Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/2JleY7LdSUXZdd8mjtVRfUaaf1w.roa
File: 2JleY7LdSUXZdd8mjtVRfUaaf1w.roa (raw, json)
Hash identifier: 41sUebX+s1rAt8Vwp68VZ+yLN1AKzXbkfrxDkQp05YM=
Subject key identifier: D8:99:5E:63:B2:DD:49:45:D9:75:DF:26:8E:D5:51:7D:46:9A:7F:5C
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 0181D5449217A3B948509BDA25F785147370
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/2JleY7LdSUXZdd8mjtVRfUaaf1w.roa
Signing time: Wed 06 Jul 2022 20:47:29 +0000
ROA not before: Wed 06 Jul 2022 20:47:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.140.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:44:92:17:a3:b9:48:50:9b:da:25:f7:85:14:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jul 6 20:47:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8995e63b2dd4945d975df268ed5517d469a7f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:b4:77:06:79:2a:76:9c:6d:48:af:45:e1:
95:fe:48:ec:a4:15:a6:e3:cf:57:c3:8a:54:b6:66:
15:a1:71:fd:63:45:ec:30:b7:ad:e5:1a:d9:f4:4d:
80:ac:95:c8:98:64:c2:77:1f:b0:00:96:f2:d3:70:
b0:b6:18:c7:25:ac:c7:f3:46:a1:69:c5:d8:e3:87:
b2:96:57:b4:de:51:36:fa:1f:31:6f:9d:fc:7e:24:
95:4d:79:c1:cb:f4:27:82:0a:cc:6a:9c:77:3c:4a:
38:32:68:95:e6:91:d1:39:69:16:92:c6:9c:8a:3a:
4e:c2:aa:cf:34:a5:b2:4e:3c:54:7d:ca:54:6a:76:
98:42:c0:f4:ee:69:30:14:e5:cd:11:e8:e2:17:6a:
6c:6b:bc:96:2c:2d:62:bb:28:90:d6:4c:dc:5b:51:
6c:f4:ee:1f:84:17:53:95:85:b1:09:c4:23:f3:42:
b8:d9:0f:66:80:21:c2:68:26:6d:a6:b5:54:82:b1:
b3:21:05:e2:2c:34:7a:1c:a4:c1:0f:c0:16:3a:27:
50:fd:a3:9c:85:7c:86:43:48:4e:9f:eb:30:0e:46:
1c:fb:22:1b:8a:69:23:f9:69:16:a2:c1:df:40:f0:
d6:ee:03:36:35:86:da:5f:23:1d:8b:f0:29:56:ec:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:99:5E:63:B2:DD:49:45:D9:75:DF:26:8E:D5:51:7D:46:9A:7F:5C
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/2JleY7LdSUXZdd8mjtVRfUaaf1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:eb:b7:22:ea:7c:47:ae:fe:90:d0:d4:b2:a8:e1:fa:2a:6a:
00:be:1f:63:a0:77:54:2d:04:5e:6d:ed:49:9c:9c:ca:e6:3b:
4c:50:df:87:ba:01:69:a6:f7:ae:dd:d4:76:2b:71:a4:14:74:
2d:eb:26:d9:02:e1:23:66:c9:6f:47:9f:45:98:ee:29:2a:aa:
34:3e:e7:1a:3c:1e:2d:46:96:97:c6:ae:c3:88:08:59:1b:97:
37:fb:71:7d:86:b4:ce:53:26:d9:5c:43:29:76:dc:cd:b2:6a:
18:f1:6e:07:32:2e:e1:b0:9d:b6:46:23:dc:9a:ef:41:f3:3f:
91:4e:61:ac:07:4e:f8:1b:9b:21:74:8b:8c:7e:d7:3b:3a:14:
ea:e4:e8:33:64:18:39:b6:7b:d3:e6:39:8f:d4:5c:90:b3:41:
41:aa:e1:f8:fd:45:d5:39:71:b0:96:4d:c8:03:c7:16:1e:f9:
68:29:e0:d9:91:c9:d7:a1:e8:d5:50:af:73:7f:08:89:c5:aa:
a9:32:a9:60:f9:5e:81:fe:6d:2b:e9:71:89:17:fa:33:c2:8a:
72:61:80:24:d7:8a:a2:11:f1:2d:79:32:0b:6e:4a:2f:f6:7c:
a0:5b:a6:54:c2:67:ff:bb:69:dc:32:46:20:aa:fd:a0:dd:43:
29:07:ff:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org