb:da:15:cb:bd:7f:f4:99:df:36:
ed:ef:53:eb:a6:df:ab:3c:a6:a6:08:5a:a6:90:0f:
ee:9e:ab:66:0f:16:61:17:d2:5c:08:20:58:99:bd:
0e:ce:eb:91:2e:63:f6:a8:85:cb:80:81:29:ab:a0:
f5:8b:44:ac:dd:ae:fc:4b:fa:41:53:1e:e2:2d:fe:
3b:fd:50:cb:fc:8f:3a:05:4d:e6:49:2c:e5:e6:5f:
4c:7e:33:a9:56:94:53:e3:c6:3d:b5:f3:fd:a1:53:
39:6a:da:fe:a5:cf:84:fa:3f:5d:7d:b1:ff:88:ac:
49:ac:bb:40:16:71:4e:c8:2f:83:80:ca:03:23:03:
cb:4f:78:a1:da:a1:0c:93:f5:c2:d1:83:78:54:f7:
a4:3f:14:ce:59:5b:42:55:71:02:b2:32:ec:14:63:
97:8a:7f:89:9e:4e:3d:48:11:79:c2:9e:4a:1c:e3:
31:86:02:b3:b8:7b:9e:48:35:6e:9b:07:2f:fa:33:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C1:10:CC:8F:2D:06:A3:56:5A:23:88:FF:E7:25:93:96:FA:01:44
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/QcEQzI8tBqNWWiOI_-clk5b6AUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a5:84:f6:36:e8:35:84:1d:b7:2e:9e:08:fe:01:73:93:ae:
85:51:09:e5:19:5d:fe:92:51:3a:7f:39:83:05:24:59:9d:d3:
f9:6c:47:0b:5d:9a:38:2d:4c:f0:2c:19:33:90:a8:24:5a:b2:
55:ea:33:6a:b8:a6:3f:88:c7:ad:e2:c3:25:49:a8:c5:3c:dd:
cd:51:85:08:5a:91:87:22:a0:18:93:26:92:8b:9d:05:6d:a0:
7e:0b:22:be:5e:ba:f8:d1:a7:06:b6:de:91:01:2c:89:2b:d0:
4c:35:89:6d:db:47:ae:e2:9b:e5:d9:19:90:48:c5:22:4e:ac:
e6:f7:00:17:df:79:b7:1a:51:b4:0e:78:c3:05:3e:d7:6c:71:
6b:79:9c:84:3a:00:cc:cf:c7:b7:b4:16:a3:a7:81:62:20:a5:
7c:30:18:b9:bc:75:72:23:5c:19:2d:f4:89:c0:f2:5d:75:e7:
d4:9f:33:0b:13:4d:82:8f:14:cd:bb:0c:f0:c4:39:cf:50:70:
d1:99:29:71:cf:7a:56:53:5f:a5:df:ba:32:8a:60:64:c2:87:
8f:53:68:25:b6:ad:e4:53:3e:49:1b:b0:4d:75:d4:bb:48:1a:
06:07:e1:21:ca:22:4e:3a:e3:76:62:9f:56:42:b5:5f:b9:ee:
dc:fa:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org