Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/0tTkvx9rN7bj7jTgoQmOlXSr1_I.roa
File: 0tTkvx9rN7bj7jTgoQmOlXSr1_I.roa (raw, json)
Hash identifier: z05uwrUp53XYlXg71gmDD7cNa78+UwdzgP9vrWd/2TQ=
Subject key identifier: D2:D4:E4:BF:1F:6B:37:B6:E3:EE:34:E0:A1:09:8E:95:74:AB:D7:F2
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 01856F0B6EEDB9A87C6FBED3197162E7E25C
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/0tTkvx9rN7bj7jTgoQmOlXSr1_I.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44066
IP address blocks: 45.142.112.0/23 maxlen: 23
45.142.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6e:ed:b9:a8:7c:6f:be:d3:19:71:62:e7:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2d4e4bf1f6b37b6e3ee34e0a1098e9574abd7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c9:18:80:0c:a2:db:97:3f:3f:c7:c7:76:55:
0a:6d:ad:56:b9:c7:17:0e:bf:2a:bc:9d:c0:e4:b5:
82:13:79:70:90:7a:aa:97:52:f2:61:22:ed:08:c7:
a1:c0:b8:f3:48:44:54:af:d0:62:86:e2:9a:30:b4:
ce:8b:4a:fc:5e:54:02:f8:a2:53:9c:ed:63:33:66:
48:67:e5:40:9f:d5:06:9a:45:2f:4e:ee:1d:bf:5c:
d6:59:92:1c:9d:47:64:9a:a0:02:6e:5a:6d:dd:b3:
51:df:62:2a:f2:49:e9:3d:7e:bf:51:29:0d:dd:17:
41:96:13:66:10:cb:28:5f:ea:47:ee:50:b3:98:56:
2a:8f:41:1a:af:fc:ff:4c:3e:62:d1:91:a2:1c:c4:
23:7f:43:f5:90:cb:3b:4e:b9:94:bb:27:71:1d:f6:
99:e6:3a:98:df:db:4e:e5:e2:c1:b2:fe:51:dc:d1:
43:69:b6:01:39:9f:28:4c:1a:59:c9:5e:47:d0:90:
08:26:ce:cd:45:fc:d2:df:57:e3:26:10:6f:ca:4f:
63:ed:1c:b9:89:01:a2:9b:f6:8a:a0:41:73:8c:04:
8c:88:ef:29:23:33:c6:ae:01:ac:1f:61:9c:ce:e7:
55:0d:5c:82:04:ad:1e:13:c8:3c:b4:78:67:a1:28:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:E4:BF:1F:6B:37:B6:E3:EE:34:E0:A1:09:8E:95:74:AB:D7:F2
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/0tTkvx9rN7bj7jTgoQmOlXSr1_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.112.0/22
Signature Algorithm: sha256WithRSAEncryption
26:4b:3f:47:2a:f7:18:03:cf:31:96:a8:b5:3b:ae:d8:88:e4:
5d:23:1d:86:02:6c:0c:87:8c:da:ed:d8:3e:5b:3a:44:cb:05:
89:8e:d7:e0:66:87:98:af:85:66:e2:e2:ff:95:66:b1:63:10:
d9:09:5f:9f:8a:b3:d8:6a:4d:0b:a1:f3:29:78:d3:f2:73:56:
c5:93:63:73:b2:8a:83:6a:c5:bc:f2:86:6e:3b:b2:d0:59:54:
93:92:1c:a7:64:dd:e6:61:92:89:30:da:bc:e3:b0:e2:34:80:
c9:50:1a:8b:47:10:64:d2:ac:8a:b6:05:b2:6f:17:fd:b1:83:
3d:00:d8:80:a6:2c:8d:b6:b7:56:e5:83:34:24:93:fe:40:e3:
dd:02:d8:e8:d5:0f:ae:e4:3c:5b:94:58:3e:2d:fd:af:1d:8d:
8d:12:aa:c1:62:e9:a4:c6:f6:21:93:af:d5:4f:95:2d:e5:67:
8c:78:21:c9:c3:22:07:e8:a2:5e:23:64:b5:c1:b3:be:ac:d0:
37:3c:04:a9:dc:84:1f:04:67:78:a2:78:57:2e:3d:49:8f:fb:
53:78:49:fe:15:9a:c8:40:9b:5c:70:9e:59:ea:bc:c8:0d:e8:
aa:62:42:b2:c5:66:65:46:f6:4c:9d:2d:dc:46:2d:d8:f2:6b:
64:62:6d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:42 2024 by rpki-client on console-ams.rpki-client.org