Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/glXmM3YcmMuE67g7WMtqdjbbZ_g.roa
File: glXmM3YcmMuE67g7WMtqdjbbZ_g.roa (raw, json)
Hash identifier: vrDpNqia+xsxtUyWlOTeFPMoXc+lZq6bRKE/mUK20ew=
Subject key identifier: 82:55:E6:33:76:1C:98:CB:84:EB:B8:3B:58:CB:6A:76:36:DB:67:F8
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0184116E0109059C883253771B837DB99DEA
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/glXmM3YcmMuE67g7WMtqdjbbZ_g.roa
Signing time: Tue 25 Oct 2022 23:15:32 +0000
ROA not before: Tue 25 Oct 2022 23:15:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:11:6e:01:09:05:9c:88:32:53:77:1b:83:7d:b9:9d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 25 23:15:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8255e633761c98cb84ebb83b58cb6a7636db67f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:77:de:95:f5:3a:a2:e6:95:e5:e9:a2:1c:
ed:f6:94:d2:c0:78:c1:ec:75:fc:5c:57:3f:e2:f8:
6d:a4:87:32:35:72:06:a9:37:db:75:96:16:f0:ec:
7e:62:9d:ae:1e:91:e8:92:cf:0e:19:83:17:00:6b:
3a:26:aa:3a:c9:11:66:7e:6e:a0:06:7a:0c:35:08:
a6:7f:85:2f:82:4a:4f:b6:08:8f:c2:10:22:04:7b:
4b:22:24:85:20:b3:9f:b9:26:6d:9e:ae:4e:34:76:
78:7d:46:16:e1:34:af:eb:d0:e5:89:4a:4c:ee:a5:
d9:ad:1f:63:9d:06:e0:4d:fb:ec:f0:91:84:c6:dd:
61:8f:41:7a:1a:e2:d5:61:bf:46:51:92:6e:49:75:
d2:3c:8c:fe:10:53:23:d8:34:97:fc:e3:9a:af:ba:
66:b8:66:0e:95:e5:1b:bd:f1:16:4d:03:fd:04:c3:
03:d0:fd:4b:13:e0:ac:85:f5:6f:ed:ff:b0:cf:79:
9e:5f:22:1c:be:ce:28:db:ae:b8:06:e0:63:8a:89:
b6:63:c6:29:96:7e:08:5c:72:69:68:3d:25:40:33:
c7:db:0f:95:9e:d7:fb:2e:03:83:85:51:b4:84:a5:
67:7b:ca:ee:fb:58:02:fe:47:1f:59:f3:46:af:16:
c7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:55:E6:33:76:1C:98:CB:84:EB:B8:3B:58:CB:6A:76:36:DB:67:F8
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/glXmM3YcmMuE67g7WMtqdjbbZ_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
34:cb:9f:0b:76:71:b2:60:08:db:f4:5d:7c:88:0f:1e:9b:aa:
92:ce:01:0d:48:04:20:5d:34:f6:d9:83:01:8e:f0:aa:10:4c:
ac:56:f0:91:e5:59:62:e4:f2:40:a7:50:9e:87:7b:48:18:f2:
fb:cd:d1:74:2d:86:da:af:80:1d:9b:a6:d4:74:40:10:fc:03:
6a:e7:ce:49:d7:41:0a:2d:66:87:a0:97:96:35:ce:2c:73:c8:
96:ea:7a:d2:f1:bb:99:c2:81:62:6d:06:ab:f4:4a:d1:35:9e:
9f:c2:f6:39:52:70:d3:98:82:ea:27:44:8b:5a:96:d3:64:e9:
15:99:5d:3b:8b:fe:80:d4:5c:af:04:12:a8:9c:92:15:f9:cc:
40:b4:c0:6a:7a:6d:c2:28:ff:52:c1:78:8a:9b:ea:4e:25:69:
ec:d0:4d:75:b5:8a:2f:fc:0c:be:da:4d:26:1c:89:bb:77:ce:
17:d0:09:81:94:1c:43:25:72:d7:51:ad:1e:3f:5e:e8:5e:19:
c1:a0:84:e0:d8:db:e4:a8:0c:86:14:63:0d:33:66:53:91:d2:
59:e9:0c:0f:68:a2:0e:2a:d1:bb:b3:44:44:39:ba:d2:54:41:
56:5b:2d:28:23:03:28:9c:0d:5e:2a:22:e1:ee:c5:2f:f6:af:
91:ee:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org