Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/8WLInW0ItvyuIYvkdwZxyLpwwAM.roa
File: 8WLInW0ItvyuIYvkdwZxyLpwwAM.roa (raw, json)
Hash identifier: I56NwJv4KyDinWybmI9Ic8gV4PC6MLY+OXV18k5VPbk=
Subject key identifier: F1:62:C8:9D:6D:08:B6:FC:AE:21:8B:E4:77:06:71:C8:BA:70:C0:03
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 0184E1FDAB66FD28B6E41346CF98F6C49C3B
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/8WLInW0ItvyuIYvkdwZxyLpwwAM.roa
Signing time: Mon 05 Dec 2022 11:13:28 +0000
ROA not before: Mon 05 Dec 2022 11:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 45.143.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:fd:ab:66:fd:28:b6:e4:13:46:cf:98:f6:c4:9c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Dec 5 11:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f162c89d6d08b6fcae218be4770671c8ba70c003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:55:a3:e4:0e:d5:b8:f4:db:5f:c7:29:59:
27:fc:24:70:b0:3d:fa:1e:ab:c8:51:ca:13:cf:a5:
56:c7:0c:71:79:0d:d5:21:27:e0:ab:1e:d2:13:c1:
1e:f7:c8:df:52:b4:2c:02:cf:b6:50:d5:98:48:d5:
e3:ba:93:37:b1:c1:37:e6:22:c8:b1:1c:4f:a7:0c:
09:c6:ec:1f:68:d1:40:fe:6c:f3:93:dc:cf:5e:fc:
09:5b:33:3f:22:5c:7f:95:7b:dc:03:6a:dd:a7:d1:
9d:c6:e5:61:5f:1c:fa:92:4c:53:0c:cc:6d:dd:6e:
f5:6c:e5:eb:08:94:b8:76:91:54:92:bc:45:c2:96:
da:84:ee:5e:a2:1e:73:75:10:e6:62:49:e7:01:0e:
29:9b:4e:d2:f6:b3:0d:91:5d:19:9d:f5:d7:56:12:
ad:43:33:f1:8d:e1:60:f9:1e:57:56:ae:c6:98:41:
33:b7:c9:8f:b9:62:e6:da:cd:34:70:85:d0:73:c0:
d6:5e:00:0e:78:54:a3:2e:d2:39:f5:53:9f:5f:77:
96:e0:69:11:8f:0d:f3:1e:06:0b:50:16:fc:c2:c7:
7f:ce:f9:80:54:1e:1b:48:a4:84:c4:15:69:1e:0c:
d9:40:db:d2:ed:78:13:d2:8c:c3:55:14:5a:0a:b0:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:C8:9D:6D:08:B6:FC:AE:21:8B:E4:77:06:71:C8:BA:70:C0:03
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/8WLInW0ItvyuIYvkdwZxyLpwwAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.6.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ce:72:e7:55:0d:cd:b8:85:8f:c6:12:f2:91:d9:8e:45:2d:
5e:88:28:da:53:f3:0d:d4:a0:d2:e0:31:e7:fd:be:3b:3d:5e:
8c:63:b1:74:98:21:d7:4f:0f:c0:f8:ea:de:5b:ab:ba:0d:1a:
19:d6:f8:05:be:78:b8:ce:17:0b:b0:8e:d9:cf:0b:d5:48:c1:
58:87:3c:23:47:dd:b7:51:78:2b:13:db:8f:30:a3:3d:78:43:
a9:49:5f:8e:c4:28:ec:68:1b:b3:f4:d0:bc:11:78:f2:c8:76:
94:ac:87:e5:1d:7d:6a:9c:08:e2:82:d0:33:07:94:d0:5a:00:
49:23:79:1f:5e:8e:0d:65:32:61:ce:f3:5b:db:2f:d2:a8:ca:
1f:b3:0d:61:97:58:32:f7:3a:e7:92:b2:5a:bf:0d:84:34:02:
a8:f5:dc:9a:94:3d:75:e2:77:5d:32:07:d4:34:04:a8:76:75:
04:eb:23:29:16:bd:4e:3e:c7:bf:f2:fb:c7:d1:18:e1:14:02:
ba:76:bf:d5:6a:65:e4:fa:54:e0:35:d0:14:a9:54:08:ab:c9:
13:c4:14:2f:ff:54:ff:c6:e2:41:94:c2:10:4c:1c:5f:ed:48:
dc:3e:77:15:d4:13:fb:87:01:50:3b:bb:f1:c3:25:0a:36:f2:
11:04:f1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:18 2023 by rpki-client on console-fra.rpki-client.org