Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/JH9i0FNYTwc_5dOEN5zLP12aS6k.roa
File: JH9i0FNYTwc_5dOEN5zLP12aS6k.roa (raw, json)
Hash identifier: sfYvy8N5etac//8d1YwCGLzshix3Ncon6NiFsW7zm+M=
Subject key identifier: 24:7F:62:D0:53:58:4F:07:3F:E5:D3:84:37:9C:CB:3F:5D:9A:4B:A9
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 01856F79A1DC3471B61E33FD9BF80C4F16D2
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/JH9i0FNYTwc_5dOEN5zLP12aS6k.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a1:dc:34:71:b6:1e:33:fd:9b:f8:0c:4f:16:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=247f62d053584f073fe5d384379ccb3f5d9a4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:f0:85:c6:d1:8a:9c:f3:34:50:e6:7f:d4:
4a:89:dd:39:c1:2e:45:e0:c3:b7:0c:ce:57:bf:ce:
8c:df:a9:c7:80:61:69:34:d5:2c:94:35:d4:f8:34:
b0:a4:5e:9c:ac:a8:bb:fd:89:a1:62:68:b9:aa:51:
77:2e:ef:e1:77:5d:32:a1:1d:ce:ce:5d:e1:25:e8:
c4:81:eb:3f:70:12:8f:bb:47:8a:a6:62:cb:22:de:
85:85:87:a9:ed:59:78:41:47:22:ae:46:7f:be:b7:
e6:fb:8c:d6:4d:3c:21:af:27:ec:0f:a7:f7:1d:1c:
0c:0a:f7:27:6a:34:0a:65:c3:c4:42:2b:ac:12:c3:
89:f2:6e:13:48:f5:f9:d0:b1:23:5f:ce:69:2e:b4:
26:aa:28:40:cc:50:fd:b9:fc:a9:72:b7:63:e5:69:
e0:5f:5c:60:10:8d:18:f6:7d:1b:53:59:0d:2d:1f:
27:0b:06:13:e6:18:4f:7f:90:ba:23:e2:9b:a6:d5:
a8:29:56:93:ff:89:b8:4b:2d:17:08:96:b0:30:92:
89:ac:15:ae:63:87:70:f7:90:96:1c:ce:11:89:30:
e4:87:5b:fa:f5:9c:5a:7f:58:c0:61:71:4e:58:33:
1b:d7:73:fc:3e:7f:39:4a:d4:a9:84:cc:86:72:b0:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:62:D0:53:58:4F:07:3F:E5:D3:84:37:9C:CB:3F:5D:9A:4B:A9
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/JH9i0FNYTwc_5dOEN5zLP12aS6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:03:49:1b:78:d9:17:97:ef:4d:f7:81:d1:ca:6c:c7:f2:4e:
a4:e1:6d:82:52:06:91:4a:b8:9a:e3:26:ed:1c:5f:93:e3:af:
3b:69:2a:d6:c4:fd:1c:de:c4:d8:34:56:cd:b8:06:37:56:12:
50:7a:40:ae:ed:05:f7:9c:1f:98:9f:b0:de:cf:92:d8:2f:34:
66:c7:0b:ed:7b:03:26:53:c2:53:71:8e:51:ce:88:d8:77:2c:
f4:33:fd:71:95:ee:23:74:d1:33:fc:c0:46:6c:20:ca:e7:34:
4d:f8:f4:10:71:3c:bb:84:04:d1:3a:8f:ae:42:16:72:38:4e:
1d:75:fe:1f:10:1b:47:16:5b:eb:50:f4:ed:0f:7d:d7:45:50:
97:6c:fa:f2:62:ed:78:c6:82:1b:86:4f:42:73:5f:5a:46:03:
26:43:00:5e:82:b0:86:83:32:f5:7d:70:36:4b:be:ed:00:9a:
da:39:1e:e3:7e:25:d2:f8:6b:ea:21:3d:de:8f:f8:f4:38:b0:
2a:8f:73:75:10:c1:e6:a4:f6:59:eb:ef:7e:b1:3e:41:89:6b:
85:c2:5a:48:30:2e:0e:15:a8:aa:46:ce:26:53:c8:22:f4:61:
4c:c2:dc:a2:ae:e0:25:c9:a6:c8:84:fd:4a:27:e1:34:39:66:
89:0e:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org