Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/7HpDNY2WKDJtOEXLpommGOW4gqU.roa
File: 7HpDNY2WKDJtOEXLpommGOW4gqU.roa (raw, json)
Hash identifier: jPHBHdssB7Ylwo9wzyYklARn6PY1zc1TxSriry/90Yw=
Subject key identifier: EC:7A:43:35:8D:96:28:32:6D:38:45:CB:A6:89:A6:18:E5:B8:82:A5
Certificate issuer: /CN=71f110e0e5983843b4aefe58dd4f803a888adea6
Certificate serial: 01843428F3E060386F893C656F11D9BB42DC
Authority key identifier: 71:F1:10:E0:E5:98:38:43:B4:AE:FE:58:DD:4F:80:3A:88:8A:DE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/7HpDNY2WKDJtOEXLpommGOW4gqU.roa
Signing time: Tue 01 Nov 2022 17:06:49 +0000
ROA not before: Tue 01 Nov 2022 17:06:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201626
IP address blocks: 45.148.148.0/24 maxlen: 24
45.148.149.0/24 maxlen: 24
45.148.150.0/24 maxlen: 24
45.148.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:28:f3:e0:60:38:6f:89:3c:65:6f:11:d9:bb:42:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71f110e0e5983843b4aefe58dd4f803a888adea6
Validity
Not Before: Nov 1 17:06:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec7a43358d9628326d3845cba689a618e5b882a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:99:7e:bf:aa:4d:10:f0:96:26:c5:39:ff:
29:ac:9e:09:4a:c2:59:38:75:15:9c:74:45:73:11:
49:4e:b2:40:91:3c:81:d5:8f:91:70:d6:f8:11:ae:
04:b9:5e:14:50:a4:26:bc:a1:3b:78:bc:52:97:a5:
5d:75:ef:ae:32:18:59:66:e0:97:24:40:31:d6:f9:
57:d5:59:12:9a:2c:e3:38:b8:65:5b:1d:2e:25:15:
9c:97:e9:4c:55:ba:de:6e:df:28:98:2f:db:8c:9c:
29:3f:2c:bf:6d:1e:22:d3:73:1f:d6:a7:11:35:05:
5a:5d:4e:e4:95:24:2c:24:54:34:0d:31:a1:ce:e4:
da:47:6b:e1:f4:7e:e5:33:c7:0e:1f:b8:0d:95:46:
15:f8:7b:5d:91:27:58:82:be:09:3a:19:30:68:bb:
4f:a8:30:03:0b:f7:42:b5:7c:0a:af:ce:d8:28:1a:
0a:90:34:63:61:0c:54:e7:b0:b1:fd:bc:00:34:c2:
0d:65:77:58:75:c6:b4:35:95:a1:4e:be:33:68:cb:
ea:0b:72:f5:f9:4d:13:3a:51:ff:58:d8:43:e8:43:
0e:bf:b0:b7:e2:18:6a:c3:a4:35:b7:27:f8:65:13:
b5:16:22:f6:b0:61:e6:56:43:5a:d0:b3:d6:bb:2d:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:43:35:8D:96:28:32:6D:38:45:CB:A6:89:A6:18:E5:B8:82:A5
X509v3 Authority Key Identifier:
keyid:71:F1:10:E0:E5:98:38:43:B4:AE:FE:58:DD:4F:80:3A:88:8A:DE:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/7HpDNY2WKDJtOEXLpommGOW4gqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a5f61-e093-4aef-a637-0f070786d2e6/1/cfEQ4OWYOEO0rv5Y3U-AOoiK3qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.148.0/22
Signature Algorithm: sha256WithRSAEncryption
16:50:97:13:12:24:d4:df:f3:55:ab:08:48:b5:a9:42:9a:7e:
73:e6:cb:9e:04:40:00:f2:f8:14:7c:38:08:fc:52:6f:9e:dd:
d9:fe:dd:76:3d:66:18:c4:80:81:e6:cd:80:29:39:95:00:b9:
20:8b:17:c2:19:bf:78:a5:bc:a8:6e:e1:19:b9:1c:11:3a:19:
5d:17:f8:b6:67:62:9b:3f:c0:90:d4:a4:59:9c:02:e9:ad:5c:
9d:06:75:b6:50:2f:47:48:24:57:d8:09:e8:92:59:de:17:9e:
e7:e4:d7:6d:f2:c3:18:19:af:56:f4:a4:dd:af:4a:42:fb:0b:
72:8a:d2:22:20:6f:6b:5a:db:a2:93:34:6a:3e:c8:65:62:24:
fc:6f:54:53:9c:c1:24:1f:d1:1b:4b:25:dd:fe:29:ea:a2:a1:
08:a8:44:eb:eb:d3:8d:bb:ac:22:b7:28:cd:e4:4c:64:e2:d7:
cd:f9:7d:65:a4:58:41:28:42:49:0d:47:fd:4e:23:93:4d:48:
0b:44:5e:48:4c:63:47:be:91:32:1d:08:59:cf:b6:48:0b:86:
44:04:e2:64:b0:a3:fa:80:05:66:20:33:56:93:0f:2e:32:71:
f7:4c:e9:cb:68:13:00:ef:95:2c:e8:48:3f:ac:42:37:f5:fc:
64:cd:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:21 2024 by rpki-client on console-ams.rpki-client.org