Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/vDgkWxCi4hPcXRMvImzhYxl0H_w.roa
File: vDgkWxCi4hPcXRMvImzhYxl0H_w.roa (raw, json)
Hash identifier: 5/Ys9coaYUIn4R1AJVxZA5j9tz2qn9YjdmYsvrH8aSg=
Subject key identifier: BC:38:24:5B:10:A2:E2:13:DC:5D:13:2F:22:6C:E1:63:19:74:1F:FC
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C4C76A7D47F57CD99829696211AB4
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/vDgkWxCi4hPcXRMvImzhYxl0H_w.roa
Signing time: Sun 01 Jan 2023 22:55:43 +0000
ROA not before: Sun 01 Jan 2023 22:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.137.97.0/24 maxlen: 24
45.91.139.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:4c:76:a7:d4:7f:57:cd:99:82:96:96:21:1a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc38245b10a2e213dc5d132f226ce16319741ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:18:f1:37:39:1f:a3:88:74:68:2f:1d:23:
82:cb:50:5d:f1:68:8b:cc:e2:7d:fa:a6:3b:0e:73:
15:38:d7:d6:92:62:5c:70:a9:75:48:52:70:24:23:
0a:ca:46:a8:a0:c7:57:09:0f:02:f6:8c:43:6a:e2:
da:f3:b7:be:a8:83:1e:5a:49:7e:76:52:e6:76:38:
f1:c7:4e:8c:3f:02:e9:4e:3e:c4:b6:16:fa:a5:fd:
9e:dd:d5:88:0b:a4:fe:36:e7:87:dc:e6:a5:3d:57:
0e:35:da:8c:fe:93:bb:fe:78:6f:e7:99:bf:eb:23:
03:72:44:a7:bd:4a:91:16:77:e2:0a:6d:0c:b5:aa:
7f:e0:ab:29:9a:e4:88:79:a4:da:d6:d3:84:42:24:
f4:d9:ef:11:65:22:e3:31:8b:01:3d:18:af:4f:3a:
be:fa:48:5a:58:84:0a:41:f8:21:0e:90:f2:41:c4:
19:19:54:2e:c7:cd:a6:55:20:38:12:e8:76:8d:6b:
6f:a5:a4:84:d3:35:c0:26:db:36:16:26:23:8d:60:
7d:f8:91:f1:a9:2e:7e:57:20:32:35:4e:7c:d0:b5:
4d:bd:ea:78:45:c7:26:1d:c9:5b:4a:cc:95:c4:74:
05:c2:83:d3:17:77:db:7b:c2:46:e0:95:39:74:bb:
6e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:24:5B:10:A2:E2:13:DC:5D:13:2F:22:6C:E1:63:19:74:1F:FC
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/vDgkWxCi4hPcXRMvImzhYxl0H_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.139.0/24
45.137.97.0/24
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
66:26:e3:60:17:c9:e2:41:85:64:b4:b6:b4:d1:81:2d:5a:c4:
cd:1b:c8:8e:c8:ca:0b:10:45:9f:da:8f:e7:71:df:12:a3:f9:
93:d5:a7:6d:8d:80:a5:2a:71:7c:ce:2f:fe:fe:9f:60:aa:16:
02:13:0a:ff:e3:16:72:d5:72:d6:86:1f:e1:4b:0d:95:5f:fa:
75:dd:94:e4:70:5e:dc:5b:54:2e:eb:4f:27:c9:6a:c0:a4:66:
66:f5:2b:ae:09:f5:e3:89:f0:64:72:ff:00:f7:b0:a2:25:f8:
49:40:00:ed:c8:35:fd:49:f8:fb:5c:f4:91:71:95:56:41:5f:
51:e3:03:ed:96:ad:e8:29:e4:06:73:c7:2f:8b:c8:df:97:42:
3b:1e:1a:37:9f:9e:e4:60:78:78:e0:7d:0d:d4:f4:71:99:d9:
af:15:7d:9e:fc:e8:7a:86:38:78:41:d5:a2:bf:2c:c2:33:f5:
8e:31:17:62:f9:9c:e0:88:22:cb:4f:d8:7f:12:18:a3:fe:3f:
49:c3:50:07:bc:f7:24:0a:8b:a1:f2:96:79:81:e1:99:d1:28:
8e:29:51:d8:3f:2b:27:62:56:ed:81:55:43:96:e7:d2:9e:23:
90:e7:40:b1:c2:3f:3e:07:e5:d0:e1:49:31:8b:e1:99:bd:4f:
36:a3:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org