Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/Ma4X-xkYxjJZ_QDeRLW2k3rU1YQ.roa
File: Ma4X-xkYxjJZ_QDeRLW2k3rU1YQ.roa (raw, json)
Hash identifier: fDRCm0UmjN2UMjRkHnZdxIT5h1nf87VjJqEkKxr+m/I=
Subject key identifier: 31:AE:17:FB:19:18:C6:32:59:FD:00:DE:44:B5:B6:93:7A:D4:D5:84
Certificate issuer: /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial: 018437474CAC5567B54442B9644CA6E2C275
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/Ma4X-xkYxjJZ_QDeRLW2k3rU1YQ.roa
Signing time: Wed 02 Nov 2022 07:38:50 +0000
ROA not before: Wed 02 Nov 2022 07:38:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 45.81.240.0/24 maxlen: 24
45.81.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:47:4c:ac:55:67:b5:44:42:b9:64:4c:a6:e2:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Validity
Not Before: Nov 2 07:38:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31ae17fb1918c63259fd00de44b5b6937ad4d584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:55:9e:8e:da:73:d8:d4:93:82:8d:79:e3:
b0:c3:6e:1a:ce:08:83:56:80:29:46:b7:ab:95:c3:
52:df:e8:d5:66:e0:78:45:88:57:4b:83:6e:aa:65:
a8:c2:39:a6:ec:37:51:6e:33:fb:02:27:00:ce:de:
8e:80:24:75:f3:98:8a:76:9e:6e:59:8e:ad:aa:c4:
d2:c2:46:c4:fd:5b:ae:b7:70:df:04:4c:ae:23:25:
e5:cd:7f:82:81:47:3f:e4:87:be:67:60:e0:62:e0:
42:77:69:24:27:10:02:9e:1d:f6:34:d7:fb:66:db:
0a:10:8b:be:0e:ac:ac:04:be:e4:27:cd:5a:f3:6c:
be:13:5c:47:50:2e:9f:e4:28:47:3f:c7:9e:80:3d:
e0:f8:d6:bd:71:da:7a:b6:74:27:70:b4:86:49:93:
4d:ae:70:6b:de:b6:15:06:e6:f5:92:18:67:2f:6a:
05:1b:b6:3a:92:6d:3f:9e:3b:22:6b:7e:8f:1e:c0:
04:ac:99:21:96:2c:d1:b1:3a:b3:21:58:17:2d:e1:
80:b4:24:39:01:36:7e:c1:d2:58:9a:5d:fc:df:10:
cc:95:07:57:5f:82:da:ab:01:ee:49:54:63:7f:41:
3f:59:9b:9e:de:25:71:7a:00:69:d2:b9:e3:9f:a2:
5c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AE:17:FB:19:18:C6:32:59:FD:00:DE:44:B5:B6:93:7A:D4:D5:84
X509v3 Authority Key Identifier:
keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/Ma4X-xkYxjJZ_QDeRLW2k3rU1YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.240.0/24
45.81.242.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d6:a4:c2:47:ed:93:bf:39:66:0a:12:51:43:23:23:52:a8:
55:50:ea:16:88:a1:b0:c0:04:0e:80:2a:84:51:0f:09:49:c1:
e8:7a:01:a3:ab:9e:3f:93:cb:01:b2:45:49:c5:a2:47:de:dd:
8f:71:62:17:a0:48:c4:72:f6:ea:ac:1a:63:0f:23:39:b3:98:
17:70:d0:79:55:78:bc:9f:0e:fe:6d:59:a9:43:28:a3:ef:72:
9b:e7:04:2c:1d:e0:a1:fe:ee:ea:71:0c:18:ea:bc:70:ac:ed:
af:4e:34:d8:80:63:ec:4b:eb:97:56:4e:fe:2a:30:8d:45:ef:
c6:4d:cb:29:fb:8d:63:ab:b1:24:25:bb:2b:75:05:a2:c6:fd:
40:21:e0:e9:01:8d:8b:6a:86:e4:e1:3c:28:d9:0b:2b:9f:38:
1b:a6:e4:b7:a6:7a:9e:4d:68:85:51:11:ec:5c:27:72:f5:27:
e1:7a:1f:6f:53:49:cf:ea:60:92:e3:2b:70:66:b2:b2:7b:97:
80:3e:b8:54:44:a6:6b:dc:16:35:16:5a:63:53:2d:7c:6e:3c:
77:4d:ba:48:1f:13:6a:cd:02:d9:46:1e:f5:cc:f7:59:0b:ee:
54:29:4f:68:3b:82:ff:bb:b3:f0:54:60:9f:4b:4f:53:2b:2e:
cb:a9:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:05 2024 by rpki-client on console-ams.rpki-client.org