Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/YU15czcygsqRhVoXex-OpC6WcJU.roa
File: YU15czcygsqRhVoXex-OpC6WcJU.roa (raw, json)
Hash identifier: FNLf3XFDUot2Cjf7PAivdA8ufy/CzVeabWkBmqOsY9M=
Subject key identifier: 61:4D:79:73:37:32:82:CA:91:85:5A:17:7B:1F:8E:A4:2E:96:70:95
Certificate issuer: /CN=64a68fc98cbdd586c14195005e272c347d79d423
Certificate serial: 0185710C101A2B29B528D3698315DC4DE29D
Authority key identifier: 64:A6:8F:C9:8C:BD:D5:86:C1:41:95:00:5E:27:2C:34:7D:79:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKaPyYy91YbBQZUAXicsNH151CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/YU15czcygsqRhVoXex-OpC6WcJU.roa
Signing time: Mon 02 Jan 2023 05:54:54 +0000
ROA not before: Mon 02 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201508
IP address blocks: 45.94.32.0/24 maxlen: 24
45.94.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:10:1a:2b:29:b5:28:d3:69:83:15:dc:4d:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a68fc98cbdd586c14195005e272c347d79d423
Validity
Not Before: Jan 2 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=614d7973373282ca91855a177b1f8ea42e967095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:81:fa:a5:e1:3f:d3:c3:d3:ac:3f:57:8d:1f:
7a:33:91:aa:a1:5d:b9:fc:0e:5a:dc:f6:54:87:63:
cf:08:cc:e6:6f:29:10:f2:d4:8f:71:36:ad:b2:1d:
46:d2:e7:97:6c:06:b7:9b:0a:cc:29:d0:49:55:53:
bb:61:bb:fe:13:b0:5a:fe:51:fd:de:34:c7:b3:7a:
74:73:20:4d:0e:15:29:a7:8a:17:19:c0:23:f9:01:
a6:ca:ed:64:85:19:97:ce:20:26:a3:4b:93:00:a1:
47:a4:5e:ad:ca:66:6d:56:f0:eb:dd:77:a5:cc:a0:
7a:e0:48:53:a8:ab:70:da:8d:b5:1f:6c:3b:c9:3d:
ea:15:f5:0a:28:2e:05:69:14:c4:72:c5:ec:04:c0:
af:62:52:15:9d:ef:e8:ce:17:8d:b9:ad:75:1b:46:
0e:b7:f0:17:50:8b:db:53:0a:de:1a:03:90:38:44:
e8:64:07:19:92:53:4c:15:d9:a2:8b:1c:fe:e1:28:
21:58:61:08:fe:c3:a0:94:8a:f7:38:45:6d:f1:50:
05:b2:31:b1:c4:14:3e:ba:27:96:66:a7:e2:e8:c4:
95:d9:6e:15:b7:af:4c:4c:5d:52:76:a8:f0:10:63:
82:06:be:68:24:e2:38:c7:49:d5:b1:a4:f7:1c:cc:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4D:79:73:37:32:82:CA:91:85:5A:17:7B:1F:8E:A4:2E:96:70:95
X509v3 Authority Key Identifier:
keyid:64:A6:8F:C9:8C:BD:D5:86:C1:41:95:00:5E:27:2C:34:7D:79:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKaPyYy91YbBQZUAXicsNH151CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/YU15czcygsqRhVoXex-OpC6WcJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d319ee-867c-4251-b1e2-89e2fbd41482/1/ZKaPyYy91YbBQZUAXicsNH151CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.32.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:f5:14:c1:c2:a3:d0:c9:06:a5:f8:94:b4:b4:af:e8:f5:f5:
0f:e4:fa:75:f3:b0:fe:d2:45:ee:c1:c4:cd:03:a1:ad:46:00:
1b:e1:00:5e:16:2f:89:3b:04:5e:b3:f4:fe:4e:3c:e3:fd:0f:
78:15:6f:3e:76:11:24:7d:06:4b:1a:31:26:ac:45:f3:0c:35:
50:20:29:46:db:23:a6:b7:65:e6:24:a1:a8:6f:28:3a:b5:83:
64:0b:2c:95:43:dc:96:70:4e:23:4d:7b:9f:89:18:8d:07:b8:
da:fb:92:b2:23:7e:44:66:9a:17:8c:42:53:96:fb:ac:f5:93:
42:0f:45:88:3f:01:79:d7:f7:0b:18:dc:41:11:59:ab:61:bb:
64:29:9d:69:de:c7:ff:d3:8e:c0:bc:fb:bd:b3:92:91:ef:d6:
e6:f4:5a:1c:73:80:f0:38:b2:55:f8:10:c5:3c:cb:0e:60:a6:
e9:47:2d:69:98:65:d7:14:ff:d6:68:49:c0:61:bf:47:b7:ea:
2d:3f:91:d8:75:15:87:51:ac:d9:08:b3:96:f5:a5:85:d5:ca:
79:cc:57:7f:02:8a:9c:74:43:48:a1:e6:e6:3c:18:28:7c:cf:
d3:80:96:5c:00:3a:0e:c8:20:7b:1d:c5:6e:87:4a:c0:47:7e:
d9:c1:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:03 2023 by rpki-client on console-fra.rpki-client.org