Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/4x_7H6wvnwB59Mm4r6WQsL4RABw.roa
File: 4x_7H6wvnwB59Mm4r6WQsL4RABw.roa (raw, json)
Hash identifier: jJDRvaqUVliQ670AueTipzhGngVKT/wLAFBr1T2XKAc=
Subject key identifier: E3:1F:FB:1F:AC:2F:9F:00:79:F4:C9:B8:AF:A5:90:B0:BE:11:00:1C
Certificate issuer: /CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
Certificate serial: 018261FD8E0343DB8D859CD2816136EC223F
Authority key identifier: 32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/4x_7H6wvnwB59Mm4r6WQsL4RABw.roa
Signing time: Wed 03 Aug 2022 04:36:23 +0000
ROA not before: Wed 03 Aug 2022 04:36:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.157.170.0/24 maxlen: 24
45.157.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:61:fd:8e:03:43:db:8d:85:9c:d2:81:61:36:ec:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c01b1b840f38ce0671f71c3b4727e81f69a2b7
Validity
Not Before: Aug 3 04:36:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e31ffb1fac2f9f0079f4c9b8afa590b0be11001c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:71:de:76:d3:f7:a3:a5:b0:6d:9f:33:b7:
d2:06:38:f6:70:f6:b0:51:ec:ca:e1:2d:6d:86:c7:
f2:24:db:78:d9:48:67:74:07:ce:d4:19:b2:8e:62:
80:e2:ac:ec:65:86:cb:29:10:91:c0:e5:e8:2d:2c:
7a:13:30:6c:f2:f6:4e:2c:78:23:ea:00:b7:e8:be:
37:93:d4:1a:9c:d5:c3:e9:9e:22:61:c9:11:fa:84:
c2:7b:2f:6e:ae:78:57:5b:55:75:b3:c1:b0:27:f0:
04:99:9c:e9:1b:56:fd:c0:ce:19:2f:c6:14:da:5e:
01:d1:28:01:35:b7:1d:4b:db:38:34:ad:6d:10:3d:
43:a5:be:cd:8b:ef:e1:70:ec:6d:78:6b:87:e8:f1:
15:78:cb:e6:a5:8c:b2:2f:d4:61:2b:03:43:dd:58:
9a:32:37:91:11:d6:dd:25:ab:90:ac:f5:e4:ee:af:
3e:1d:5c:e5:fa:97:ec:fd:e0:89:34:e3:35:4e:dd:
ef:ba:68:b0:4e:6c:c0:13:fc:df:1a:80:3a:cc:2d:
50:82:56:8c:c2:46:dd:f9:c9:30:33:8f:a2:30:f8:
85:8c:ef:b8:29:38:0e:69:e8:46:97:d4:43:90:70:
f8:cf:0f:c3:21:15:03:d8:f7:a7:41:03:e9:97:6d:
4c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1F:FB:1F:AC:2F:9F:00:79:F4:C9:B8:AF:A5:90:B0:BE:11:00:1C
X509v3 Authority Key Identifier:
keyid:32:C0:1B:1B:84:0F:38:CE:06:71:F7:1C:3B:47:27:E8:1F:69:A2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAbG4QPOM4GcfccO0cn6B9porc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/4x_7H6wvnwB59Mm4r6WQsL4RABw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2fc41e-98ce-405f-8b30-173ca073e371/1/MsAbG4QPOM4GcfccO0cn6B9porc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.168.0-45.157.170.255
Signature Algorithm: sha256WithRSAEncryption
a1:57:b1:45:9a:dc:fd:59:3b:ca:99:a1:4e:a6:ea:b1:8b:8a:
86:ac:16:e4:64:df:d3:db:5c:b5:a7:fb:e9:7e:85:4e:c4:5e:
cd:f3:68:40:0f:54:c3:25:3e:d7:bf:d9:31:14:a6:df:00:58:
eb:7a:1d:e0:95:ef:0a:d2:71:25:0f:b6:27:69:65:c8:b9:23:
20:d1:bf:3a:a0:d4:c0:93:98:48:da:ca:13:5b:84:f1:82:a8:
a5:e8:83:5d:4a:e9:f9:d3:50:26:c4:f1:ee:ea:d1:d7:cf:89:
b1:73:51:3f:79:f7:d4:77:75:47:84:aa:37:f0:d6:08:c7:9a:
b4:4f:0a:1c:91:3e:53:eb:9e:ed:27:46:f4:b8:e8:bb:39:ef:
20:6e:9d:ec:28:76:0b:39:be:7a:83:2a:d6:ba:97:02:de:a8:
ba:4b:a2:05:41:45:97:a3:1d:d5:1b:14:29:7d:d2:19:9e:d2:
83:ee:1e:28:53:b5:16:ba:bb:e7:aa:08:44:ac:25:4e:76:4f:
23:13:6f:f0:1f:85:50:15:8e:9e:2b:ce:85:53:20:3a:1e:78:
67:ed:dc:80:ca:f1:77:9d:b8:54:e5:62:46:81:93:2a:48:6c:
31:b4:52:e5:94:39:20:64:97:d6:00:78:8a:83:87:ae:9b:45:
bb:56:35:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:02 2024 by rpki-client on console-ams.rpki-client.org