Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Y5PYnHM794wJij6euOI6GYl7Nk4.roa
File: Y5PYnHM794wJij6euOI6GYl7Nk4.roa (raw, json)
Hash identifier: vw/bESIAqNel4yqbMv4jopGH3/sWgfUeVivfINWmecE=
Subject key identifier: 63:93:D8:9C:73:3B:F7:8C:09:8A:3E:9E:B8:E2:3A:19:89:7B:36:4E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C564F9E18AAE2B4F7B69C396BC4DF
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Y5PYnHM794wJij6euOI6GYl7Nk4.roa
Signing time: Sun 01 Jan 2023 22:55:46 +0000
ROA not before: Sun 01 Jan 2023 22:55:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 270353
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:56:4f:9e:18:aa:e2:b4:f7:b6:9c:39:6b:c4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6393d89c733bf78c098a3e9eb8e23a19897b364e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:8f:67:7f:22:f9:c2:9a:9b:20:7f:19:fc:
cb:45:5b:d6:8b:64:99:5c:b1:15:33:5a:56:81:b6:
53:15:c1:23:bb:81:e6:15:8d:54:52:c1:90:4c:87:
40:17:5f:93:b7:3b:1e:9e:f7:2b:99:dc:15:5a:02:
dd:d1:74:65:12:0e:6e:f0:d4:ea:29:32:b8:24:58:
96:fd:10:53:98:8b:2a:90:fe:ae:09:3b:d8:bb:6b:
c6:d2:77:31:7b:19:08:fd:d8:38:56:c0:af:23:98:
4e:b2:ce:b5:62:d2:a1:72:cb:ba:b7:af:78:b5:fc:
16:28:0c:4f:0f:4c:ff:99:ac:2c:c0:62:d3:5f:b7:
a6:77:d9:26:f3:30:9d:2b:13:fe:6c:4b:46:be:4c:
b8:a9:fb:5d:1b:8d:eb:0d:a0:27:e5:eb:45:08:33:
38:8b:ab:e3:84:cd:74:53:35:02:23:58:1a:63:d4:
7c:a8:4f:93:47:db:00:c8:5f:ff:f4:b2:03:f0:d3:
1f:9d:1e:2b:df:1e:87:18:52:2c:29:25:92:70:1f:
24:7b:35:1b:67:4d:a4:23:1c:17:e1:af:e5:e2:e5:
91:09:b2:71:e4:9a:32:26:23:93:38:a7:21:c0:bf:
e8:9e:78:ef:39:7d:78:76:ae:6f:6e:23:8e:e3:88:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:93:D8:9C:73:3B:F7:8C:09:8A:3E:9E:B8:E2:3A:19:89:7B:36:4E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Y5PYnHM794wJij6euOI6GYl7Nk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
58:42:51:3b:6b:e1:6d:3f:70:94:f6:74:e8:f7:65:b3:c6:98:
dc:3c:98:ea:f7:e6:8f:0e:12:33:9c:4c:76:5e:90:de:e9:fc:
d4:49:29:2d:57:3a:30:75:8b:a2:a6:95:f2:1c:3f:a9:fc:e4:
8c:67:34:e4:26:ca:69:94:08:49:cd:6c:71:05:da:b6:83:53:
53:95:23:98:bb:68:1f:cd:b9:43:45:aa:d3:46:95:e3:8f:e7:
0c:15:11:5d:82:2f:8b:41:97:b5:0e:91:10:ac:07:f5:9f:11:
34:e1:6e:53:a2:74:e6:52:77:f9:1c:91:be:e4:74:fe:e0:b9:
45:7a:1a:44:33:5d:c9:72:e9:e3:30:a6:76:f6:4e:3f:cc:ab:
7c:c5:29:8c:9e:71:17:e2:43:e8:27:61:e1:9c:ac:bb:ec:e0:
4e:e7:60:28:42:50:0c:a5:10:58:21:a0:5d:d4:3a:49:53:63:
e6:a2:67:d2:94:40:b4:ce:38:2f:bc:ed:30:d4:b0:b5:2d:0c:
0b:9a:7a:5a:8e:32:1a:66:96:b0:ae:96:5a:64:bc:6d:e7:0b:
de:9a:b6:ab:75:fc:dd:03:25:b0:d3:ea:57:90:12:27:9d:20:
97:c6:53:fc:85:a7:71:af:da:1c:c2:05:fe:01:45:9a:90:a1:
2e:b5:0e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org