Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/0pGA7120DE6sEFBtZkXuapy6aLg.roa
File: 0pGA7120DE6sEFBtZkXuapy6aLg.roa (raw, json)
Hash identifier: mh+w1bwhTfbRTNRRvcftpf5nl1T4Pee9nvurTFP/4s8=
Subject key identifier: D2:91:80:EF:5D:B4:0C:4E:AC:10:50:6D:66:45:EE:6A:9C:BA:68:B8
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01835F5A82BFA3F4319C3327FC4754FE5085
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/0pGA7120DE6sEFBtZkXuapy6aLg.roa
Signing time: Wed 21 Sep 2022 09:21:50 +0000
ROA not before: Wed 21 Sep 2022 09:21:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 45.159.21.0/24 maxlen: 24
45.159.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5f:5a:82:bf:a3:f4:31:9c:33:27:fc:47:54:fe:50:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Sep 21 09:21:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d29180ef5db40c4eac10506d6645ee6a9cba68b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:f8:0f:be:69:a4:a1:c1:0b:61:83:e6:25:
9f:10:e1:f4:b3:ac:44:e1:f7:39:7b:36:ea:82:21:
98:27:4e:26:87:d9:20:29:db:f5:1c:80:cb:2b:d8:
11:95:9a:05:ce:60:f8:15:aa:ae:46:84:2d:58:c1:
5d:a6:8a:04:9c:c0:9d:03:69:4b:99:0e:3a:af:57:
86:a2:14:b2:03:de:02:6c:34:ab:7b:67:cb:e1:55:
69:6b:c4:97:4f:4f:68:1f:80:b6:aa:7b:5b:ee:46:
31:56:d8:d1:b2:94:da:10:73:fe:c8:d6:e5:9d:36:
b6:c1:0f:bb:d6:7c:97:e8:0b:61:dd:d0:b1:d6:06:
40:be:a3:e4:9a:84:b2:1c:83:cc:20:01:4e:68:af:
18:8a:42:8c:08:08:8d:e4:c1:3e:6b:d9:23:a6:4a:
b0:14:71:12:f0:d3:3f:f5:14:c2:e8:60:a3:12:88:
ef:24:20:59:19:78:de:48:94:e3:45:fc:79:41:b7:
5a:7e:bb:60:8f:12:99:0e:9b:80:3d:20:ce:b7:15:
90:fd:81:b1:db:11:5a:b5:7e:b7:63:40:dd:80:5a:
4c:6d:48:52:19:35:1c:ca:45:97:2d:7d:ef:34:e7:
ed:df:a0:08:f7:7d:41:45:ee:7d:c2:fb:24:36:bc:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:91:80:EF:5D:B4:0C:4E:AC:10:50:6D:66:45:EE:6A:9C:BA:68:B8
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/0pGA7120DE6sEFBtZkXuapy6aLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.21.0-45.159.22.255
Signature Algorithm: sha256WithRSAEncryption
c4:20:97:7e:5b:5d:63:c7:19:d9:66:e3:f7:9f:82:ab:ae:36:
b7:d6:97:b6:c9:bf:6d:98:de:40:af:58:ab:4a:b0:d7:74:79:
81:b4:33:06:54:a0:5c:57:f9:24:03:1c:99:f2:c1:b1:5a:67:
4c:29:f6:68:4a:d6:e9:2d:0e:00:12:94:26:3e:8e:d7:c0:da:
17:44:62:9a:d9:c9:e6:dc:50:ee:86:38:df:05:76:82:ea:a3:
f2:03:9d:c1:7d:e6:d8:de:b8:f2:44:b3:4d:cd:8b:31:c0:cd:
2d:5e:b2:c6:bf:79:c9:10:ca:df:06:d3:d0:5e:ef:fe:15:78:
1b:20:77:04:17:5e:63:bf:ad:7e:19:3a:0c:d4:82:4c:83:87:
1a:cc:d9:84:93:1c:19:52:6a:88:36:88:32:38:a0:23:39:fe:
48:12:fe:d2:19:47:57:52:72:7c:04:f0:66:c5:53:46:b3:3d:
d3:3b:c2:b5:cf:57:3d:0d:a5:a5:39:9f:ec:7a:ce:75:bd:56:
d2:82:a3:cc:1d:95:b6:ee:af:28:26:c7:c1:ab:bf:44:78:3f:
2e:0a:52:58:4f:dc:48:49:22:b9:c8:b0:7c:4c:f5:53:22:1e:
65:90:37:da:70:26:18:f5:c1:b5:28:8a:93:b0:3e:ab:b5:0d:
ca:53:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org