Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/G2m81k8-Y2L0fBt_aWTX3We7Acw.roa
File: G2m81k8-Y2L0fBt_aWTX3We7Acw.roa (raw, json)
Hash identifier: 8U/TegobsjV+i718HRWHs/+K/qmJE9gTKD6Gu0TFYGw=
Subject key identifier: 1B:69:BC:D6:4F:3E:63:62:F4:7C:1B:7F:69:64:D7:DD:67:BB:01:CC
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01856CC164B267011334373363C68C3C2C44
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/G2m81k8-Y2L0fBt_aWTX3We7Acw.roa
Signing time: Sun 01 Jan 2023 09:54:51 +0000
ROA not before: Sun 01 Jan 2023 09:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 45.148.232.0/23 maxlen: 23
45.148.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:64:b2:67:01:13:34:37:33:63:c6:8c:3c:2c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 1 09:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b69bcd64f3e6362f47c1b7f6964d7dd67bb01cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:20:7b:c3:fb:22:0e:12:c1:da:d2:48:28:cf:
df:43:1f:76:fe:6e:ab:6d:d9:07:34:55:77:68:f9:
3e:7e:6a:cf:e8:3c:c7:d9:82:34:15:1a:54:f5:1d:
d1:61:2e:fd:04:a6:7e:7e:ed:03:c7:a9:32:76:a6:
b0:40:04:04:f1:ee:3d:f8:59:7c:33:15:05:91:48:
a6:26:16:b9:58:84:3b:e2:db:ae:fd:bd:f1:d1:9a:
1d:36:09:53:eb:cf:26:9b:c3:c5:30:28:60:ca:b8:
c7:29:18:23:1a:c3:ea:71:4c:6b:a1:17:45:d6:06:
2c:df:f3:57:07:b6:40:1b:e0:f9:73:0f:a1:2d:e6:
96:1a:c3:d4:aa:c4:f5:d1:ee:85:54:c9:00:25:f6:
ba:29:6b:08:66:a8:ca:28:ac:a0:11:f2:6f:fb:9f:
85:95:19:8a:31:ea:c0:7c:7e:bd:39:9f:ba:36:3b:
4a:ad:f0:59:4f:b1:ed:21:f4:b9:f3:c4:83:e6:7b:
6a:e6:16:31:9d:8d:40:08:7f:fb:6c:c2:7a:33:f0:
37:66:81:e6:a4:26:b2:81:dd:ad:06:ea:32:80:f1:
6b:16:bb:95:a4:7e:4f:06:11:c3:d3:4b:5f:80:b1:
9b:4b:5f:5f:77:d4:25:4f:7d:cb:8b:46:24:19:6b:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:69:BC:D6:4F:3E:63:62:F4:7C:1B:7F:69:64:D7:DD:67:BB:01:CC
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/G2m81k8-Y2L0fBt_aWTX3We7Acw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:99:a8:c9:c8:00:89:29:06:8c:04:cd:5f:ff:04:d2:0a:fb:
54:d0:3f:92:30:fd:79:d3:8b:04:ed:42:83:77:55:0b:25:f7:
06:5d:09:5a:d4:05:90:63:f4:13:e3:3d:94:5d:0e:00:31:4b:
45:0d:ef:d1:df:bb:d5:82:09:b5:74:3b:7c:5d:62:31:3b:67:
c4:0f:f6:dd:95:aa:da:c6:5b:bb:11:c5:cb:2f:4f:1c:1e:87:
9d:96:7b:00:e0:67:07:9f:ea:4f:39:c2:57:ad:83:40:36:08:
a1:e9:98:df:cb:17:39:aa:fe:68:99:cc:d7:90:d9:6c:cc:7e:
79:ed:61:1c:be:b8:e1:e9:6a:82:03:ad:01:73:8b:13:20:98:
ee:63:ea:e1:0f:e3:6a:36:7d:be:bf:bc:61:8e:7d:dd:2f:20:
da:69:a1:c5:2e:48:c3:27:7f:cc:fc:cc:71:a0:cc:6c:66:f8:
06:79:f0:4c:8f:78:2a:ca:56:2c:de:62:d1:7a:f7:15:d5:66:
26:9d:98:fc:75:97:cb:e0:cb:af:62:1b:a7:3e:75:cb:fb:17:
17:8c:09:99:a5:ef:b3:49:2c:e0:b3:a6:c8:9f:c1:3b:a0:c1:
1e:45:6e:93:99:6c:98:db:23:b3:ee:f7:f0:8e:b6:63:ba:50:
b5:c9:1d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org