Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RpKbfZpl8Tg8f8fkV4azd-G5SX4.roa
File: RpKbfZpl8Tg8f8fkV4azd-G5SX4.roa (raw, json)
Hash identifier: yMN/mfUC/rYbPeWxKQb/9Dp58dbc8bDkJ54MQSfZDmM=
Subject key identifier: 46:92:9B:7D:9A:65:F1:38:3C:7F:C7:E4:57:86:B3:77:E1:B9:49:7E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184D4AE154A37E0AB77FF469EEB9A92F00F
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RpKbfZpl8Tg8f8fkV4azd-G5SX4.roa
Signing time: Fri 02 Dec 2022 21:11:29 +0000
ROA not before: Fri 02 Dec 2022 21:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.137.97.0/24 maxlen: 24
45.91.139.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d4:ae:15:4a:37:e0:ab:77:ff:46:9e:eb:9a:92:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 2 21:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46929b7d9a65f1383c7fc7e45786b377e1b9497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:f1:8b:50:06:6c:89:df:cd:dc:8b:6a:70:
eb:63:38:83:8b:3b:2d:b9:c1:3e:ce:de:e1:d6:1d:
92:2d:20:3c:2c:ae:5e:80:74:a7:aa:5d:7b:24:3e:
45:24:6a:51:72:13:44:5f:0d:e5:b7:44:d2:3b:83:
84:88:a1:14:ae:e2:a8:93:14:6c:d6:57:80:fd:d0:
a7:27:fc:32:43:5c:de:f8:cf:5e:18:10:13:16:09:
8f:f2:81:ac:cc:8c:fc:66:7e:4f:68:5b:ea:f0:b4:
8c:b8:3f:f8:4a:b3:fe:88:26:f0:d2:25:79:f8:f8:
b5:ca:6a:cc:ff:93:a2:34:c1:4e:d1:7c:74:08:c2:
bd:c2:2b:4b:14:5e:4e:d5:5b:0d:13:e2:84:0d:04:
b4:6a:09:f7:ad:14:1f:d0:4d:44:d0:0b:7f:f9:e4:
cf:3c:0b:35:58:7a:ed:c1:3f:ef:4d:7c:4f:47:ad:
69:69:1b:b1:f6:16:f7:b2:51:f0:4e:8f:a4:6c:ec:
ca:de:c7:e0:9e:87:74:ea:a5:51:36:d8:33:78:22:
60:f2:d4:f8:6e:b6:8e:ed:e7:6d:71:81:bf:8d:59:
bf:2b:a1:34:5c:8e:a4:52:68:91:ff:72:50:e5:89:
b0:e8:ef:54:36:21:07:06:0e:1e:2f:b1:ed:bc:c3:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:92:9B:7D:9A:65:F1:38:3C:7F:C7:E4:57:86:B3:77:E1:B9:49:7E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/RpKbfZpl8Tg8f8fkV4azd-G5SX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
45.137.97.0/24
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cd:4c:44:fb:30:1c:1d:ae:98:1a:c5:be:d6:c6:d9:b6:0f:
00:1f:43:0a:79:f2:82:c9:8d:49:60:9a:a0:e2:83:3c:7e:ea:
98:0e:6e:59:f1:5a:41:ee:21:cb:fc:e7:2b:aa:63:e3:6a:cf:
fa:4a:33:00:87:f5:81:98:da:7c:cc:f7:67:6a:92:6b:d4:61:
d2:cb:00:44:1e:a3:02:7b:0b:ed:07:4a:b8:76:cb:67:3d:29:
63:1a:7f:d1:02:ba:d6:97:fb:53:0b:cb:29:57:d1:99:60:b4:
23:eb:f5:b7:b3:30:76:0a:4a:64:88:c8:26:3b:b6:b7:88:87:
7f:e2:4a:68:01:57:17:b0:80:e1:27:a4:6e:1f:e2:9c:7f:38:
29:35:d8:14:ac:79:31:1a:5e:c4:2c:75:64:9c:12:76:3f:fa:
8b:87:fb:31:e4:ab:2f:5d:61:d3:40:8b:48:05:0d:5e:ea:a7:
85:9e:5f:22:96:9f:9b:88:64:85:6d:48:40:a5:51:9b:18:d3:
54:02:9e:18:4c:b0:ab:08:78:28:12:fb:57:63:88:4f:3b:d6:
dd:f2:4f:d2:87:fe:50:e6:6b:fb:40:de:f6:31:20:95:0e:eb:
ad:50:6e:a0:5a:c0:e1:bd:1a:80:a2:af:4a:9f:df:74:7a:20:
df:1f:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org