Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mPY4cp0sagQuEJM6sq9-CoayTrM.roa
File: mPY4cp0sagQuEJM6sq9-CoayTrM.roa (raw, json)
Hash identifier: +C6ex/ZFo3fk5vBGi5fKkcpYTOPtbMZgmRWT1tv/+iM=
Subject key identifier: 98:F6:38:72:9D:2C:6A:04:2E:10:93:3A:B2:AF:7E:0A:86:B2:4E:B3
Certificate issuer: /CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Certificate serial: 8AA3E5
Authority key identifier: 98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mPY4cp0sagQuEJM6sq9-CoayTrM.roa
Signing time: Sat 01 Jan 2022 04:51:32 +0000
ROA not before: Sat 01 Jan 2022 04:51:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29405
IP address blocks: 45.81.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9085925 (0x8aa3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893cc6db87d69cf5d01a9f96cf6bc3c8397ad80
Validity
Not Before: Jan 1 04:51:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=98f638729d2c6a042e10933ab2af7e0a86b24eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:3c:c0:87:39:fc:22:0b:7d:02:15:a8:3a:
34:36:94:ba:6b:a6:46:ea:f0:6c:10:d2:38:7d:2e:
d0:be:69:77:a8:a4:a4:8a:d9:23:46:53:aa:c0:11:
9e:bb:46:b0:63:f5:73:f9:1c:72:92:7d:e8:6c:53:
33:89:fb:42:53:59:fa:7f:6a:12:87:51:40:ee:58:
84:2c:3c:75:1f:5b:01:9c:77:cb:22:ec:c4:38:29:
d4:b5:e6:73:81:92:6a:d2:57:3f:bc:f2:98:9c:24:
ba:d6:e2:86:0d:e1:98:b5:49:5c:24:0b:46:3e:63:
68:5c:5a:0e:fc:e9:d3:3c:18:82:b2:a7:12:82:94:
ed:c4:77:01:74:e8:7d:69:00:be:b3:5d:25:95:29:
d7:55:3a:42:9a:15:45:7c:46:b1:22:5b:13:df:d2:
0e:7f:61:27:7b:f1:c0:d3:a4:01:72:a5:9a:4c:53:
ce:58:0a:ad:b5:ed:20:c2:2a:6c:d6:a0:f4:0b:eb:
07:d8:9b:c8:36:20:c4:5b:77:f9:65:b9:ef:97:c5:
ad:ed:6d:47:4d:ca:82:e7:6d:a8:0c:39:dd:f0:bb:
a0:85:c8:88:52:c9:a9:f1:8f:1e:0b:76:fa:a7:64:
53:08:e4:78:09:60:07:f1:b4:dd:3f:6b:80:52:9a:
d4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:38:72:9D:2C:6A:04:2E:10:93:3A:B2:AF:7E:0A:86:B2:4E:B3
X509v3 Authority Key Identifier:
keyid:98:93:CC:6D:B8:7D:69:CF:5D:01:A9:F9:6C:F6:BC:3C:83:97:AD:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJPMbbh9ac9dAan5bPa8PIOXrYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mPY4cp0sagQuEJM6sq9-CoayTrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b9fe82-3cc4-4713-9b7c-991662c02fb4/1/mJPMbbh9ac9dAan5bPa8PIOXrYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.240.0/22
Signature Algorithm: sha256WithRSAEncryption
20:03:db:ae:24:ad:49:be:1b:a5:06:8b:88:60:55:4d:64:d0:
f8:e6:d7:52:b2:ed:9a:01:b6:23:ad:0f:ba:ec:89:ea:a6:50:
b7:00:34:94:c8:c0:87:ea:6e:e1:1a:86:54:1f:f4:88:f8:b7:
a8:35:67:68:bf:f7:8c:b0:47:44:96:dd:b3:07:49:81:23:b5:
63:3e:44:b8:e6:84:f0:a7:c6:d7:42:7c:0c:7b:d1:6d:ad:6b:
dc:32:9b:89:b8:f0:a3:f9:71:30:4a:7e:8c:40:ab:bf:3d:49:
8b:56:61:c1:de:4c:32:e1:e7:45:17:12:d2:ce:54:6e:9f:c2:
d9:53:28:c4:4c:ef:61:32:9a:48:fc:e7:04:67:8a:6b:e3:1d:
c7:ed:90:a1:99:71:89:b5:d7:15:26:81:9c:e0:d3:93:9a:66:
dc:73:73:a3:29:ec:b2:51:b8:da:b8:16:89:4d:8e:f5:8f:7e:
ab:06:0b:fe:7f:71:c6:96:12:6a:79:7e:28:49:6e:ef:a1:dc:
cf:06:41:07:5d:d4:c0:a0:7b:e3:0d:57:46:0f:b1:1f:40:2c:
75:35:3c:85:05:f2:aa:99:8d:6c:d4:5b:cd:c7:f1:cd:6b:0f:
7a:58:84:ae:e1:5a:6c:14:93:f9:42:4c:87:90:a4:83:63:f8:
8c:33:4b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:05 2024 by rpki-client on console-ams.rpki-client.org