Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tAMc1E420KEz6TJ4Vd4EHAnkyVY.roa
File: tAMc1E420KEz6TJ4Vd4EHAnkyVY.roa (raw, json)
Hash identifier: d98vcWxnZ4VnpmoSC5nUP0nn39Hz55/XypprE/pJ9Go=
Subject key identifier: B4:03:1C:D4:4E:36:D0:A1:33:E9:32:78:55:DE:04:1C:09:E4:C9:56
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018207CE806AA867F7FB4B99849F5AF116D8
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tAMc1E420KEz6TJ4Vd4EHAnkyVY.roa
Signing time: Sat 16 Jul 2022 16:19:09 +0000
ROA not before: Sat 16 Jul 2022 16:19:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 45.137.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:07:ce:80:6a:a8:67:f7:fb:4b:99:84:9f:5a:f1:16:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jul 16 16:19:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4031cd44e36d0a133e9327855de041c09e4c956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:a5:7a:ee:13:fa:a9:e1:61:f9:23:a4:94:
90:13:b8:6d:e6:71:a1:0c:6e:fe:05:ee:43:90:52:
4a:ad:2c:b3:06:e6:6e:fb:79:08:ea:f1:2f:a8:ad:
3f:88:c1:8a:ea:9f:73:02:52:26:c3:b2:cf:6d:61:
cd:08:7b:c2:e8:75:4f:96:74:ff:99:eb:f4:bb:81:
10:a8:c2:d4:0b:c8:37:0e:f0:e9:46:c6:91:bd:30:
0b:93:bb:fd:eb:76:b8:f3:f1:53:b6:63:ac:5a:5f:
cc:39:e7:43:ec:02:17:4b:05:94:4c:a5:c8:96:2d:
94:1a:c7:ec:77:90:7c:24:69:8f:e9:e5:84:4c:28:
48:1d:bf:9e:c4:6f:21:c2:52:15:dc:ba:7e:5b:31:
eb:9e:40:d2:6c:0d:a4:24:d6:c7:8e:05:02:a4:0c:
a6:3b:c8:bd:17:32:71:42:4c:27:77:4f:df:41:0e:
62:7c:b2:01:65:cf:49:a3:e2:88:72:b9:5c:85:15:
cc:b3:2d:ec:ca:6c:13:0d:08:58:bb:7d:67:e7:c3:
a0:ac:e2:b3:57:01:3d:71:b9:c2:20:a1:df:4f:5c:
4c:e9:b7:9c:52:13:a8:02:6a:07:30:a8:fa:fe:e6:
05:62:c0:cb:cc:39:df:bd:38:21:b2:79:7f:c1:7b:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:03:1C:D4:4E:36:D0:A1:33:E9:32:78:55:DE:04:1C:09:E4:C9:56
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/tAMc1E420KEz6TJ4Vd4EHAnkyVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:62:d6:b9:2b:1c:31:60:55:41:b0:f2:b2:1a:8e:d9:0a:08:
0d:3e:f5:63:76:29:5f:80:cf:56:fc:7e:e7:08:4d:03:1c:f0:
8a:9b:55:de:08:cd:de:62:4b:af:a0:38:06:59:56:7a:1a:ad:
d4:9d:6e:66:6f:b7:75:76:e3:65:f8:1e:64:01:1f:c7:e5:a1:
16:e0:1d:38:c3:8a:57:5c:c1:ab:03:5f:00:85:f4:8f:57:63:
8d:5e:f8:97:e9:43:5a:d5:41:2b:83:fb:8f:c1:a1:0c:50:31:
c3:35:ed:fe:a0:c1:e6:a1:2a:8c:fb:8b:c4:9e:7d:98:05:99:
70:33:32:14:3e:a1:73:20:1f:8b:2e:5b:65:1b:af:af:66:ea:
52:d9:a8:a7:7b:e7:11:d4:ab:c9:84:8b:d6:05:41:37:12:6e:
c8:08:4e:d7:ea:90:1f:12:da:69:9e:2b:6f:01:10:c1:d7:89:
1b:1a:79:83:da:47:7e:4f:d0:a3:f4:61:a7:a6:96:93:91:88:
4e:b2:0a:8b:66:71:dd:9e:1c:9b:b1:5b:9d:3d:b4:61:b6:54:
0c:09:be:ee:d4:94:17:62:fb:18:d5:b9:64:d1:b2:35:ba:26:
ab:56:80:e1:3b:a9:ef:9d:98:90:92:08:33:03:45:4a:92:d6:
8f:93:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org