Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/_NhRo_oRmnlafa8qHqtVxGkt_0U.roa
File: _NhRo_oRmnlafa8qHqtVxGkt_0U.roa (raw, json)
Hash identifier: W7y2umwkoNMishvgN5Hc5UFJpccWPEhFoix7ayqGYq0=
Subject key identifier: FC:D8:51:A3:FA:11:9A:79:5A:7D:AF:2A:1E:AB:55:C4:69:2D:FF:45
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 01894A1B9F9165F01C553CE1B430E075AF11
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/_NhRo_oRmnlafa8qHqtVxGkt_0U.roa
Signing time: Wed 12 Jul 2023 12:37:51 +0000
ROA not before: Wed 12 Jul 2023 12:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.162.0/24 maxlen: 24
45.146.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:1b:9f:91:65:f0:1c:55:3c:e1:b4:30:e0:75:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Jul 12 12:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd851a3fa119a795a7daf2a1eab55c4692dff45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:38:6d:d5:0b:9a:fc:48:7f:b6:46:9f:09:
80:7c:9e:0d:d5:b1:dd:4f:be:68:ea:7f:76:d9:c5:
e7:42:4b:27:e8:17:17:69:3b:b8:bb:93:9c:88:c3:
4f:ba:98:d8:3b:1b:b3:1b:bf:e3:95:3d:cf:6f:b9:
bd:69:a4:de:7d:63:d2:b6:d9:c8:9a:91:d1:3e:c0:
c4:51:12:63:d4:b8:74:0d:0d:f5:82:48:e6:b2:f5:
e3:97:19:6e:d2:99:26:b4:6b:ce:4b:58:07:30:6e:
0e:d2:ac:a2:fe:ed:e4:3d:be:3c:c2:b7:bf:e5:d0:
ba:c7:37:55:b2:f1:51:a0:0b:75:58:97:ad:b8:15:
96:f0:ff:04:1d:25:08:fe:f4:72:88:5f:fe:c6:87:
66:e8:14:e7:8c:18:0d:12:13:f4:ad:18:19:f9:34:
50:e6:33:f9:30:b2:c5:4f:13:66:2a:b7:a7:f9:aa:
3d:a6:98:19:d0:3a:3f:7c:67:dc:db:97:bc:8b:fb:
6d:4a:79:0c:55:70:4b:f7:23:b4:4a:fd:a1:5c:42:
29:db:91:45:7f:c2:02:e7:07:3d:d8:eb:b7:c7:57:
3f:e0:15:32:66:49:2f:ed:84:83:f7:11:eb:38:cd:
61:fa:78:32:f8:7f:3d:71:ff:32:d1:19:79:78:80:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D8:51:A3:FA:11:9A:79:5A:7D:AF:2A:1E:AB:55:C4:69:2D:FF:45
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/_NhRo_oRmnlafa8qHqtVxGkt_0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.162.0/23
Signature Algorithm: sha256WithRSAEncryption
79:5f:61:45:6c:48:b7:33:cb:c0:a6:c2:44:73:4b:1e:c6:9d:
98:df:07:fb:c1:ea:08:54:14:88:a1:93:5b:25:c1:cd:df:51:
a7:e4:6a:53:8b:74:94:bf:ab:a2:37:2a:bc:b0:e9:6b:92:37:
b0:90:f9:04:5b:e6:05:0d:aa:61:3d:b5:0c:3c:cf:24:82:02:
ec:71:21:43:94:8d:40:b1:ef:a0:34:ca:f7:8a:69:a5:a8:5d:
dd:4a:da:39:52:88:26:fc:bc:0c:e0:2a:70:97:7b:71:a2:18:
8a:0c:b2:98:3c:d6:63:c6:b6:07:66:fb:7f:76:d3:3f:f4:36:
78:c9:12:0a:90:62:55:5e:af:cb:90:b2:4e:1a:03:9a:d2:52:
96:7e:99:32:dd:1c:e2:ab:17:25:65:3e:6a:04:dd:94:03:67:
68:75:74:64:d8:4d:f1:d2:76:7a:0e:d0:cc:da:3c:d8:b9:5f:
a1:52:2a:1a:68:f4:c6:ee:6c:55:9f:e3:88:7e:43:eb:16:8f:
f1:16:a8:b0:5d:14:23:66:cc:c4:c2:c9:b7:86:69:14:a0:f5:
0b:a6:a5:89:bc:02:6b:cd:ab:59:08:28:4e:90:27:34:81:46:
2b:92:3e:db:c5:2f:d6:32:ca:72:80:9e:56:d4:65:6c:71:92:
8d:96:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:04 2024 by rpki-client on console-fra.rpki-client.org