Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Y2VYXw2GW5yNSGDKzqaIthkL8xc.roa
File: Y2VYXw2GW5yNSGDKzqaIthkL8xc.roa (raw, json)
Hash identifier: p5ZEhmFJT4wH9Nnz+kEkwt2EzH4wiZ02Sh/HXo3V0vE=
Subject key identifier: 63:65:58:5F:0D:86:5B:9C:8D:48:60:CA:CE:A6:88:B6:19:0B:F3:17
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 018291D6ADD9559F43A65AA859A4A9FEB036
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Y2VYXw2GW5yNSGDKzqaIthkL8xc.roa
Signing time: Fri 12 Aug 2022 11:35:41 +0000
ROA not before: Fri 12 Aug 2022 11:35:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.143.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:d6:ad:d9:55:9f:43:a6:5a:a8:59:a4:a9:fe:b0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Aug 12 11:35:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6365585f0d865b9c8d4860cacea688b6190bf317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:55:cb:28:9d:07:12:a2:b3:09:f9:a0:14:
b1:3d:9c:13:bc:34:37:58:9b:f3:05:c0:49:01:e4:
f0:84:44:0f:74:03:e7:e2:2b:59:eb:2e:ed:f2:d8:
b7:ec:7b:95:ac:40:72:84:a0:b4:93:1e:99:cf:89:
11:ac:80:22:f2:82:64:ee:1c:dd:da:16:16:4e:2c:
8f:6d:37:51:26:0d:bf:e8:01:cf:6b:4a:ee:d7:1d:
c2:5c:68:34:ff:6b:cc:4b:07:b3:9e:ab:e7:89:e7:
cc:e2:4c:67:94:ee:d5:78:94:df:3f:fe:d6:9c:7a:
22:e9:85:40:c6:e1:ba:50:e7:54:fd:ab:f0:20:b1:
01:e0:45:f1:5c:f3:f7:77:38:a8:09:9f:9d:00:d9:
0d:1f:e4:30:ff:87:42:22:f3:a6:76:8b:3c:b3:0e:
c1:43:bd:dc:4a:cd:40:9e:5e:f5:50:4d:d3:34:1f:
49:57:50:ca:22:e3:7d:6c:64:5b:e4:78:2b:14:22:
eb:05:99:f7:95:1f:25:9e:2b:db:20:9f:01:3d:83:
4c:c9:e8:48:2a:5e:9c:4e:1a:b4:27:4e:75:30:66:
77:7b:26:dc:c1:17:7f:ff:0e:6b:09:00:ad:d8:26:
c8:58:e7:28:29:cf:6b:09:70:ee:10:88:5a:f5:bb:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:58:5F:0D:86:5B:9C:8D:48:60:CA:CE:A6:88:B6:19:0B:F3:17
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/Y2VYXw2GW5yNSGDKzqaIthkL8xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.7.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c2:00:fe:f3:0b:92:d6:bc:c1:63:03:7c:b3:68:88:68:ea:
2b:1c:4a:3e:3f:4c:78:53:c8:e9:9f:7e:e5:5c:3e:26:7d:f9:
19:7b:2f:52:c8:3c:4f:ff:db:80:45:68:53:f6:c8:f9:c5:b3:
84:73:05:e8:5e:a2:43:72:01:32:d9:41:59:95:26:5f:81:86:
d9:84:a8:07:01:32:9e:1d:b9:47:2f:f7:99:42:39:a8:db:b6:
c3:39:d3:0f:5d:e1:11:15:08:f4:44:41:2e:fc:a5:17:a8:67:
58:47:7a:9d:ac:8d:47:a6:52:e6:ec:f2:25:f4:39:fd:d9:55:
61:75:d2:d5:5b:6c:64:bf:1d:a9:64:4f:a5:3e:12:1d:99:c7:
07:84:dd:d2:79:eb:2e:56:5a:c3:ad:3f:fb:2f:8c:dd:e8:8f:
fe:34:d8:ff:77:a2:a1:79:65:d6:4b:ed:95:2e:cb:88:5c:ac:
3e:bd:74:8a:31:86:cf:92:72:f7:89:6a:2f:e0:25:12:da:a9:
0b:39:79:6b:30:8d:bc:d7:b2:e3:80:5f:61:f4:34:1a:e1:c0:
7a:eb:e5:ac:69:3e:f9:16:01:6b:c4:91:a4:f9:83:84:ad:df:
e7:6c:05:36:a3:70:f3:c9:c4:97:cd:a9:55:5c:2c:1b:38:d9:
eb:f7:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org