Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/2J5PaPDptbWDrEBxDK2bjvTeXfs.roa
File: 2J5PaPDptbWDrEBxDK2bjvTeXfs.roa (raw, json)
Hash identifier: NJxuAdtRcXd1HkJ9NgTHe5hgqifQ1CAfMP4IjQF7KCc=
Subject key identifier: D8:9E:4F:68:F0:E9:B5:B5:83:AC:40:71:0C:AD:9B:8E:F4:DE:5D:FB
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 018340E0790CEACBA63073E7B209439173DA
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/2J5PaPDptbWDrEBxDK2bjvTeXfs.roa
Signing time: Thu 15 Sep 2022 11:19:56 +0000
ROA not before: Thu 15 Sep 2022 11:19:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203446
IP address blocks: 45.143.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:e0:79:0c:ea:cb:a6:30:73:e7:b2:09:43:91:73:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Sep 15 11:19:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d89e4f68f0e9b5b583ac40710cad9b8ef4de5dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:44:dc:bc:28:c6:10:0d:6e:6e:20:73:e7:
b8:c7:ae:96:ee:96:ea:07:67:d0:01:7d:f8:48:89:
b5:15:08:a9:87:07:46:61:ba:ad:e0:96:2b:df:76:
c7:5d:95:fa:44:65:e1:0c:c6:93:64:3f:7f:dc:17:
2a:1f:34:e4:1e:06:6b:4e:a7:24:fa:82:c6:a7:fd:
50:10:46:a5:32:d3:47:8d:64:0e:3f:48:35:96:ba:
e4:86:7d:c5:c2:d3:db:d8:1e:c7:07:d3:2b:b5:08:
e3:7a:2b:2b:58:aa:d5:e9:82:eb:8b:d8:e6:81:a2:
d2:22:46:13:e1:58:d2:da:4f:40:db:a5:ce:64:e5:
58:7d:8f:72:bb:12:0a:f0:85:a9:f1:0a:7c:36:f8:
b9:02:5c:f0:28:7c:31:0d:bd:36:8b:82:f8:17:82:
cc:33:30:38:2c:e6:1a:bb:36:64:61:c8:58:90:5b:
49:d2:f6:a7:9d:bd:a5:45:8b:d3:33:da:cf:81:26:
0b:87:bf:d1:94:55:8e:51:3b:04:d7:26:fe:96:ca:
da:46:b8:45:20:72:09:e4:8a:a4:12:ac:ff:74:a0:
d2:4d:f0:6c:61:38:5b:01:ee:18:21:bc:64:d2:c8:
d4:0a:c6:b2:e5:3b:6e:aa:6a:ed:ed:c7:53:e5:66:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:4F:68:F0:E9:B5:B5:83:AC:40:71:0C:AD:9B:8E:F4:DE:5D:FB
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/2J5PaPDptbWDrEBxDK2bjvTeXfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.4.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ef:ab:64:f4:3f:ab:d3:c3:88:fb:88:92:8f:f4:19:3c:c2:
38:a6:00:3a:32:dd:2f:ee:01:b7:bb:b8:2f:fa:85:88:d4:fe:
57:b8:73:06:ea:3e:5b:e6:1a:03:1e:0c:93:d7:d1:ab:5a:e1:
a0:2c:3b:39:2f:63:15:98:28:3e:ce:94:ab:47:29:e4:73:fe:
80:cf:c4:f0:04:6b:21:8f:10:80:97:59:1b:9e:e6:61:9c:39:
bf:14:93:29:8f:1d:5f:14:cf:3a:bb:ef:a5:ec:74:26:7b:ef:
12:2c:38:7a:72:2c:12:f0:25:1d:a6:2a:22:4e:11:ca:32:ff:
ea:2c:72:df:1d:c4:7b:1b:67:e5:e3:ed:28:fd:67:aa:ec:4c:
5f:ee:96:73:aa:fe:5c:a0:08:13:4d:09:3f:81:17:d1:44:0a:
52:63:57:54:1f:1b:ef:66:b7:d9:a6:90:b7:bc:8a:65:f4:3c:
20:08:6c:7b:03:f5:5e:0f:30:28:20:55:98:1e:7f:80:25:ac:
f3:49:ad:16:4e:a5:96:b1:02:4b:fd:af:e7:01:46:d7:ee:2a:
41:c7:e6:a7:b1:cb:31:62:3c:2f:85:4e:15:13:e4:2f:73:63:
aa:3c:2c:a5:76:2c:dc:89:df:b8:6d:3f:ac:1a:2e:1b:78:e6:
f9:2f:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org