Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/rQjtlgXCcgw8qil8Bc_0_pD_cqc.roa
File: rQjtlgXCcgw8qil8Bc_0_pD_cqc.roa (raw, json)
Hash identifier: bDC2Y9v7csP8ssm4dk/fV0XR6pQ0iUbBI0ecur550oM=
Subject key identifier: AD:08:ED:96:05:C2:72:0C:3C:AA:29:7C:05:CF:F4:FE:90:FF:72:A7
Certificate issuer: /CN=839c87178ff28099472f2f7fe9716bfc13b68240
Certificate serial: 018572711073ADB179FA1A446A9B321E2105
Authority key identifier: 83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/rQjtlgXCcgw8qil8Bc_0_pD_cqc.roa
Signing time: Mon 02 Jan 2023 12:24:50 +0000
ROA not before: Mon 02 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41789
IP address blocks: 45.157.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:10:73:ad:b1:79:fa:1a:44:6a:9b:32:1e:21:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839c87178ff28099472f2f7fe9716bfc13b68240
Validity
Not Before: Jan 2 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad08ed9605c2720c3caa297c05cff4fe90ff72a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ad:8b:1b:5c:ab:4e:5c:af:e8:10:71:6c:2a:
bb:f0:52:ab:36:d6:f4:97:4e:d7:cf:92:46:ce:25:
6f:6c:48:5c:35:1a:fb:9e:65:88:5c:e3:5e:fa:d3:
b8:5c:69:8e:6c:e8:5e:b5:0a:47:a7:a5:7a:6c:b5:
92:0b:7c:ec:83:3e:0c:66:68:60:91:4c:f1:0e:69:
7c:cd:dc:05:d5:9d:8c:36:28:c6:d0:7a:83:a3:66:
4b:cb:5d:e3:1d:70:f8:aa:84:fb:51:7f:75:8b:5c:
79:e3:9d:4b:19:09:82:d5:4e:5a:4f:fd:0f:f0:d6:
50:e5:47:8b:99:14:08:8e:95:4f:7b:ff:a6:b3:97:
8d:50:ab:d3:09:73:b4:2c:df:d5:d3:1a:84:15:30:
01:27:ba:2b:87:41:a6:bf:9d:29:5d:f8:01:54:b6:
83:3e:8c:e8:b3:33:e1:72:a9:8c:ee:76:d0:0b:3d:
03:b6:14:07:0c:32:63:c8:f1:93:8b:12:e4:7c:16:
8a:8f:46:82:95:ba:7b:e9:ef:dc:f9:df:18:b6:95:
a0:e0:52:a6:c2:28:0b:a8:ba:7b:ed:52:fc:35:e9:
8b:2b:f4:6f:e5:1f:41:d2:37:cf:12:20:f4:b4:25:
ce:6f:bd:1f:fa:a2:62:71:bd:d1:75:f3:99:96:5b:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:08:ED:96:05:C2:72:0C:3C:AA:29:7C:05:CF:F4:FE:90:FF:72:A7
X509v3 Authority Key Identifier:
keyid:83:9C:87:17:8F:F2:80:99:47:2F:2F:7F:E9:71:6B:FC:13:B6:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5yHF4_ygJlHLy9_6XFr_BO2gkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/rQjtlgXCcgw8qil8Bc_0_pD_cqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d12e2b-4a4a-4d9e-bbc6-72075b203efb/1/g5yHF4_ygJlHLy9_6XFr_BO2gkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.160.0/22
Signature Algorithm: sha256WithRSAEncryption
58:da:6e:66:f4:09:7c:ac:6b:2f:c8:a0:55:a9:c0:b7:35:ca:
fe:a8:2d:9e:d9:b0:5f:57:25:49:6b:65:f0:b7:ad:48:1b:fe:
69:1d:68:5f:6e:ea:3b:20:b5:1e:5d:40:33:97:b3:98:c0:13:
6a:f5:e9:81:0a:95:db:6d:a0:d4:8f:2e:49:98:f7:3c:67:7c:
82:1d:08:6c:b3:98:6d:55:75:53:37:49:55:87:6a:24:f5:be:
77:cc:83:ad:ef:1c:38:53:48:8b:36:7a:14:a3:ad:71:3b:35:
ac:bf:bd:a1:71:c1:b8:5f:9c:48:16:3a:69:27:03:b5:a7:03:
7c:67:8c:03:52:52:68:7d:fe:bd:cc:04:e2:3c:05:ea:03:4a:
23:39:20:c2:f5:a7:b8:90:84:01:a4:b1:87:7c:08:8f:6e:fe:
a9:2e:86:2f:af:0e:a5:80:07:8a:bc:20:e5:80:43:be:65:7d:
bb:e4:43:b1:95:71:37:c6:3b:53:1e:d0:bb:c1:f4:7d:3a:43:
2e:ac:15:14:65:26:35:1a:67:fb:0d:a7:74:b4:ea:86:9a:3d:
26:bd:a3:36:35:ce:cc:66:05:c0:9f:82:c3:f1:5c:fa:06:c9:
6e:ec:c4:50:57:0b:34:15:41:50:2f:0d:e7:ff:e0:43:61:68:
41:a1:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 09:39:24 2023 by rpki-client on console-ams.rpki-client.org