Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/m3_7TyQBYZN7O8xjcD9C-5GkOKU.roa
File: m3_7TyQBYZN7O8xjcD9C-5GkOKU.roa (raw, json)
Hash identifier: h9PeF1dDecF/nyG8x2hVAvLsnrVblbhKP9eYgG8GLNA=
Subject key identifier: 9B:7F:FB:4F:24:01:61:93:7B:3B:CC:63:70:3F:42:FB:91:A4:38:A5
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01856F9DBEF9CBEF0C1E597C2F0B9AEF6F9E
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/m3_7TyQBYZN7O8xjcD9C-5GkOKU.roa
Signing time: Sun 01 Jan 2023 23:14:47 +0000
ROA not before: Sun 01 Jan 2023 23:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 45.159.21.0/24 maxlen: 24
45.159.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:be:f9:cb:ef:0c:1e:59:7c:2f:0b:9a:ef:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Jan 1 23:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b7ffb4f240161937b3bcc63703f42fb91a438a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:44:f6:73:b4:4e:62:05:87:93:3f:f8:4d:
00:0a:7f:98:05:2a:b5:7e:f7:7b:55:39:02:c6:a5:
c5:60:13:d6:0d:80:8b:5f:f6:8e:80:8e:46:e6:91:
ec:18:14:85:7b:0b:1e:7a:fc:34:8c:d5:81:7e:21:
78:e7:70:7a:88:a9:54:f7:ac:73:08:f0:5e:56:c9:
53:3e:ed:e9:cd:a2:e9:05:b9:60:2f:42:45:c4:0a:
23:25:a5:ba:d5:ee:41:59:15:ef:20:27:f5:17:2f:
76:04:11:91:d6:1f:0b:f5:a5:9a:ac:d4:07:d6:c9:
eb:c2:7d:a1:58:0d:88:a3:8d:63:8c:82:0f:78:0f:
f7:77:c2:c6:e7:a1:ca:1e:b8:e1:c4:33:71:d3:3e:
67:4a:58:08:88:ea:a6:ad:07:01:b5:fe:a7:70:75:
40:a7:66:84:69:82:57:c2:9a:cf:a6:4f:7d:f7:ad:
73:f4:4b:0b:a3:58:67:af:cd:ec:e2:25:d0:b5:ad:
5d:27:fb:39:f1:01:f4:81:a8:4e:18:cc:6b:27:b4:
c2:9e:38:fe:90:87:b2:83:a5:b1:45:75:a9:30:ba:
db:dd:5f:d3:77:a8:9d:b8:ce:71:4b:eb:98:d7:75:
25:a2:47:8f:55:f6:05:8b:aa:76:af:8a:2f:4d:55:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:FB:4F:24:01:61:93:7B:3B:CC:63:70:3F:42:FB:91:A4:38:A5
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/m3_7TyQBYZN7O8xjcD9C-5GkOKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.21.0-45.159.22.255
Signature Algorithm: sha256WithRSAEncryption
9a:61:22:1e:82:11:0a:e0:70:c9:ea:01:5b:b0:c6:76:5b:2d:
49:9b:f3:2e:5a:fb:65:62:5d:f3:27:87:8c:5e:7a:6e:a7:fd:
fa:8c:e1:6d:58:e4:54:0d:a8:4a:c5:35:d1:0b:ae:3c:9e:7b:
4e:92:35:2d:98:f0:15:a3:27:91:d5:ed:70:31:e2:73:09:cf:
29:60:dc:38:77:6d:27:ba:4b:95:da:07:c4:f4:f8:28:38:44:
cd:75:b6:60:b0:93:f5:38:ab:2f:fb:09:ee:40:e2:fe:58:cc:
2f:13:37:ed:0c:bb:bd:4d:f0:5f:0d:7b:62:dc:95:3e:b8:4c:
29:0c:a1:3d:fc:e1:0c:a6:b6:6c:bb:3a:a7:d0:00:c8:3b:8d:
7e:4d:30:53:35:8e:fe:bf:e2:79:15:c0:da:97:c0:d8:01:3d:
54:f9:5f:80:ee:62:5d:17:63:c6:c2:f6:2c:54:5b:c8:cf:91:
16:9d:66:c8:55:43:39:86:e3:5c:1d:0e:b1:f6:a8:3c:4a:93:
20:b9:f6:09:8b:e6:c7:4a:31:ce:7e:56:2d:0f:85:bb:7b:d0:
60:8e:5d:74:75:d4:54:cf:66:99:0a:f5:37:d5:8a:69:6e:d4:
67:b0:b5:0c:fb:07:99:9d:1e:ad:be:ec:dc:09:39:41:95:d2:
fa:0b:b8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org