Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/8NsP2gO8Hl1EoKmxYjmKM9w1YWA.roa
File: 8NsP2gO8Hl1EoKmxYjmKM9w1YWA.roa (raw, json)
Hash identifier: E5J5PRo9Bg0VVT3Jq8gEkpaKOpJt3auxg8A0AlY5CIk=
Subject key identifier: F0:DB:0F:DA:03:BC:1E:5D:44:A0:A9:B1:62:39:8A:33:DC:35:61:60
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 0187299E3F355532820BBA19B7523996CBCC
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/8NsP2gO8Hl1EoKmxYjmKM9w1YWA.roa
Signing time: Tue 28 Mar 2023 19:07:29 +0000
ROA not before: Tue 28 Mar 2023 19:07:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 45.146.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:9e:3f:35:55:32:82:0b:ba:19:b7:52:39:96:cb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Mar 28 19:07:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0db0fda03bc1e5d44a0a9b162398a33dc356160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b3:57:a2:c6:98:5f:ca:c0:0d:69:71:6b:de:
43:26:51:0d:a7:b0:8c:83:57:6a:38:12:3b:cf:86:
ea:29:c4:54:eb:42:6c:1b:8c:78:81:2d:bd:c6:80:
3d:1c:46:4b:c4:71:c5:82:51:a3:75:4c:e1:98:49:
4c:73:06:bd:34:fc:d2:e2:fd:be:94:00:90:9c:83:
e8:f7:5b:04:fd:da:f4:29:53:d0:bd:6c:71:00:92:
c4:2e:e4:c6:ae:e7:2f:36:56:ce:eb:bf:81:2d:b1:
d2:1e:da:bd:5c:0b:4f:6c:6c:5d:56:08:8b:6d:21:
33:d2:54:ba:57:b2:be:ee:9e:51:96:75:91:e4:7f:
2b:4b:5d:67:77:cb:d9:5d:58:43:75:7a:26:28:70:
73:be:c6:85:25:3f:c6:9e:54:b2:06:80:78:40:e2:
6a:e8:32:7e:db:bc:6f:2a:72:3e:6b:fa:e0:8b:d6:
bf:ed:a7:46:f7:2d:f1:11:2f:66:38:02:d1:ad:13:
be:4f:dc:f3:3f:03:6a:e8:96:d6:11:f5:b7:a4:18:
f5:68:f6:f8:75:2f:ec:1c:5a:ab:9e:9f:dc:6b:22:
e9:e6:07:fc:c8:14:4e:b2:d8:89:ae:e2:4b:7b:25:
90:4b:03:62:16:74:b6:64:09:b4:b0:6a:5b:e7:cd:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DB:0F:DA:03:BC:1E:5D:44:A0:A9:B1:62:39:8A:33:DC:35:61:60
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/8NsP2gO8Hl1EoKmxYjmKM9w1YWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e1:2e:66:5c:f3:de:b2:ac:86:6f:2c:10:01:6c:dd:8a:f2:
5c:a9:06:89:bf:44:28:d7:cc:a9:4b:56:c3:0a:f5:65:62:bf:
af:ae:0c:fc:bf:7c:ff:3d:b3:e3:6e:9e:fb:aa:da:c0:f3:72:
1a:ed:5b:51:62:f7:6e:52:3a:55:85:b5:df:82:73:f3:9d:bf:
44:8c:e2:1c:e6:41:c1:a9:a7:3c:41:ae:44:f8:0a:94:f9:24:
97:f0:a8:bd:44:31:ed:c0:20:ec:d3:aa:87:ff:4a:4f:23:06:
fc:1d:3b:1e:d1:04:63:31:a8:87:00:7a:aa:ce:f6:41:8a:6b:
97:c2:11:1f:de:aa:a1:2e:d5:1f:62:00:2c:da:90:81:ee:90:
da:76:52:b3:14:34:16:0c:44:be:d1:c0:5f:eb:e7:be:62:73:
99:d9:2f:c8:18:1f:0a:ab:4d:61:cf:7e:ce:8b:cb:6d:67:48:
66:f4:2e:73:ad:5a:69:a1:42:f4:69:f6:eb:6e:20:d9:cf:8a:
a9:6c:e1:3c:e0:7f:5c:fb:01:7c:5a:74:bf:c0:3d:63:8b:79:
c2:9f:0b:b6:b8:78:60:07:2d:19:66:a1:67:53:48:5d:f9:43:
15:aa:9d:0b:18:7b:68:b4:1d:60:6d:f6:72:66:1b:b9:72:c9:
29:44:3d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 29 14:44:17 2023 by rpki-client on console-ams.rpki-client.org