Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/7PKYfd0mSEy51sjXcl5VmktTXrc.roa
File: 7PKYfd0mSEy51sjXcl5VmktTXrc.roa (raw, json)
Hash identifier: EBuPp7LYaZBI/harZ5sLCTA3QLmjrZz0L99Q1cPSVoU=
Subject key identifier: EC:F2:98:7D:DD:26:48:4C:B9:D6:C8:D7:72:5E:55:9A:4B:53:5E:B7
Certificate issuer: /CN=ab2d4da2f52ac5d8c4c03ccc30615fa0a39088d7
Certificate serial: 01856D419706AE27CE14D76CDC518A2368A1
Authority key identifier: AB:2D:4D:A2:F5:2A:C5:D8:C4:C0:3C:CC:30:61:5F:A0:A3:90:88:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy1NovUqxdjEwDzMMGFfoKOQiNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/7PKYfd0mSEy51sjXcl5VmktTXrc.roa
Signing time: Sun 01 Jan 2023 12:14:53 +0000
ROA not before: Sun 01 Jan 2023 12:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208533
IP address blocks: 45.129.166.0/24 maxlen: 24
45.129.164.0/22 maxlen: 22
45.129.165.0/24 maxlen: 24
45.129.164.0/24 maxlen: 24
45.129.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:97:06:ae:27:ce:14:d7:6c:dc:51:8a:23:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2d4da2f52ac5d8c4c03ccc30615fa0a39088d7
Validity
Not Before: Jan 1 12:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecf2987ddd26484cb9d6c8d7725e559a4b535eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:84:b9:56:ac:fb:9b:d2:af:fa:a4:e9:4a:
af:0b:44:dc:68:c1:d3:86:a5:fb:17:89:07:3e:0f:
79:ce:40:79:22:f3:9a:64:ae:fc:11:02:5d:8a:7b:
b3:4a:f0:d3:e9:13:54:f0:a9:73:e3:21:11:71:95:
dd:fc:7e:23:54:91:73:76:82:81:6b:de:51:1d:8a:
f6:50:05:60:13:d5:f9:5b:23:e0:60:f0:13:60:29:
8b:bc:7c:ea:b5:a7:01:7a:f9:f8:1b:91:ec:00:4d:
a5:56:90:c0:42:cc:f9:23:7f:1b:b1:ce:5e:6f:d6:
7d:52:f2:c2:fb:f7:3c:50:77:a7:e4:0d:92:c4:9a:
40:cc:0a:9a:18:c3:9b:9b:62:a2:c8:54:ae:84:97:
99:45:62:03:17:58:b2:15:b7:8a:df:20:19:d4:10:
45:83:49:55:14:92:1a:46:fb:77:17:7d:9b:7a:60:
f5:cd:45:4d:93:df:6c:a8:a8:80:57:ab:49:2c:6d:
c8:d6:cf:d0:9a:cd:c6:ff:61:6b:91:26:1c:15:9e:
f2:57:7d:95:1d:b7:f2:c1:78:3f:29:20:94:9e:66:
f7:ca:4b:5d:7b:0f:93:84:a0:75:a8:71:0e:62:b3:
bf:52:b0:4e:c8:0b:9d:7b:7a:7a:e6:88:d6:58:52:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F2:98:7D:DD:26:48:4C:B9:D6:C8:D7:72:5E:55:9A:4B:53:5E:B7
X509v3 Authority Key Identifier:
keyid:AB:2D:4D:A2:F5:2A:C5:D8:C4:C0:3C:CC:30:61:5F:A0:A3:90:88:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy1NovUqxdjEwDzMMGFfoKOQiNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/7PKYfd0mSEy51sjXcl5VmktTXrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/qy1NovUqxdjEwDzMMGFfoKOQiNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5c:a5:46:53:1c:d2:1f:04:15:8c:e4:a0:2f:e2:51:a1:07:
62:12:cf:bc:21:37:52:f6:53:90:1b:69:63:e1:0f:79:01:71:
8b:d2:99:5e:dc:1d:79:e1:c7:69:f5:c5:26:8d:5f:8c:6c:31:
f7:51:c4:b4:3d:42:3c:5e:72:10:00:05:6b:72:8f:f7:b1:59:
a8:35:38:f6:ee:3f:37:bc:da:ec:84:18:f0:5d:d5:48:7d:51:
3f:45:38:8a:64:17:9f:00:0c:ae:a1:0d:aa:f4:22:74:b5:30:
28:ec:9b:1d:46:e5:b5:5c:1a:9d:47:f1:ba:88:f4:e5:ca:6a:
1c:b2:b3:8f:5b:c4:20:95:b3:37:a2:af:d1:df:e5:68:68:d2:
d5:e3:43:70:0b:25:86:90:4e:f1:f6:b2:48:25:6c:61:39:30:
61:fd:8c:27:fa:79:33:59:9a:53:26:2d:bf:b6:8e:0c:56:1a:
94:b0:c3:85:e6:11:68:7a:ab:95:e4:36:94:04:e2:54:6c:2a:
13:95:b1:ce:2a:0d:8c:c2:b3:d1:e7:a8:9a:a8:52:b1:c9:86:
1c:57:72:9e:6c:35:4b:f7:fe:d4:e9:22:1e:35:40:d8:a7:ad:
4a:7d:09:9e:17:7a:ad:f7:1a:7d:e8:0f:49:28:04:3d:3d:45:
93:99:53:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:21 2024 by rpki-client on console-ams.rpki-client.org