Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/leB90xD3eV8xDVIfgE0KrkjJUz4.roa
File: leB90xD3eV8xDVIfgE0KrkjJUz4.roa (raw, json)
Hash identifier: hofGDcBm6acFH1XddcaJfWabnMBXZNwDPCxTP9Q5wRA=
Subject key identifier: 95:E0:7D:D3:10:F7:79:5F:31:0D:52:1F:80:4D:0A:AE:48:C9:53:3E
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0186B346195743EC7737F97E9398727E11AC
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/leB90xD3eV8xDVIfgE0KrkjJUz4.roa
Signing time: Sun 05 Mar 2023 19:36:01 +0000
ROA not before: Sun 05 Mar 2023 19:36:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:46:19:57:43:ec:77:37:f9:7e:93:98:72:7e:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 5 19:36:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95e07dd310f7795f310d521f804d0aae48c9533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:e6:b7:51:5f:2d:09:45:47:94:28:a7:58:
ab:33:b6:04:e0:63:be:62:be:07:15:c9:ba:b4:a2:
88:51:b9:de:f5:67:f6:26:23:74:4d:5c:8d:82:9c:
62:94:79:63:54:c0:4c:37:0c:c1:68:26:73:bc:7b:
ef:13:e0:d2:fa:16:87:9e:61:e6:b1:42:41:8d:ca:
a6:3c:d2:28:a5:bf:f4:a8:ec:3a:c2:f3:49:67:ab:
d0:72:2c:9b:35:94:a2:b4:fd:82:74:b6:49:3b:a3:
3f:81:c9:28:3c:a7:70:d8:49:e3:7e:be:c7:2c:3e:
7b:f8:e1:58:69:4d:42:14:d5:66:e6:de:47:ce:17:
dc:19:0f:ef:66:bd:89:57:fe:11:45:1a:b6:60:7e:
7e:b1:ca:54:2a:46:cc:6f:71:5b:62:fe:8c:a0:e5:
50:b0:ef:2b:ab:fb:3f:89:ad:59:1e:2f:97:a7:57:
e1:e3:3c:d8:9e:f0:06:a8:23:ad:ff:47:c8:bc:c9:
35:d7:04:75:7a:50:a2:cd:a6:d6:ba:e6:9a:ee:cd:
e6:b9:2c:3d:05:ca:c1:dc:c3:39:65:fa:96:8f:4e:
5e:b2:0c:4b:c4:98:6d:dc:91:71:37:32:ce:6a:72:
21:9a:dc:12:60:ea:6b:d4:70:13:9f:a8:32:01:24:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E0:7D:D3:10:F7:79:5F:31:0D:52:1F:80:4D:0A:AE:48:C9:53:3E
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/leB90xD3eV8xDVIfgE0KrkjJUz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
45.87.173.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a0:e0:36:03:7d:69:94:4e:ff:22:1f:36:dd:57:e2:f0:48:
6f:cf:78:87:32:49:f6:d0:a9:92:16:53:0b:95:c6:f2:aa:ba:
2d:9e:03:c1:79:29:c0:bf:48:e5:62:7b:12:77:28:6b:3a:13:
20:9e:19:68:5d:89:04:56:d0:e0:e1:3a:80:26:af:2c:aa:e5:
7f:d2:de:2a:63:c8:e8:90:f8:9a:4c:ec:9e:84:eb:25:6f:b0:
d6:93:43:e5:64:17:ca:73:00:9c:e6:7d:2a:f0:5e:eb:8e:e0:
35:36:bb:e6:69:02:5b:9c:54:23:11:e9:9f:70:75:8c:2c:28:
4a:ec:72:be:23:31:4c:37:9d:31:3d:75:e9:8e:b5:16:eb:3c:
95:07:34:c4:86:da:31:43:08:1f:f2:f1:d8:e2:b1:0e:81:ae:
ef:a4:cb:b7:a2:aa:ae:09:0e:36:83:3b:40:24:11:62:61:17:
6a:c9:04:70:56:01:69:9a:90:a0:3a:8b:e9:db:6b:89:ea:6c:
e6:76:23:95:30:ba:71:b2:be:d6:41:48:db:fc:c7:8a:df:9d:
5f:9a:b8:92:65:13:8b:51:d7:0c:05:c2:2c:6e:c9:43:95:bb:
16:8d:3e:e3:2a:7d:05:ee:d0:c4:bf:00:08:5b:35:a8:11:ec:
4a:f5:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org