Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/BwH9ysppR6332clBLj8d5mC75Lc.roa
File: BwH9ysppR6332clBLj8d5mC75Lc.roa (raw, json)
Hash identifier: 20Q2x871z8PesbIf6MpNq7VJH9qGoOzDAy1qhOl4818=
Subject key identifier: 07:01:FD:CA:CA:69:47:AD:F7:D9:C9:41:2E:3F:1D:E6:60:BB:E4:B7
Certificate issuer: /CN=f14ef4209094762690a4017d4ff9715ecc33b85d
Certificate serial: 018571954FEF1251108C011CAD381AE78B79
Authority key identifier: F1:4E:F4:20:90:94:76:26:90:A4:01:7D:4F:F9:71:5E:CC:33:B8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8U70IJCUdiaQpAF9T_lxXswzuF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/BwH9ysppR6332clBLj8d5mC75Lc.roa
Signing time: Mon 02 Jan 2023 08:24:48 +0000
ROA not before: Mon 02 Jan 2023 08:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 45.86.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:4f:ef:12:51:10:8c:01:1c:ad:38:1a:e7:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14ef4209094762690a4017d4ff9715ecc33b85d
Validity
Not Before: Jan 2 08:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0701fdcaca6947adf7d9c9412e3f1de660bbe4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:22:a2:95:7a:3a:f8:78:0f:d6:31:a2:b4:
22:a0:1b:de:a1:28:0d:b1:0a:65:96:93:70:f2:b5:
31:fb:85:48:80:17:a4:e4:af:85:61:4b:4e:9d:3c:
4d:cf:db:14:71:c8:93:05:ad:e6:62:83:43:5a:d0:
44:dd:39:3e:d5:1b:a2:a1:1c:6e:fe:71:86:a4:c2:
ad:cb:d5:ed:2c:e0:aa:46:f5:97:ae:94:97:a1:ac:
00:10:4d:44:8d:60:af:2a:7a:94:e5:38:27:03:fe:
6a:32:6e:ef:76:dc:3b:01:76:08:0a:e0:24:13:99:
95:4d:37:47:ff:af:d3:99:41:4b:26:49:8c:29:b9:
b8:9a:1e:07:42:9d:c5:27:49:be:a3:59:99:2e:fd:
c2:bf:78:af:a8:b6:db:ae:8d:ae:70:8b:e5:cd:71:
66:1c:fa:ce:a5:81:60:13:e4:00:9d:0e:cd:ab:73:
de:e1:e2:85:b0:0e:88:a0:7d:1e:58:55:a4:90:41:
29:18:a7:1e:f3:c6:67:80:53:e5:1a:e9:2d:a4:86:
ed:da:2e:4a:21:42:03:bc:94:b3:37:f8:ef:3a:6a:
19:9d:c2:58:ef:e4:31:e5:84:71:f1:b0:88:45:89:
f8:bc:eb:80:83:be:75:39:4f:8d:fb:60:c9:2d:44:
2f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:01:FD:CA:CA:69:47:AD:F7:D9:C9:41:2E:3F:1D:E6:60:BB:E4:B7
X509v3 Authority Key Identifier:
keyid:F1:4E:F4:20:90:94:76:26:90:A4:01:7D:4F:F9:71:5E:CC:33:B8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8U70IJCUdiaQpAF9T_lxXswzuF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/BwH9ysppR6332clBLj8d5mC75Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/816625-906c-4701-a468-8cce68542ba1/1/8U70IJCUdiaQpAF9T_lxXswzuF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.85.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:c5:11:94:8c:cb:85:f2:81:5c:be:58:93:70:c7:40:a6:
c6:e7:60:c1:ad:8b:d7:16:41:37:44:9a:47:92:e1:e5:14:3b:
65:53:02:c1:e4:cf:29:75:69:e5:a1:01:94:a3:de:e0:81:42:
b9:12:e1:3f:aa:ac:97:15:d7:41:f9:37:df:0d:b3:08:9b:e7:
e5:13:ab:ed:89:b5:2c:30:99:a6:d5:8b:7a:76:7a:01:0d:c7:
d2:91:56:c8:74:12:21:d8:d8:f9:27:24:7e:31:e1:40:27:ff:
9b:05:05:02:a2:de:6b:5a:be:81:ac:2f:8a:75:fb:da:e5:11:
c2:42:e7:05:df:62:68:c2:0a:f7:43:4e:6e:f4:2f:6b:1a:04:
a9:05:7f:46:a5:be:83:f8:10:85:4c:99:49:de:41:b9:18:9b:
5a:1f:1a:a4:1e:78:8c:5e:e4:97:b6:2e:ce:e7:52:d2:4b:c1:
2f:22:2d:df:d9:b8:8e:ea:fb:ad:1b:e0:6a:19:83:3b:df:29:
1f:bb:1d:70:3a:1d:27:c5:d6:b6:c4:da:69:ab:3f:a9:00:38:
09:53:5b:51:ab:82:3e:0c:5c:78:9b:ce:9b:d7:d8:f7:c5:09:
5e:44:01:20:35:3a:ff:de:24:81:e4:a7:7f:28:9c:b8:05:b1:
e4:9e:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 13:28:43 2023 by rpki-client on console-fra.rpki-client.org