Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/HAPGrIxq5BEBYEiQ_qQYp-w-WDc.roa
File: HAPGrIxq5BEBYEiQ_qQYp-w-WDc.roa (raw, json)
Hash identifier: Bcekmn2uspRk2vvdPQEeFhf7SOpg5AuDyBDqVpxh2p4=
Subject key identifier: 1C:03:C6:AC:8C:6A:E4:11:01:60:48:90:FE:A4:18:A7:EC:3E:58:37
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01856F9DC01FC1D2AD73D020D5A246AEE0F1
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/HAPGrIxq5BEBYEiQ_qQYp-w-WDc.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.140.7.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:c0:1f:c1:d2:ad:73:d0:20:d5:a2:46:ae:e0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c03c6ac8c6ae41101604890fea418a7ec3e5837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:bd:cf:69:a4:d8:67:3a:a3:63:38:eb:b7:
f0:40:32:5e:c0:e6:77:df:e0:db:10:c2:e3:2e:73:
7f:18:3a:03:79:c3:8d:14:30:24:5a:a8:b0:f4:98:
56:ab:21:f6:a9:39:db:c9:d3:01:ec:77:7c:c9:b4:
8a:36:3b:4d:f4:ae:b7:80:f7:e8:d0:64:d8:b0:3b:
28:37:03:bd:54:be:b8:60:ac:d7:af:ef:34:52:38:
e1:f9:91:1b:d0:4a:88:b4:30:fd:7d:51:34:5f:1f:
88:f8:5c:58:87:fa:aa:97:fa:be:e7:c8:99:80:89:
cc:cb:1e:8a:48:34:20:02:b5:de:4f:c7:a0:c4:ff:
50:ae:68:b5:1f:a6:75:4b:a3:ab:e6:d5:84:9b:84:
46:98:8e:50:5c:21:da:99:14:7e:a9:b6:b2:2b:5f:
1f:71:b1:aa:9c:7f:b2:7a:bf:fc:9d:9b:5b:2f:2d:
3e:ee:0d:68:2c:4e:80:fb:8b:1f:b1:c0:02:e8:3c:
69:cf:e1:1b:63:4b:1b:e6:3d:15:23:40:4e:45:69:
f4:2a:0a:79:57:dd:8d:4d:fa:34:86:c7:1b:3e:aa:
c4:92:c2:ec:42:fa:03:77:93:c4:bb:20:36:2f:75:
0b:86:98:77:58:6f:37:80:ee:90:60:27:7c:6b:b9:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:03:C6:AC:8C:6A:E4:11:01:60:48:90:FE:A4:18:A7:EC:3E:58:37
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/HAPGrIxq5BEBYEiQ_qQYp-w-WDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.184.0-45.130.186.255
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
00:58:55:1f:d0:e5:75:37:60:fb:02:5b:90:56:49:16:9c:21:
08:06:9b:04:0e:e9:2c:4e:1f:35:e7:ec:47:86:94:43:0f:4b:
13:8f:ce:a0:e4:47:7d:3b:e6:fb:b6:26:a0:42:98:76:ef:99:
e7:4c:18:fc:d0:cc:c9:55:9d:a0:8d:ea:34:c2:16:51:8b:e9:
30:41:02:b5:9b:c2:30:a1:cb:06:88:d2:a4:bf:e9:4e:e9:2d:
e3:3e:ed:93:15:01:61:82:81:5f:cc:40:b9:c5:df:a9:92:c8:
f8:b5:f2:50:45:8f:98:05:70:e7:cd:2f:c3:68:96:e2:2b:90:
d1:c4:44:1e:54:12:93:02:c5:f5:37:c2:28:34:b6:59:f4:73:
6b:ea:a2:da:b8:4d:1d:9c:bb:bd:72:94:07:02:2b:4f:ed:0b:
6f:55:a6:51:da:ef:02:27:f9:6f:3e:21:e9:b7:b8:c4:da:35:
cc:52:e6:a8:6a:72:dd:f9:d2:17:ee:38:8c:60:64:dc:73:32:
a1:cd:05:80:df:32:03:26:be:0e:6a:85:96:8a:0e:76:93:b6:
85:2c:d7:57:4f:13:e4:2a:ca:42:a1:2f:29:6d:eb:56:e9:de:
c6:d0:33:7d:4c:2d:8f:bd:a0:47:60:01:71:62:90:bb:e0:aa:
10:fb:4b:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org