Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/mm8cOD4KyoTKqK2sv2_7a8LpGrs.roa
File: mm8cOD4KyoTKqK2sv2_7a8LpGrs.roa (raw, json)
Hash identifier: jQ5Off+m7ofsxrHfqgWiyUwYRnrWo/G4lRo+8dl54ns=
Subject key identifier: 9A:6F:1C:38:3E:0A:CA:84:CA:A8:AD:AC:BF:6F:FB:6B:C2:E9:1A:BB
Certificate issuer: /CN=046da5d90755218175f66f723b37d408b522b735
Certificate serial: 01857230FD99FA24C0AB34057F02B143DA70
Authority key identifier: 04:6D:A5:D9:07:55:21:81:75:F6:6F:72:3B:37:D4:08:B5:22:B7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG2l2QdVIYF19m9yOzfUCLUitzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/mm8cOD4KyoTKqK2sv2_7a8LpGrs.roa
Signing time: Mon 02 Jan 2023 11:14:51 +0000
ROA not before: Mon 02 Jan 2023 11:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 45.91.95.0/24 maxlen: 24
45.91.92.0/24 maxlen: 24
45.91.93.0/24 maxlen: 24
45.91.94.0/24 maxlen: 24
2a0e:dc0:5::/48 maxlen: 48
2a0e:dc0:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:fd:99:fa:24:c0:ab:34:05:7f:02:b1:43:da:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046da5d90755218175f66f723b37d408b522b735
Validity
Not Before: Jan 2 11:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a6f1c383e0aca84caa8adacbf6ffb6bc2e91abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d7:35:02:07:bb:5e:36:00:da:da:64:bf:05:
b9:e0:2c:04:b2:ae:68:5f:91:d3:88:90:3c:9b:1a:
4e:b8:54:c2:73:d6:17:ca:ec:1f:7d:2d:34:59:01:
99:b1:e3:e0:96:b6:17:be:69:dc:71:ff:8e:7b:52:
5f:2d:f8:f5:ca:25:a6:c3:8a:da:e5:24:6d:ad:45:
10:24:f1:fa:f6:5a:ff:50:36:39:79:ba:a5:9c:e1:
9c:ba:27:62:d6:2f:28:49:25:fd:aa:b6:eb:37:84:
12:e6:23:9f:6c:34:5a:a9:97:10:dc:66:8e:2f:50:
4e:92:bb:75:b1:ab:ac:4b:ab:77:dc:b2:d0:96:56:
2e:1d:95:bf:d6:4b:98:4d:aa:20:8a:10:c2:92:e8:
a9:95:6c:ae:0c:bd:b7:c4:42:af:39:ac:e6:49:91:
1d:87:87:9b:6f:5a:4f:89:76:01:0c:72:b8:47:34:
a3:4b:2b:9f:90:65:db:03:98:30:1b:8a:2b:cd:b6:
38:77:1f:4e:fe:ab:c6:43:c4:27:26:fb:09:e3:ce:
40:ce:38:22:4d:9b:fc:20:ac:a8:7e:7b:b4:59:d7:
46:d1:80:41:cb:c4:5b:da:58:9f:68:63:2d:d5:79:
fc:e3:25:ed:55:03:c5:fc:46:f8:21:9f:60:57:74:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:1C:38:3E:0A:CA:84:CA:A8:AD:AC:BF:6F:FB:6B:C2:E9:1A:BB
X509v3 Authority Key Identifier:
keyid:04:6D:A5:D9:07:55:21:81:75:F6:6F:72:3B:37:D4:08:B5:22:B7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG2l2QdVIYF19m9yOzfUCLUitzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/mm8cOD4KyoTKqK2sv2_7a8LpGrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c5227a-d5ae-4e6e-9d80-a71e12b1bf2a/1/BG2l2QdVIYF19m9yOzfUCLUitzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.92.0/22
IPv6:
2a0e:dc0:3::/48
2a0e:dc0:5::/48
Signature Algorithm: sha256WithRSAEncryption
a3:ab:16:59:5f:67:d6:42:23:58:e4:61:c4:40:ac:6e:d3:69:
ee:aa:33:1d:83:41:c5:d8:a6:fd:dd:a9:1f:c5:e5:69:c0:fb:
26:43:9f:42:3e:40:61:43:07:d5:8b:e8:5d:68:56:85:56:7e:
d7:46:37:cc:b0:2f:89:90:b5:2e:34:00:d7:27:78:43:9d:97:
04:3b:97:6e:9e:79:4c:4e:c7:11:ad:11:34:b7:4a:1b:61:97:
cb:13:2e:c7:44:0c:87:4d:ac:72:f9:3c:94:b6:ed:b8:c9:d3:
1d:b9:5d:cb:f2:ad:53:d6:4d:9f:5c:48:b2:27:7b:9f:24:7a:
63:cf:c6:2c:28:2c:aa:fd:a6:0a:fa:37:3c:33:39:81:1b:48:
96:2f:d0:c0:19:8f:5a:10:85:d8:17:b1:3b:eb:43:42:2a:ed:
73:7d:98:a0:f6:3f:a0:15:2b:e1:47:65:8b:e8:fe:24:4a:36:
81:f6:b3:a6:66:36:40:5c:48:a3:79:4f:65:e4:e0:f7:1b:fa:
7e:dd:22:d5:d7:2e:3b:ff:50:1c:18:31:88:90:47:d2:93:5d:
5b:da:9a:59:dd:c2:11:c6:39:1c:cf:b5:46:00:4e:31:67:5e:
c8:1d:1e:14:51:2e:d1:46:94:56:4d:e6:b8:94:a2:a4:74:08:
ab:f7:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:22 2024 by rpki-client on console-ams.rpki-client.org