Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/YN1JPpUqLo0VCOLqgmIjJPJomGI.roa
File: YN1JPpUqLo0VCOLqgmIjJPJomGI.roa (raw, json)
Hash identifier: J2GOEFyonSSbs44lIQaHW+szgUIBDYsZ+HmyJDpoXwY=
Subject key identifier: 60:DD:49:3E:95:2A:2E:8D:15:08:E2:EA:82:62:23:24:F2:68:98:62
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 0181D54492FD93F9C5A6DEDC68E89801D869
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/YN1JPpUqLo0VCOLqgmIjJPJomGI.roa
Signing time: Wed 06 Jul 2022 20:47:29 +0000
ROA not before: Wed 06 Jul 2022 20:47:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 45.140.7.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d5:44:92:fd:93:f9:c5:a6:de:dc:68:e8:98:01:d8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jul 6 20:47:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=60dd493e952a2e8d1508e2ea82622324f2689862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:90:d8:bc:a9:6a:cb:a5:0c:91:80:e8:34:
6d:d0:01:53:03:65:04:44:f2:6c:ac:2b:e7:64:af:
14:0c:6e:11:44:e6:fc:3c:e1:99:db:83:33:16:e4:
9a:52:a9:56:85:0c:47:7d:03:20:0a:7c:76:7f:5d:
08:6b:2c:62:f0:3d:59:76:97:b2:7b:00:29:91:c6:
d0:c5:84:40:b9:27:23:5a:76:46:e0:42:00:7c:a9:
31:0d:c3:83:12:c2:46:24:36:41:61:28:98:be:00:
98:37:de:6b:3d:9a:73:57:66:a0:68:bd:86:e3:26:
27:5b:3e:f4:56:1e:b3:bd:eb:59:06:29:7c:1e:81:
30:20:4b:26:5d:b0:fd:d8:c2:45:e4:a2:95:73:0a:
54:d6:23:77:85:04:68:aa:17:54:83:0d:c2:98:a7:
91:1c:2a:64:7b:22:2e:cb:15:36:78:7a:a8:68:e3:
b3:ea:0f:03:c4:03:69:af:8b:c5:31:20:cf:2e:31:
09:2a:62:c9:bf:9d:33:d4:4e:99:9f:c5:b0:7f:91:
68:60:86:95:9d:a6:a7:28:b4:b6:34:55:93:09:ad:
7f:95:13:b3:95:48:c4:70:95:a5:42:04:84:da:64:
49:e2:25:fd:f2:cf:3f:2a:91:d0:a3:36:40:85:a0:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:49:3E:95:2A:2E:8D:15:08:E2:EA:82:62:23:24:F2:68:98:62
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/YN1JPpUqLo0VCOLqgmIjJPJomGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.184.0-45.130.186.255
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:99:20:1a:1b:de:04:c2:7a:26:63:e6:db:84:f7:5c:48:68:
d0:ca:b3:ea:b3:df:ca:bd:d8:98:6d:36:48:ff:4c:4d:e1:9d:
0b:fb:24:b4:df:12:1f:41:77:0b:37:30:a2:a5:89:c9:b7:d0:
3d:8a:13:44:49:3b:da:aa:1d:ab:fd:b7:2b:62:88:6c:7c:82:
af:81:37:b7:db:08:6f:4f:30:50:38:14:e4:de:51:0b:76:34:
ff:07:df:f5:f5:9e:bb:3d:c1:76:88:55:c6:c1:16:41:2b:54:
59:98:ef:45:2c:02:7d:1c:4d:b1:5d:c8:8d:76:a7:86:6c:c7:
7e:a7:e4:8d:f3:fc:b0:68:0e:f0:ec:91:3a:b3:86:e5:33:fc:
f3:39:36:a3:8c:77:58:a3:4b:30:e8:43:ed:76:13:22:ba:ad:
aa:53:77:bf:1b:fa:d6:74:9c:4f:17:b3:b7:8e:45:4d:c6:d9:
a3:71:62:62:b7:88:6c:d6:c0:2b:3a:5e:d2:e5:4d:d7:92:b6:
0b:4e:b6:40:5e:50:e1:e5:20:db:85:5e:6e:0b:b3:e5:46:92:
68:10:3c:09:37:fb:d0:ea:d6:59:16:69:46:af:9b:66:a1:10:
34:4c:f2:aa:29:ba:8d:77:6b:06:f8:2e:f1:08:6b:d5:38:62:
a7:13:85:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:58 2023 by rpki-client on console-fra.rpki-client.org