Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/lp20rtaa2-gbVeWvrZ7fvWgXJ3M.roa
File: lp20rtaa2-gbVeWvrZ7fvWgXJ3M.roa (raw, json)
Hash identifier: CNGhOIfignHa1Uo/iODvhi32bwRzkNi9Ry+nHTPU7j0=
Subject key identifier: 96:9D:B4:AE:D6:9A:DB:E8:1B:55:E5:AF:AD:9E:DF:BD:68:17:27:73
Certificate issuer: /CN=c7dd7e874e6aa46bac994a6b10206bd924f769cd
Certificate serial: 018369A1B3B810FEB28A3A2B0B60651FAB43
Authority key identifier: C7:DD:7E:87:4E:6A:A4:6B:AC:99:4A:6B:10:20:6B:D9:24:F7:69:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x91-h05qpGusmUprECBr2ST3ac0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/lp20rtaa2-gbVeWvrZ7fvWgXJ3M.roa
Signing time: Fri 23 Sep 2022 09:15:48 +0000
ROA not before: Fri 23 Sep 2022 09:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59745
IP address blocks: 45.151.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:69:a1:b3:b8:10:fe:b2:8a:3a:2b:0b:60:65:1f:ab:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7dd7e874e6aa46bac994a6b10206bd924f769cd
Validity
Not Before: Sep 23 09:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=969db4aed69adbe81b55e5afad9edfbd68172773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:de:5f:f1:ac:d1:99:73:d8:b9:36:82:fb:72:
9b:43:0a:68:e0:d6:e3:35:c0:df:55:53:cf:17:c4:
a7:30:38:3b:53:de:a0:65:6f:d1:b1:a2:bb:02:c6:
87:43:fe:9d:99:7e:17:99:74:0c:4d:08:aa:63:60:
a4:16:10:82:a1:22:06:12:f9:eb:fc:76:62:8c:01:
8b:05:cf:c7:db:41:8d:2a:19:18:ba:e0:23:b6:8d:
bd:33:b5:15:dd:16:3a:fd:00:2f:8e:fc:a8:62:f4:
98:45:37:b1:d4:c4:04:3a:4f:e4:aa:7f:77:78:3e:
a9:db:15:1c:89:9d:e9:80:5f:5a:31:2f:2b:a1:77:
1e:89:cb:a0:de:cf:a3:ba:b0:1b:a6:91:bd:68:b6:
b8:44:80:c9:cf:76:6c:20:ea:c2:57:27:66:54:9c:
c4:d4:f6:1d:4a:78:88:ad:60:6f:bb:b2:bf:d0:28:
6c:67:8a:6e:17:9f:d3:78:94:3d:af:86:41:96:dd:
0d:6f:c8:96:17:3d:5c:9c:5a:1d:3a:d1:ef:66:4b:
dc:aa:c3:4d:6f:02:5c:5d:2a:95:56:a7:af:ee:7b:
1a:5b:90:40:ff:4c:89:64:f6:64:c9:e2:26:85:37:
ad:d7:59:cd:fc:cb:b9:f5:69:ad:7f:d6:f9:02:b7:
7f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9D:B4:AE:D6:9A:DB:E8:1B:55:E5:AF:AD:9E:DF:BD:68:17:27:73
X509v3 Authority Key Identifier:
keyid:C7:DD:7E:87:4E:6A:A4:6B:AC:99:4A:6B:10:20:6B:D9:24:F7:69:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x91-h05qpGusmUprECBr2ST3ac0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/lp20rtaa2-gbVeWvrZ7fvWgXJ3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cf3a25-5175-4dbf-907e-bd31614d58a3/1/x91-h05qpGusmUprECBr2ST3ac0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.92.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:88:c8:3e:1d:2d:b8:cd:ca:7c:6e:76:2a:de:ad:54:d3:4c:
7d:01:8d:6a:54:9d:f2:77:b7:fe:6b:6c:ae:0b:92:4f:3b:0c:
4b:3a:5a:3d:e5:da:bd:c7:69:9b:ee:56:15:a5:e7:57:dc:1c:
07:d7:84:93:4f:74:fe:62:fd:3b:5e:69:0c:85:c0:d0:a0:b5:
06:f7:7e:56:24:f9:21:b5:4a:f8:92:49:be:3b:a8:15:e3:89:
b8:a3:23:48:37:08:ca:0c:a4:85:8e:56:f3:c2:0f:70:9e:40:
7e:82:1d:2f:1d:af:e8:41:93:47:c2:3e:8f:99:a7:36:9e:7e:
ed:11:d7:a4:e3:81:60:44:5d:6e:e6:ff:d3:a0:82:b1:55:fb:
a6:58:78:c8:34:6c:92:cb:6b:a3:1b:1a:67:36:07:87:3d:c3:
d3:09:8f:5a:76:bf:48:80:fa:11:81:dd:fc:01:d3:43:bb:8a:
14:52:19:ff:cb:ec:b4:ae:bd:d9:e9:59:bb:4a:24:ea:5f:c8:
5c:c4:a8:5e:8a:38:5a:c7:02:2c:87:94:25:12:b7:6c:29:ea:
06:93:d9:de:81:ba:03:d7:7a:cf:f2:7a:c3:02:36:06:6d:22:
da:c6:4b:4e:fa:f7:7c:d3:43:dd:b0:9e:fd:3d:ff:d2:d3:b4:
d0:50:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:41 2024 by rpki-client on console-fra.rpki-client.org