Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/nMFmXAMIBEHRFjlyCy8K15gazjg.roa
File: nMFmXAMIBEHRFjlyCy8K15gazjg.roa (raw, json)
Hash identifier: L7aHuXBbf17KVoNo7W84T8rIqgSPIky/yRbRptw0njc=
Subject key identifier: 9C:C1:66:5C:03:08:04:41:D1:16:39:72:0B:2F:0A:D7:98:1A:CE:38
Certificate issuer: /CN=425e132c37f05117dab94af1869a7149c6408d80
Certificate serial: 0182D6A626D967D6486CFC10B1BB628671F8
Authority key identifier: 42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/nMFmXAMIBEHRFjlyCy8K15gazjg.roa
Signing time: Thu 25 Aug 2022 20:16:29 +0000
ROA not before: Thu 25 Aug 2022 20:16:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.81.57.0/24 maxlen: 24
45.81.58.0/24 maxlen: 24
45.81.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d6:a6:26:d9:67:d6:48:6c:fc:10:b1:bb:62:86:71:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e132c37f05117dab94af1869a7149c6408d80
Validity
Not Before: Aug 25 20:16:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9cc1665c03080441d11639720b2f0ad7981ace38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:a1:04:30:e6:b6:32:05:af:b2:7d:4a:31:
ba:1c:d4:b0:f6:7c:ef:2f:f2:d9:ed:28:66:97:1f:
b6:e3:be:2d:23:ff:97:3b:d8:c3:b5:c8:22:fa:2c:
6a:8c:c8:a0:68:2b:32:0e:ed:a9:20:f0:e4:f4:ba:
f2:ce:7c:55:e8:70:de:60:e5:44:b0:6d:fb:20:b8:
b5:cb:36:22:47:52:a1:63:1f:c3:c0:9c:37:b8:14:
c7:24:1c:1b:3e:c9:a7:97:30:a0:81:f4:f5:32:10:
bd:51:cb:aa:ff:4c:1a:06:7b:7e:3b:cd:a1:f2:67:
ae:94:7c:d9:80:a8:c5:bc:97:21:e2:ec:53:5c:5b:
8a:19:51:66:c6:16:66:c9:75:1e:b1:d5:1a:b5:cf:
7f:27:41:fe:9e:c3:a8:3a:b9:ff:41:81:e8:eb:11:
33:c1:29:2b:d5:b8:7f:3c:df:da:88:3b:5e:c7:c8:
0f:81:27:f7:2c:62:fb:25:08:70:de:cb:24:a7:06:
f5:1d:be:51:f8:2a:ff:65:87:9e:4c:77:96:06:a8:
fc:55:86:49:81:d4:f2:c7:05:a7:70:a0:cc:76:f6:
64:ab:c7:8c:55:7e:0b:4c:54:5d:e9:96:60:11:1e:
6b:31:26:20:01:ef:3f:16:1b:f4:a6:e4:6e:82:e7:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:66:5C:03:08:04:41:D1:16:39:72:0B:2F:0A:D7:98:1A:CE:38
X509v3 Authority Key Identifier:
keyid:42:5E:13:2C:37:F0:51:17:DA:B9:4A:F1:86:9A:71:49:C6:40:8D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4TLDfwURfauUrxhppxScZAjYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/nMFmXAMIBEHRFjlyCy8K15gazjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/69817d-42e8-45a1-9d54-3ada4d4aed5a/1/Ql4TLDfwURfauUrxhppxScZAjYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.57.0-45.81.59.255
Signature Algorithm: sha256WithRSAEncryption
60:b6:c4:5a:1f:0b:2f:a3:ae:5e:18:01:95:9f:87:f0:db:f6:
8d:2b:f1:ed:f9:06:12:85:da:ba:42:c5:a3:16:7c:79:72:e2:
02:ca:e6:54:4e:ef:ff:da:c4:89:9d:15:42:76:f0:8c:8e:74:
c2:d7:ff:62:47:7a:80:6d:b1:21:99:0b:96:6f:d2:59:e1:5d:
fb:1f:8b:c9:04:51:10:df:30:24:d3:13:3f:8f:3c:eb:56:13:
3d:80:d0:4c:b8:8e:c6:a1:ce:0b:93:11:1c:22:ea:99:8e:c4:
39:0a:6e:4a:6a:eb:99:f0:80:03:0e:9a:d0:a4:f7:2e:b4:d0:
1f:d3:7e:8f:2c:f4:55:48:ef:74:93:9f:2d:48:4d:9a:33:82:
b0:59:c8:0d:60:f0:45:df:48:5d:9c:06:81:c7:37:4b:70:78:
93:8a:b9:e6:95:42:db:d0:af:21:39:8b:93:9a:db:0d:29:f4:
bc:dc:cc:35:2e:49:49:f0:d4:83:d0:38:62:ee:bb:fd:03:22:
49:ef:b9:6c:b6:19:13:fd:f1:b8:ef:55:30:d3:53:3c:c5:f0:
5f:59:9b:a1:45:5a:74:3d:9a:f9:0c:13:6e:4e:40:c4:2f:51:
5c:37:5d:59:10:4f:59:8f:7e:bb:8c:23:e5:ba:73:0d:45:fb:
7a:12:ca:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:00 2024 by rpki-client on console-ams.rpki-client.org