Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/bF5xGt-GhuzlLIehkwiTQy-bkWA.roa
File: bF5xGt-GhuzlLIehkwiTQy-bkWA.roa (raw, json)
Hash identifier: ntRUZhRJAqrmrfJO2ByCdnSLDsL3QcApe6SKlRvz5kA=
Subject key identifier: 6C:5E:71:1A:DF:86:86:EC:E5:2C:87:A1:93:08:93:43:2F:9B:91:60
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0189654A9000C4F6545E3CCC0DEF49FA9C4A
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/bF5xGt-GhuzlLIehkwiTQy-bkWA.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.132.51.0/24 maxlen: 24
45.84.178.0/24 maxlen: 24
45.129.1.0/24 maxlen: 24
193.53.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:90:00:c4:f6:54:5e:3c:cc:0d:ef:49:fa:9c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5e711adf8686ece52c87a1930893432f9b9160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:74:91:40:89:43:2b:2f:f0:34:c1:ee:ff:
0d:90:ac:26:92:10:2f:86:21:83:97:07:fd:0b:1e:
4a:b3:f3:05:fc:a1:3e:2a:24:59:ee:f5:a2:3c:bb:
cd:8f:79:b3:14:f5:46:b3:9c:dd:93:bc:6b:df:e6:
b5:c2:6d:20:bb:63:81:d5:bd:f8:59:d0:9c:07:24:
f4:5f:61:43:78:35:db:cf:35:43:9a:71:31:cb:07:
d0:9a:5c:57:6b:e8:cd:31:e6:14:d9:19:89:ab:f2:
e1:28:42:75:07:00:8b:a2:6c:0b:97:cc:ce:74:c0:
01:18:02:d6:b7:db:0e:ff:85:ee:b2:50:71:13:ab:
81:d2:ea:b5:65:79:4d:cb:b2:2a:2e:c1:5b:73:b3:
e7:06:97:c6:96:77:fe:bc:f9:99:ed:7f:92:20:95:
cb:58:52:09:79:29:c6:f5:b3:04:a8:a1:f6:27:11:
c7:f0:f6:8c:4d:f4:e5:c2:d6:8d:09:61:67:69:ec:
18:c3:34:cd:81:e9:40:92:16:a5:83:63:cc:cb:3e:
81:1c:7a:78:54:4a:af:c3:fa:40:92:a3:e3:55:d8:
20:31:c8:53:fc:ad:5f:58:7e:31:e3:87:ad:31:45:
a5:ec:b0:8a:e3:a0:cd:d6:eb:2f:84:fd:54:fb:7c:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:71:1A:DF:86:86:EC:E5:2C:87:A1:93:08:93:43:2F:9B:91:60
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/bF5xGt-GhuzlLIehkwiTQy-bkWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.178.0/24
45.129.1.0/24
45.132.51.0/24
193.53.169.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:08:a5:d7:d8:69:4f:44:6b:0d:77:dd:b3:23:06:ed:55:56:
6d:5d:5d:a9:a7:d6:3e:21:f8:e6:d4:98:17:be:13:5d:4b:ab:
9b:f9:3d:30:a9:10:7f:23:49:19:d7:3e:3a:1d:f6:49:a2:79:
d4:0e:02:58:18:21:68:27:af:c3:a5:2b:1f:55:e5:55:d1:d3:
60:a5:7d:9d:1f:4a:e8:37:43:c2:66:bc:8f:83:a4:be:31:80:
79:8c:31:76:9b:b9:2d:fd:93:4e:be:d3:97:c4:ed:dd:a2:8d:
cf:96:63:86:32:00:05:de:12:77:87:e3:62:1d:66:fd:9f:c3:
30:43:c3:15:4f:19:92:68:db:23:7f:f0:00:75:ed:79:2b:1b:
a8:42:37:9d:de:87:d4:43:a0:32:b8:78:64:02:89:23:9a:8b:
56:0a:85:15:99:59:95:ab:87:4b:75:3c:12:fd:d2:3c:5e:b1:
1f:21:87:0c:be:b2:48:db:40:bf:cb:5d:1d:1f:93:f7:ce:af:
3b:05:49:04:1a:ce:bd:db:8b:7f:b6:5f:39:f6:e8:03:8d:cc:
4f:b8:56:cb:9b:a7:31:b8:53:fd:1e:55:34:b4:34:2f:21:b0:
f4:4a:a4:45:11:36:e9:c0:05:26:b9:24:0f:20:11:90:78:8e:
fb:ba:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:57:08 2023 by rpki-client on console-ams.rpki-client.org