Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/NWr9EJogBpQcEvL3ZZLzO42AJHE.roa
File: NWr9EJogBpQcEvL3ZZLzO42AJHE.roa (raw, json)
Hash identifier: GyhQS+TlW0O2f95v+LeGXWRCHFG5crVhH/aX+9wLq4E=
Subject key identifier: 35:6A:FD:10:9A:20:06:94:1C:12:F2:F7:65:92:F3:3B:8D:80:24:71
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 0181F2368C0683949BDD1FB3DDA711CE2EA5
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/NWr9EJogBpQcEvL3ZZLzO42AJHE.roa
Signing time: Tue 12 Jul 2022 11:41:09 +0000
ROA not before: Tue 12 Jul 2022 11:41:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.155.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:36:8c:06:83:94:9b:dd:1f:b3:dd:a7:11:ce:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Jul 12 11:41:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=356afd109a2006941c12f2f76592f33b8d802471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:bc:4f:c3:e3:e6:b1:8a:2f:6f:9f:f5:12:
9d:22:f1:74:b6:46:7b:e7:f7:79:60:2a:33:73:3a:
76:c3:27:57:e4:4a:9c:78:df:46:b8:d8:1b:40:e0:
ae:31:83:33:8f:8d:72:13:f7:a5:ab:ed:0c:9b:e8:
40:fb:03:bd:b3:e0:f6:f8:c9:ff:b8:21:9e:2e:03:
c5:37:c2:cc:1d:46:6f:fd:90:9d:50:50:f0:95:3b:
97:3e:5b:c7:b3:5c:d6:04:28:31:50:b2:53:26:ab:
f7:8b:f8:2b:48:55:32:77:c6:38:b0:89:c8:07:57:
9a:ab:f0:89:41:16:05:7e:ac:30:31:86:e5:c1:71:
9b:56:e9:95:b7:df:11:3c:ed:1e:de:35:e8:ef:c2:
96:95:29:0c:e8:be:9a:ff:2f:e8:0f:72:14:f9:fe:
86:51:59:1c:dd:60:97:a7:2a:6e:f5:3f:d1:61:57:
5b:b6:5e:df:56:c3:f1:ef:cc:ac:41:fa:87:b8:09:
2b:28:45:b8:ce:f8:0a:fe:d6:86:ce:5d:38:cd:6b:
2b:bb:12:66:f7:93:9d:ff:40:c9:9e:a1:ea:55:e3:
07:d8:7d:56:d7:0c:36:ae:f5:b5:8c:bc:a0:e4:ed:
28:cf:b3:cd:81:2e:a6:98:65:6d:31:55:a9:65:98:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:FD:10:9A:20:06:94:1C:12:F2:F7:65:92:F3:3B:8D:80:24:71
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/NWr9EJogBpQcEvL3ZZLzO42AJHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.158.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c9:14:bf:53:1f:a8:ae:93:2b:b1:92:60:f2:2f:fa:df:71:
14:59:00:ae:81:9b:65:73:e5:50:27:02:64:39:dd:d0:45:51:
8e:2d:0f:93:db:81:d4:0b:0c:1d:41:5b:e3:cf:65:cb:49:53:
ed:90:87:7e:9b:98:59:a3:4b:54:7a:cb:92:6e:d2:25:2d:58:
64:1e:f9:f4:db:f4:27:ff:13:30:fe:68:70:89:40:39:b2:4e:
5a:76:36:75:67:39:37:bc:a1:fd:50:89:1e:f4:af:2e:47:d3:
73:81:77:9c:e9:aa:96:20:c3:b3:65:5b:08:c2:3e:09:78:bb:
37:3e:79:71:ed:aa:ca:ec:34:f6:46:6a:6d:73:a4:97:d8:04:
71:8f:47:32:7f:dd:ee:3b:ab:09:bb:80:8e:e5:17:c7:ff:f7:
8b:76:a3:d1:1e:27:b5:d7:87:db:81:59:96:cb:dd:ea:21:57:
97:d3:86:67:5f:a0:21:df:f7:61:73:6c:d5:27:1d:9e:f3:41:
e0:48:cf:7a:d1:7e:99:66:22:e6:2b:0f:0a:34:21:79:55:ff:
de:ea:21:54:e5:9d:74:8b:64:8d:5c:d0:98:f2:d5:8d:e1:13:
8c:bc:76:f7:49:36:83:73:2a:04:8c:d0:de:50:e2:fb:c7:26:
4a:01:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org