Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/Yb8DgygRgPubpjPY2bjGLV0cu18.roa
File: Yb8DgygRgPubpjPY2bjGLV0cu18.roa (raw, json)
Hash identifier: dyDbmQQs4maar1G4WeIhJvZDKK43v38H7TkJDm4ooHw=
Subject key identifier: 61:BF:03:83:28:11:80:FB:9B:A6:33:D8:D9:B8:C6:2D:5D:1C:BB:5F
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 018AE0FEF56362359A3B232D9869D4704127
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/Yb8DgygRgPubpjPY2bjGLV0cu18.roa
Signing time: Fri 29 Sep 2023 12:51:59 +0000
ROA not before: Fri 29 Sep 2023 12:51:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.162.0/23 maxlen: 24
45.146.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e0:fe:f5:63:62:35:9a:3b:23:2d:98:69:d4:70:41:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Sep 29 12:51:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61bf0383281180fb9ba633d8d9b8c62d5d1cbb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:01:0b:1c:8f:d8:11:ac:dd:c3:7a:ca:89:
bb:2b:e4:6a:d8:a2:68:d8:cb:3b:cc:0f:e1:d7:21:
1d:04:89:e0:e1:d6:58:62:1b:b2:c4:95:9a:4d:94:
cb:2a:eb:f9:0b:96:6c:bf:a2:83:a5:a7:e8:0e:ed:
30:f0:12:e2:59:59:22:3f:75:7d:42:c2:c4:2f:46:
47:4e:24:a7:52:64:e6:ca:25:60:f6:f0:c2:af:ba:
c6:95:aa:12:68:2b:d4:bc:00:52:6f:57:a7:a2:d3:
c9:d4:3d:45:c0:c0:3c:a1:15:33:54:c2:6c:13:b9:
b6:d3:b0:d3:41:0d:1b:7e:46:1a:9d:fa:be:36:2b:
f0:8b:c4:1e:cd:80:ff:ac:41:e9:bf:4c:78:66:57:
98:be:54:82:41:77:12:63:4d:5d:52:49:23:ad:fa:
44:1b:d4:28:a0:4b:10:88:be:6b:87:58:71:56:2f:
8e:86:10:0e:91:8b:91:95:fb:c2:75:f1:e5:01:63:
5a:62:0c:16:1b:82:da:4e:75:41:2b:07:4d:7c:36:
09:4e:f9:08:80:d0:66:33:29:51:9d:12:10:9c:b6:
34:a5:85:db:50:6b:ae:57:36:24:6b:3d:fd:de:4c:
66:3a:3f:64:b5:6f:c7:c9:b0:0a:a3:43:e3:38:b7:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:03:83:28:11:80:FB:9B:A6:33:D8:D9:B8:C6:2D:5D:1C:BB:5F
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/Yb8DgygRgPubpjPY2bjGLV0cu18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/24
45.146.162.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:2c:6c:bc:03:39:c4:c3:3d:b5:73:c7:fb:5a:de:15:47:47:
f4:72:17:e0:d6:1f:d0:f9:55:ee:31:4c:18:15:24:53:cf:d2:
4f:13:84:df:d6:db:fa:78:cc:34:30:0b:95:5d:f5:4c:a1:27:
42:51:88:04:fa:98:13:f7:1c:ce:30:81:84:7c:ed:23:6e:b2:
62:ed:83:b8:2f:13:ed:70:02:ae:6c:19:a1:bc:18:2b:b5:32:
27:c7:0b:33:27:39:d4:1b:62:09:d4:df:73:08:4e:d3:6c:f8:
f6:be:bf:5c:e0:6f:f0:6c:19:01:90:80:3f:2f:4f:db:f7:d2:
a6:eb:5e:68:67:78:f3:8f:12:ff:35:e6:33:db:ec:db:d6:e5:
ac:d4:6a:b4:cd:cf:cd:f7:1c:35:57:8d:51:ee:f4:e6:d1:d4:
ac:c5:89:09:30:40:1b:89:4d:ce:9f:2d:ff:7a:b8:c4:6f:e1:
a9:e6:e8:0c:c1:11:92:5b:3f:15:87:22:aa:5b:cf:b7:e0:dc:
9a:25:73:27:f0:d3:68:52:ad:57:96:d7:44:8a:85:48:d8:c4:
c6:58:ba:5b:40:39:09:db:46:ee:d3:c5:0e:db:70:51:69:51:
85:e2:28:7b:82:e8:c3:d8:6a:1d:e9:ad:59:ad:23:83:78:c9:
d5:b3:e9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:30 2024 by rpki-client on console-ams.rpki-client.org