Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/x5ZzLeR_eAtFisbK-dbT4fVe90s.roa
File: x5ZzLeR_eAtFisbK-dbT4fVe90s.roa (raw, json)
Hash identifier: BXg+axkbcCSezITFLzVdExSxNDeAGjfLs7vbymXyPzc=
Subject key identifier: C7:96:73:2D:E4:7F:78:0B:45:8A:C6:CA:F9:D6:D3:E1:F5:5E:F7:4B
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 01853E89E2E885B7C42DBE32D570D9471234
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/x5ZzLeR_eAtFisbK-dbT4fVe90s.roa
Signing time: Fri 23 Dec 2022 10:31:41 +0000
ROA not before: Fri 23 Dec 2022 10:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14576
IP address blocks: 45.159.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:89:e2:e8:85:b7:c4:2d:be:32:d5:70:d9:47:12:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Dec 23 10:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c796732de47f780b458ac6caf9d6d3e1f55ef74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:f4:f8:ff:8e:70:d2:cc:ff:07:ca:56:5a:
8f:cd:f1:c4:e6:ce:45:d2:0e:8b:cb:fa:ed:24:96:
26:0e:3f:e3:fb:37:f6:2b:03:64:7c:c6:f6:7d:34:
9b:44:d1:6f:77:6c:c9:fb:e4:a8:f2:e7:a5:b9:12:
95:41:72:5d:94:11:b6:0a:d9:dd:9f:4e:f0:9b:c8:
26:2b:ea:9a:6d:18:80:da:3b:1a:fb:0c:7c:67:23:
f4:bd:c3:87:02:65:63:3d:c7:44:fa:86:94:e9:a1:
2f:12:8f:90:ff:a3:e9:45:a8:04:a3:cc:f1:12:06:
77:ae:16:0c:53:e3:a5:9b:5f:fd:b0:25:99:df:7e:
3b:2f:47:bd:c3:17:90:08:e8:3a:48:18:06:7b:0d:
08:d1:70:63:64:4d:0e:76:ab:8c:87:05:a7:e2:ea:
67:be:16:3c:d0:f0:84:d9:14:ce:cb:2d:31:55:7f:
84:c0:8a:5b:a8:69:4a:41:78:88:10:69:40:49:09:
39:fe:16:39:16:d9:74:4e:e9:9e:ee:bd:1e:75:b4:
cc:4e:e4:25:fb:9a:e7:48:2d:79:9a:c1:1e:b4:d9:
0d:3f:38:fc:d8:7b:bd:9d:ab:9c:f4:2c:aa:67:c9:
cf:02:d4:9a:1b:b3:67:8a:6e:f6:56:27:5a:4c:9b:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:96:73:2D:E4:7F:78:0B:45:8A:C6:CA:F9:D6:D3:E1:F5:5E:F7:4B
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/x5ZzLeR_eAtFisbK-dbT4fVe90s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.23.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:a3:57:9f:31:05:70:6c:53:4d:43:36:5e:12:fe:84:ad:
41:6a:09:14:6c:50:fa:5a:ac:11:7c:1b:cf:71:14:fa:18:25:
f1:22:67:76:1c:92:76:bc:5b:89:fe:bb:99:e2:1d:f7:26:d6:
0f:e1:7d:d6:d4:50:53:0a:49:6f:24:a9:b9:16:e5:e4:48:dd:
84:c9:c4:ce:58:c0:45:8b:8f:02:3a:98:40:f1:98:37:49:c8:
fa:13:68:41:8e:da:07:09:ef:1e:b9:1f:8f:25:98:5f:25:65:
e4:bd:7d:ea:4f:3e:f2:76:20:f9:0d:39:17:17:66:67:1a:f4:
e6:51:e9:ea:3c:66:47:f2:ce:d4:ae:96:9a:74:f1:70:3f:02:
99:ac:55:27:db:7e:27:97:e1:a7:b2:73:94:15:80:a2:12:a5:
11:86:6c:25:8a:23:42:7b:50:f8:3d:2a:a9:77:6f:b8:66:bd:
e8:b0:bd:8c:ea:23:20:8e:80:63:69:e4:7d:c1:1c:76:59:74:
42:4a:74:ea:84:cd:49:c6:bc:d5:d9:cb:d1:c2:c9:3e:6b:68:
4a:df:e7:57:e4:d0:fd:0e:86:49:0c:18:83:9b:06:c7:f3:08:
b6:5b:f6:88:00:5b:f7:e5:7b:ad:ee:ae:56:15:d9:c1:5a:dd:
2b:4c:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:36 2023 by rpki-client on console-ams.rpki-client.org