Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/Yb8SJgUwMHI5zVcymcFuTq4AmFc.roa
File: Yb8SJgUwMHI5zVcymcFuTq4AmFc.roa (raw, json)
Hash identifier: xljuCJc6Ync9Y6Q9bFEzcd84RAt3ikeUkoj6GNdKU9o=
Subject key identifier: 61:BF:12:26:05:30:30:72:39:CD:57:32:99:C1:6E:4E:AE:00:98:57
Certificate issuer: /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial: 018414E77D999112FC1624E343A45723CA93
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/Yb8SJgUwMHI5zVcymcFuTq4AmFc.roa
Signing time: Wed 26 Oct 2022 15:27:06 +0000
ROA not before: Wed 26 Oct 2022 15:27:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207633
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:e7:7d:99:91:12:fc:16:24:e3:43:a4:57:23:ca:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Validity
Not Before: Oct 26 15:27:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61bf12260530307239cd573299c16e4eae009857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8c:9d:ff:91:89:00:b0:5a:2b:e7:71:ee:5a:
45:04:2a:9c:4a:a1:25:a3:a4:56:d6:e6:f2:d5:ac:
bb:0b:c1:af:08:52:77:a4:4e:17:45:00:97:fd:4e:
1f:2f:31:b9:34:cc:24:0f:96:9a:c2:00:d1:3b:45:
2b:3f:f7:88:f5:8f:26:65:f2:1f:f9:b1:5f:45:f2:
00:3b:3a:a6:3f:36:22:aa:ab:7d:16:4f:70:0a:79:
77:be:53:32:f7:94:43:d2:d1:6b:a3:f8:57:0c:b2:
41:e5:be:99:0e:08:e4:f9:da:23:83:f6:c2:07:4d:
c9:5f:7f:dd:bc:be:f4:d6:d2:31:3c:78:81:eb:74:
79:81:8d:10:d0:db:7d:43:a7:7c:83:0e:36:9c:b9:
cf:87:fd:f6:d8:67:31:82:c2:5e:6b:93:98:0e:10:
4b:77:64:ad:13:3d:21:a4:ab:93:48:9f:36:64:58:
10:aa:06:ef:9f:71:89:85:e8:c2:32:9d:f7:ed:8e:
92:7f:25:f2:8e:c9:5a:2f:45:24:2e:14:bb:7a:a9:
b2:c3:06:82:59:92:e3:9b:0d:2c:29:2c:7d:1e:35:
72:6a:d0:70:1f:3d:19:61:ee:fa:ef:08:c7:67:60:
1e:7f:1b:38:1a:1b:92:22:a2:66:a9:80:17:f7:0e:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:12:26:05:30:30:72:39:CD:57:32:99:C1:6E:4E:AE:00:98:57
X509v3 Authority Key Identifier:
keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/Yb8SJgUwMHI5zVcymcFuTq4AmFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
55:67:bc:35:9d:04:b1:41:02:41:e9:af:8b:6d:ca:50:82:a7:
e7:81:bc:d2:fd:a7:75:38:61:a4:b3:f3:6d:7a:be:58:4b:8d:
fa:7e:49:80:d7:94:23:35:46:56:37:a5:4b:97:d7:09:a8:bd:
68:12:6f:4e:7b:dd:b9:d0:c9:16:a7:be:06:c3:af:2d:55:2d:
a6:be:c1:45:a7:3c:82:d7:5e:de:ad:36:9b:87:c1:94:52:47:
ae:23:aa:bd:83:8a:ed:25:9d:94:a3:15:d3:af:98:d2:99:ca:
61:16:56:1f:99:07:08:7a:b7:99:3d:1a:19:71:18:d3:a2:75:
f1:cd:fc:ec:21:07:f1:e7:00:32:98:d5:76:f0:1a:95:c2:5c:
5e:f5:d5:d3:e5:6e:b6:75:aa:03:12:2f:81:25:00:06:b0:f9:
be:a3:a9:0d:86:d5:c4:6f:9b:81:5f:93:1b:01:6f:87:e1:fa:
98:28:c6:19:80:b9:27:5a:06:0d:96:26:cc:08:c6:59:59:01:
5e:3d:dc:bb:ca:17:8c:49:e5:69:06:05:d9:a5:b9:2a:27:69:
8a:e6:35:ad:18:ae:75:36:cc:c0:12:51:a6:08:81:f2:b5:33:
ed:90:ea:d3:36:ff:34:45:b4:56:bd:89:db:ff:24:bf:dc:59:
eb:58:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:36 2023 by rpki-client on console-ams.rpki-client.org