Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/K42s1AH4jQaOClnKrePI125qPCg.roa
File: K42s1AH4jQaOClnKrePI125qPCg.roa (raw, json)
Hash identifier: t7nxgObhTPXZPt3qdOYutcO/Ql6FC2ieZWO8e71eynI=
Subject key identifier: 2B:8D:AC:D4:01:F8:8D:06:8E:0A:59:CA:AD:E3:C8:D7:6E:6A:3C:28
Certificate issuer: /CN=c732c680ce512d72f15c136293b737e098ac255f
Certificate serial: 018572E830883DB86F057F11EDD893EB3178
Authority key identifier: C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/K42s1AH4jQaOClnKrePI125qPCg.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.90.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:30:88:3d:b8:6f:05:7f:11:ed:d8:93:eb:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c732c680ce512d72f15c136293b737e098ac255f
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b8dacd401f88d068e0a59caade3c8d76e6a3c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:80:c7:ae:2e:cc:08:c5:6f:6f:d6:35:8f:
8d:6d:2f:89:4b:8b:4d:d6:bf:07:b6:8f:75:e6:84:
af:de:96:64:e2:5b:be:76:8a:c6:3a:b6:dd:de:68:
17:f4:6f:52:3a:8d:82:5f:5a:5a:b8:9e:ff:1a:17:
b1:8f:5e:82:dd:87:28:cd:bd:fe:ee:27:a4:c0:c8:
5d:8a:8c:62:a1:13:db:e3:5f:2e:4f:2d:ab:c4:3f:
af:0b:2f:f5:73:c1:60:a7:4b:01:06:d2:9b:ff:5c:
17:b3:cd:b9:7e:e8:9b:f9:b1:b4:f3:cb:48:5c:db:
46:45:bd:3a:b9:5f:33:84:a1:b3:8a:bd:27:fa:64:
6d:6a:cd:3e:ab:c6:8f:16:52:20:58:cb:fb:83:fe:
70:2d:0b:ff:75:7f:23:e9:3a:25:40:95:8f:4e:71:
83:fc:ae:9b:ae:0d:0b:11:5b:9e:8d:f0:3c:b0:d5:
ea:8a:df:8c:e9:4c:5f:3b:cf:2f:f6:86:90:bc:63:
32:2e:5f:34:2a:cf:33:bb:89:4a:5c:7a:66:6c:9c:
29:bd:3a:0d:e0:22:91:6d:c5:7e:07:09:bb:a6:59:
4f:f6:39:1c:27:47:27:59:31:c3:c0:e7:d3:1e:c4:
63:ee:74:c9:85:e5:f8:b3:fe:94:82:fd:22:6d:4f:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:AC:D4:01:F8:8D:06:8E:0A:59:CA:AD:E3:C8:D7:6E:6A:3C:28
X509v3 Authority Key Identifier:
keyid:C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/K42s1AH4jQaOClnKrePI125qPCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/xzLGgM5RLXLxXBNik7c34JisJV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.184.0/22
Signature Algorithm: sha256WithRSAEncryption
16:2d:c3:93:25:36:c7:8e:30:f1:47:6e:d1:e0:b8:7d:59:1f:
75:34:d9:6d:f6:c7:1f:ec:de:20:fc:6e:a5:2c:b6:f6:d7:11:
e2:67:5d:a7:a8:a4:15:dc:02:52:89:a8:21:f5:de:bb:34:eb:
e9:ab:73:13:6f:f4:26:fd:ee:10:8e:e3:be:a3:1d:f5:e6:45:
4c:7f:86:92:48:15:31:9a:15:97:56:5d:89:7d:69:45:ca:7f:
ca:d5:c1:b9:46:0e:96:8e:ed:70:87:47:1f:ba:a0:3b:30:a7:
92:e4:6d:fb:c7:91:77:00:77:ae:93:f9:a6:74:00:d1:4e:8a:
8e:c0:e9:06:ab:a0:39:89:c1:12:6e:6a:e1:ec:d5:ca:a7:89:
84:61:de:69:10:e3:8f:1d:1d:9a:7f:83:89:70:1f:1a:e6:39:
a6:53:14:9f:e2:04:5c:6f:2b:ff:4b:a8:da:06:80:8c:01:65:
14:3e:3e:ac:43:d0:10:fd:ee:37:51:70:d3:15:04:3f:9d:b0:
56:c3:c5:b7:37:bb:bc:77:9f:09:b1:6e:49:5d:f4:74:73:98:
e6:e1:7e:a5:a7:63:ca:96:99:a2:fa:e1:d1:ed:dc:dc:ef:55:
60:e3:1c:93:02:c3:3e:4e:55:da:ee:16:98:ff:41:59:78:a3:
ea:1a:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 15:21:31 2023 by rpki-client on console-fra.rpki-client.org