Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/1-lUyS4z26KajSkoyhdLK4vn4zNg.roa
File: 1-lUyS4z26KajSkoyhdLK4vn4zNg.roa (raw, json)
Hash identifier: 5epSXExZSZyYSHfRq6laISTQj/vbxxV5k/rObeyr5Z0=
Subject key identifier: FA:55:32:4B:8C:F6:E8:A6:A3:4A:4A:32:85:D2:CA:E2:F9:F8:CC:D8
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 0183457198AC2619FEEC0255A099626709A9
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/1-lUyS4z26KajSkoyhdLK4vn4zNg.roa
Signing time: Fri 16 Sep 2022 08:36:56 +0000
ROA not before: Fri 16 Sep 2022 08:36:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 45.155.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:71:98:ac:26:19:fe:ec:02:55:a0:99:62:67:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Sep 16 08:36:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa55324b8cf6e8a6a34a4a3285d2cae2f9f8ccd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:94:f6:c0:ac:82:f4:00:63:5a:1f:c3:e8:
f4:ce:c6:b9:de:4e:0a:3d:78:17:f5:ac:ce:a4:71:
fb:ea:68:ed:19:65:80:f6:53:10:b4:d2:9b:0f:69:
06:87:0f:f7:78:f2:11:0a:b0:15:01:31:f1:21:a6:
19:0f:74:be:cc:b3:2f:ad:3b:63:1d:9a:e9:ee:47:
ab:2b:d8:aa:bb:28:c1:26:60:e9:6a:36:21:6c:0c:
5d:24:bf:ce:06:6c:38:85:67:d5:b6:18:c3:bb:6e:
4c:12:2e:a8:84:6b:83:91:9f:cc:64:98:27:f5:54:
3d:b0:68:8f:3f:2e:5c:1f:7b:1f:e2:d1:a5:c7:09:
62:4d:76:03:dc:24:6a:b5:89:79:ac:c4:25:b9:c4:
82:74:35:97:a0:f1:ff:b3:50:2f:72:0d:a9:d5:09:
7f:f6:42:c8:51:67:6e:b0:ab:c0:04:38:5e:4e:d6:
5f:2c:6b:77:9d:92:a2:45:0b:33:e8:89:df:4e:6e:
8e:fc:a3:cc:06:bd:7b:e1:d8:18:86:02:9b:be:0d:
b5:05:ac:fb:3d:5e:d2:c2:ee:5a:3c:6f:df:63:8d:
ee:a6:53:c1:1f:3b:e4:99:8a:11:f1:75:b6:d2:c1:
4c:c8:23:ee:b5:32:40:a7:ee:88:6a:c3:21:b8:65:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:32:4B:8C:F6:E8:A6:A3:4A:4A:32:85:D2:CA:E2:F9:F8:CC:D8
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/1-lUyS4z26KajSkoyhdLK4vn4zNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3e:9a:d3:ee:ce:01:fb:fe:d7:48:e0:a2:76:1a:d1:64:7b:
67:2d:fc:3d:76:a9:bc:c7:9f:6a:92:d3:87:0e:b0:8f:03:44:
6c:0a:12:52:05:65:e0:43:f2:67:04:11:35:4f:ee:99:3e:79:
95:a4:69:07:ae:1d:78:50:de:ba:32:29:26:a5:07:78:be:76:
20:0c:d9:30:f7:de:3c:f1:5a:09:46:c7:23:b2:b2:57:4f:62:
e8:6a:9c:0d:1d:c8:6d:0c:d9:3a:8a:ee:87:1c:68:35:d1:21:
3d:59:d7:dc:ee:94:9e:aa:ab:5b:29:7a:75:cf:52:58:04:a5:
a8:ca:a4:e6:51:00:ba:4b:b9:17:e3:2a:87:95:47:5b:25:33:
b3:92:d7:6c:31:0e:40:86:b0:54:f6:45:73:e7:39:c6:25:68:
09:dc:81:f2:9e:d7:82:d3:98:4a:a7:a1:3e:69:c0:16:72:ed:
a6:a9:de:b8:6f:90:c2:f3:fb:33:6d:56:ec:d9:3b:da:61:cd:
88:47:0a:54:0f:86:99:e7:4d:17:87:9f:b8:ea:df:f1:1f:b7:
13:68:a7:bd:0a:38:b5:b5:3c:b9:fd:7f:88:27:ec:c0:89:24:
c5:2d:c1:4d:c2:e6:8a:9f:81:09:ed:88:93:ba:8e:a7:76:6c:
f5:27:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org