Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/CGOgh6-C3IF9rfO92OLq9CXmga4.roa
File: CGOgh6-C3IF9rfO92OLq9CXmga4.roa (raw, json)
Hash identifier: WJL7Qp3WsE19Cu1OKqUEp+/BCJwo5lqKkVgdZskOavA=
Subject key identifier: 08:63:A0:87:AF:82:DC:81:7D:AD:F3:BD:D8:E2:EA:F4:25:E6:81:AE
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 01872DAB8B195F905C511EE8C582DF25301A
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/CGOgh6-C3IF9rfO92OLq9CXmga4.roa
Signing time: Wed 29 Mar 2023 14:00:29 +0000
ROA not before: Wed 29 Mar 2023 14:00:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 45.85.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:ab:8b:19:5f:90:5c:51:1e:e8:c5:82:df:25:30:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Mar 29 14:00:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0863a087af82dc817dadf3bdd8e2eaf425e681ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:64:22:1f:fc:be:07:6e:94:a7:52:db:d2:
9a:62:78:01:b9:82:27:9e:39:e6:db:bc:cf:49:1d:
9b:f6:3f:5d:69:39:04:04:06:92:21:df:83:10:83:
e4:86:06:4b:a2:f7:a0:9a:36:f9:2f:e5:1e:4b:10:
17:31:31:12:fb:c9:66:3e:ce:eb:4e:6e:70:c1:99:
dd:83:65:30:2d:5a:0a:ce:3d:43:52:3b:31:ee:d2:
38:3d:8a:f3:67:55:f8:19:f7:e0:0a:fa:ff:10:15:
4a:89:e8:5c:79:68:f0:dc:73:15:a2:2f:c6:fc:e9:
e0:71:a5:16:5d:44:03:ae:50:6f:d5:4c:e0:0d:77:
1a:35:23:df:e0:89:49:75:5c:a2:36:4d:63:5f:4e:
ce:2c:9f:12:15:ce:f5:5a:e1:e3:55:b6:b6:0e:f5:
cf:27:ac:bf:09:4e:71:78:ea:2e:52:49:7c:e6:b7:
e4:79:e7:1c:35:f4:d0:32:81:3c:c5:7c:65:0a:bf:
1f:7b:5e:b4:f2:d9:cc:dc:1d:6a:7c:aa:6a:da:5f:
7b:e5:f0:0c:2c:86:7d:5f:52:e7:a4:bc:ec:81:32:
24:1c:41:52:4f:c9:f4:e1:da:85:6b:41:2a:ae:46:
de:0f:36:48:8a:60:a7:f4:18:de:bb:45:cc:65:c2:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:A0:87:AF:82:DC:81:7D:AD:F3:BD:D8:E2:EA:F4:25:E6:81:AE
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/CGOgh6-C3IF9rfO92OLq9CXmga4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:9b:07:c4:8a:2b:d8:e5:ae:d9:16:94:0c:05:4b:9f:13:3c:
69:f4:80:bc:a8:19:88:06:ea:97:7e:19:8f:90:4b:b0:1b:a6:
4c:2b:f9:e1:bc:f9:9d:07:97:65:af:8b:ed:ff:0c:b6:67:53:
00:a4:ee:94:3c:fa:88:bb:cb:94:b2:93:69:fe:a2:d0:a6:4c:
07:bf:ae:a0:99:11:8e:b7:08:1d:7d:dd:0f:e4:6b:7b:1e:0c:
d4:7a:94:8b:be:ec:4b:d9:ea:74:96:5d:7f:25:32:4e:04:40:
2f:06:50:4c:1d:99:91:ea:0b:d2:d1:ba:db:40:f0:b1:33:64:
5c:b4:97:f2:74:e3:ec:b1:48:ba:b9:fe:55:d9:e5:1b:3f:5e:
db:e4:3e:ac:73:99:62:93:7b:1f:32:74:41:da:dc:9f:f9:7c:
6a:72:3c:e4:a6:8d:01:e7:e8:fb:0c:52:07:51:80:c6:ad:4b:
62:c1:49:84:c1:a0:6d:b5:9a:a2:48:b3:32:1a:6f:61:be:ac:
09:ec:8d:46:39:c2:7a:ab:5f:ee:d4:60:3d:09:5d:4f:f7:73:
b9:5f:cf:a5:18:4e:0f:01:12:43:a9:a7:85:ae:de:68:42:51:
ea:d7:51:fe:70:56:d3:5b:55:1d:48:b3:a9:39:a3:ce:fb:cd:
c3:2d:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:55 2024 by rpki-client on console-ams.rpki-client.org