Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/_QERrGsJh0bF95dFDXAgJZ9YzDI.roa
File: _QERrGsJh0bF95dFDXAgJZ9YzDI.roa (raw, json)
Hash identifier: ufUKHxI5Iu6hpS9ClM7dCvjO+WH/9F8mDDFoqscgYb4=
Subject key identifier: FD:01:11:AC:6B:09:87:46:C5:F7:97:45:0D:70:20:25:9F:58:CC:32
Certificate issuer: /CN=d3c14142fc885708d0cf28d580cd2c16dbc14a25
Certificate serial: 848D88
Authority key identifier: D3:C1:41:42:FC:88:57:08:D0:CF:28:D5:80:CD:2C:16:DB:C1:4A:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08FBQvyIVwjQzyjVgM0sFtvBSiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/_QERrGsJh0bF95dFDXAgJZ9YzDI.roa
Signing time: Sat 01 Jan 2022 01:57:51 +0000
ROA not before: Sat 01 Jan 2022 01:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200407
IP address blocks: 45.90.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8686984 (0x848d88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c14142fc885708d0cf28d580cd2c16dbc14a25
Validity
Not Before: Jan 1 01:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd0111ac6b098746c5f797450d7020259f58cc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1d:39:16:fe:a9:01:06:b4:d2:6b:7b:fb:61:
0b:71:b2:7b:fa:73:2a:c4:1b:2f:56:1d:92:b5:4f:
19:67:cf:ed:af:37:ae:84:af:da:ed:0c:26:3b:72:
19:cb:81:5f:8f:8a:c8:7d:02:6b:95:ce:36:46:2a:
56:a7:f6:1e:a6:5f:50:1f:7c:38:82:f5:d5:2c:b1:
43:b0:36:1e:19:73:f4:ff:d0:43:e8:af:c7:a9:67:
34:72:88:c4:b4:be:29:02:3f:42:75:db:bc:14:10:
da:4e:f1:62:04:c9:86:dc:79:ab:0f:66:ab:5e:5b:
46:e7:ae:e3:6a:d6:f3:1b:54:0e:da:69:c0:87:46:
86:76:86:77:80:a5:a1:ce:03:3c:28:d5:21:82:f8:
8d:99:1b:8f:4e:23:a2:38:d5:e8:dc:df:ae:87:7c:
3b:8b:f9:4c:c0:eb:49:5c:7c:7e:4f:14:72:b4:83:
af:0c:8e:e8:4d:f2:c4:01:3d:93:7a:f2:a9:c1:b8:
9d:3f:7b:bc:92:a3:13:74:6e:21:86:f0:9d:d0:9a:
0e:10:ca:1e:25:75:33:f1:69:cb:18:2c:31:8e:f1:
93:10:23:49:3c:1d:8f:16:72:ea:c5:88:64:25:d5:
2a:8f:c4:3e:bb:1f:16:ec:17:2e:63:2c:06:99:a2:
a5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:11:AC:6B:09:87:46:C5:F7:97:45:0D:70:20:25:9F:58:CC:32
X509v3 Authority Key Identifier:
keyid:D3:C1:41:42:FC:88:57:08:D0:CF:28:D5:80:CD:2C:16:DB:C1:4A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08FBQvyIVwjQzyjVgM0sFtvBSiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/_QERrGsJh0bF95dFDXAgJZ9YzDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d4c940-edb8-49d0-a775-848750e68646/1/08FBQvyIVwjQzyjVgM0sFtvBSiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.52.0/22
Signature Algorithm: sha256WithRSAEncryption
26:f6:f4:c9:c2:d8:e4:3a:24:ed:0f:af:6e:fe:bf:97:9b:49:
40:49:39:8f:68:63:c0:a0:4c:7a:ed:a6:1d:51:3f:a1:58:6b:
77:2f:5f:de:77:1a:6d:bd:9d:44:22:db:d9:6e:dd:62:b3:04:
6f:51:6b:15:3f:ad:e0:3e:06:9d:dc:e2:81:ed:22:b3:aa:38:
8b:ca:6c:65:4b:22:e5:fb:03:7f:7e:73:72:d0:85:9d:5e:84:
0f:13:a4:46:72:67:0e:04:0c:22:7a:af:4d:9b:f5:c6:75:29:
76:be:27:4b:4d:3b:d2:62:a3:f0:41:5e:00:f4:99:63:4c:2e:
30:3d:f0:2e:87:43:00:72:5d:c5:f9:a3:93:b8:b9:5d:56:25:
d1:6e:aa:77:4d:55:5a:fb:c5:7e:b9:df:7b:ce:03:81:93:6e:
aa:0f:b4:49:61:5e:5c:76:56:b9:d1:3f:d5:b3:18:aa:90:89:
ad:91:1b:17:53:6f:52:6c:2f:53:23:7c:d6:53:e0:35:64:4d:
cc:9b:16:37:00:a5:a6:2f:fb:05:3e:e8:2c:18:41:a3:53:47:
1e:2d:30:21:e2:cf:86:a4:55:0d:0c:6c:bf:27:60:f0:a0:d2:
05:97:c8:e5:a6:7c:4e:ec:c3:9e:8d:61:d1:cf:67:91:b9:01:
ef:3d:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:21 2023 by rpki-client on console-ams.rpki-client.org