Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/9geiU70mLwB1BPcefPCbUcvhZBo.roa
File: 9geiU70mLwB1BPcefPCbUcvhZBo.roa (raw, json)
Hash identifier: c5i4PB+XVrSZErV43Y+PKZqsLu4LtJOw/B4DVKHCFgY=
Subject key identifier: F6:07:A2:53:BD:26:2F:00:75:04:F7:1E:7C:F0:9B:51:CB:E1:64:1A
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01856F9DC0D799090AE6DF3525FE44102F3F
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/9geiU70mLwB1BPcefPCbUcvhZBo.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 45.140.7.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c0:d7:99:09:0a:e6:df:35:25:fe:44:10:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f607a253bd262f007504f71e7cf09b51cbe1641a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:c9:1a:0a:1c:46:09:a1:43:2e:37:44:83:
36:fe:de:d7:f7:1d:0c:e5:6c:24:b1:51:e3:8b:ca:
8d:c4:2f:7e:a0:f2:26:ce:20:30:69:28:64:37:bb:
9d:02:1e:7a:83:06:94:a4:6a:25:87:48:3f:f9:aa:
ad:a9:6a:8e:58:18:3c:2d:d6:4b:b1:7d:90:69:f9:
dc:0c:20:19:2b:a9:53:7a:90:59:26:76:1b:7b:71:
91:4a:78:3b:06:f8:7a:27:92:12:4a:fe:40:f3:24:
8e:f5:e8:7a:e5:e2:e5:89:0d:bc:9c:ea:cd:9b:78:
bc:b7:a7:91:9f:eb:ad:16:ef:42:c5:47:d4:d3:55:
7f:45:4d:50:56:0b:6c:89:6c:49:14:05:ad:17:66:
64:5b:5d:53:f0:41:f6:2e:5a:40:34:90:83:f4:c9:
cb:e6:31:fa:60:53:46:3e:ad:ec:b1:c8:55:1e:5c:
e8:c4:5a:e0:ca:bd:92:2b:f2:2a:2b:9c:2d:bb:92:
fb:de:c4:0c:b0:0d:a1:31:f7:1b:51:ec:d5:5e:ca:
3a:28:b8:80:5c:0f:ed:72:7f:70:86:2d:e7:2f:5b:
cb:12:37:4b:88:65:10:68:2f:d3:33:23:63:c3:68:
16:28:fb:38:71:71:06:0d:76:1d:23:51:35:00:27:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:07:A2:53:BD:26:2F:00:75:04:F7:1E:7C:F0:9B:51:CB:E1:64:1A
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/9geiU70mLwB1BPcefPCbUcvhZBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.184.0-45.130.186.255
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
be:01:49:96:7d:3d:0d:34:35:fc:26:5e:ac:0b:0e:3d:2b:b1:
43:17:5d:89:c3:e0:9d:cf:ce:11:f4:bb:cd:55:8e:b9:f6:06:
61:c7:29:8c:e0:42:ba:91:17:ad:d4:d1:14:d9:f0:b4:6f:74:
c7:fc:d1:0d:ce:8f:93:30:24:98:3c:c6:3f:8d:7f:a5:b0:29:
ca:12:ed:6a:a1:de:4c:fb:2c:c2:9b:e2:75:dd:68:06:7c:7f:
8e:ea:5b:e2:e3:3d:9d:1e:b0:3a:63:16:40:22:4b:b5:dc:b0:
3d:e2:d6:a7:dc:80:59:bf:36:30:8e:ec:34:7d:d2:64:3b:04:
10:90:62:96:ee:eb:bf:bc:b3:a8:3f:5c:0b:a4:bf:64:f6:6f:
dc:27:98:6f:5b:1c:62:eb:d6:d2:66:7f:d5:d0:47:6b:f0:0d:
95:4f:da:ac:27:c9:95:81:cd:2b:86:79:a1:9c:1d:73:9d:54:
7f:e0:86:fb:95:b8:7f:61:7e:16:f2:37:9e:de:3f:6d:56:f8:
c4:33:e3:4c:0e:a4:c8:1b:33:c4:b5:bc:38:78:17:65:c9:55:
8a:d7:eb:f9:9a:2e:28:5e:94:2b:a3:db:05:1b:db:e0:f0:07:
18:a5:cd:81:e8:00:7a:d5:2e:05:0a:12:04:6d:a3:f6:8c:10:
b2:a1:9e:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org