Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/Ulpq0DW8-EobJOTZgnk2CrfJcAQ.roa
File: Ulpq0DW8-EobJOTZgnk2CrfJcAQ.roa (raw, json)
Hash identifier: 3IaaHC+kQxobUdqeAt1nkL3ItekGG2KCJlxZcnMLfzM=
Subject key identifier: 52:5A:6A:D0:35:BC:F8:4A:1B:24:E4:D9:82:79:36:0A:B7:C9:70:04
Certificate issuer: /CN=c732c680ce512d72f15c136293b737e098ac255f
Certificate serial: 018572E831E96B5E698E65FA571737268604
Authority key identifier: C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/Ulpq0DW8-EobJOTZgnk2CrfJcAQ.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 45.90.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:31:e9:6b:5e:69:8e:65:fa:57:17:37:26:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c732c680ce512d72f15c136293b737e098ac255f
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=525a6ad035bcf84a1b24e4d98279360ab7c97004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:fc:c9:50:5c:f9:55:b9:6a:b8:6b:ce:05:
8d:4a:5a:d1:73:57:c1:22:e8:4f:a9:d7:85:21:0d:
1b:68:a6:67:21:01:8e:94:7d:65:1a:cf:79:09:18:
8f:6d:40:0a:10:95:32:db:f9:d6:87:a4:33:24:83:
64:74:48:50:e1:58:8b:ec:1c:b9:61:04:f4:6a:29:
18:50:bb:ba:66:20:6b:5d:a8:70:46:ed:ff:93:96:
59:13:40:66:67:6d:11:b2:0a:23:dc:74:f0:bb:28:
c2:1d:cc:28:e5:64:2a:d4:61:47:bf:6c:47:21:7d:
de:d7:20:fa:b3:c4:76:e5:a9:d3:d0:25:79:73:e2:
19:17:ba:a0:c1:3c:a4:8f:29:8e:c3:dc:ec:52:15:
1b:e4:31:ae:ab:bc:80:d5:f5:76:62:6a:be:ce:f6:
6e:30:c5:93:f6:ba:ef:bb:02:db:ef:8c:f0:4a:c7:
f4:5f:04:19:d1:7e:32:80:42:24:70:eb:96:cf:a0:
54:c3:31:db:d6:26:bc:ca:0f:50:91:8a:9a:99:70:
33:14:32:60:3b:22:e6:4a:5d:97:96:2b:70:85:21:
00:e0:76:07:f1:9d:d0:d0:ed:23:dc:20:01:a9:3c:
8d:2b:ba:ab:c6:41:c4:dc:a0:d5:4c:4a:31:5a:69:
23:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:6A:D0:35:BC:F8:4A:1B:24:E4:D9:82:79:36:0A:B7:C9:70:04
X509v3 Authority Key Identifier:
keyid:C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/Ulpq0DW8-EobJOTZgnk2CrfJcAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/xzLGgM5RLXLxXBNik7c34JisJV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.184.0/22
Signature Algorithm: sha256WithRSAEncryption
26:fb:37:ba:15:3c:f0:ed:cb:10:1e:4e:c8:b6:d7:39:8f:57:
2a:48:04:04:ec:d8:0e:17:de:9b:7b:c4:d3:cd:f1:d5:a6:94:
37:57:98:4e:09:4b:fd:48:79:6a:7b:6c:66:ab:25:2e:2c:fe:
71:9a:83:07:5d:a7:b2:38:d5:60:56:86:c8:5c:e7:7e:6a:a6:
fd:fa:1a:86:47:a4:28:55:dd:31:84:8b:e3:5a:2a:54:ac:0d:
fb:dc:89:b5:58:25:05:31:2d:da:2c:b1:98:e5:04:2f:91:1b:
bf:10:13:22:3b:eb:40:d3:12:dc:db:d1:77:e6:25:92:1f:2a:
ad:83:bd:59:f1:04:a0:b1:6d:19:1d:08:a3:1a:92:b1:f2:ec:
7f:9e:cf:8e:94:bb:9d:aa:79:00:10:55:b8:b6:ed:f4:3b:3f:
d4:94:7c:22:f3:be:75:f5:93:46:15:87:f1:4e:05:16:98:98:
61:b5:ca:e4:d0:08:61:ee:02:8f:fb:d6:5c:8d:12:2a:90:74:
52:81:67:8c:ec:ca:0d:7e:7c:ab:57:23:3a:c6:1f:46:17:bc:
55:9f:5e:67:a5:07:52:ba:12:11:91:83:80:f3:2c:52:eb:44:
e3:97:58:cd:88:c9:5d:49:57:f9:85:36:99:b5:bf:61:73:99:
41:d9:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 8 15:33:52 2023 by rpki-client on console-ams.rpki-client.org