Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/psfotpzR6rsWFpGF8WPvVKxOPCY.roa
File: psfotpzR6rsWFpGF8WPvVKxOPCY.roa (raw, json)
Hash identifier: BItK2eQziRzRMt85gHxXXPkm7R4gQZ1xNnz9TJqVD2c=
Subject key identifier: A6:C7:E8:B6:9C:D1:EA:BB:16:16:91:85:F1:63:EF:54:AC:4E:3C:26
Certificate issuer: /CN=cb4984f0b91c236f4198c4f26a7dbfee86e1101c
Certificate serial: 0718E8D4
Authority key identifier: CB:49:84:F0:B9:1C:23:6F:41:98:C4:F2:6A:7D:BF:EE:86:E1:10:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0mE8LkcI29BmMTyan2_7obhEBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/psfotpzR6rsWFpGF8WPvVKxOPCY.roa
Signing time: Sat 01 Jan 2022 13:06:32 +0000
ROA not before: Sat 01 Jan 2022 13:06:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 45.9.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119072980 (0x718e8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4984f0b91c236f4198c4f26a7dbfee86e1101c
Validity
Not Before: Jan 1 13:06:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6c7e8b69cd1eabb16169185f163ef54ac4e3c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:86:6f:15:c5:a3:04:a5:01:22:2a:c5:16:
15:4d:ab:85:77:2b:b3:91:44:33:18:4f:d9:a7:c0:
be:a8:bc:a6:be:73:12:84:d5:a1:3d:2d:2d:c9:21:
ad:00:be:53:c9:7a:e5:c2:1e:6e:ec:b0:2f:99:55:
a6:49:d2:30:63:da:d0:fa:50:61:78:64:67:55:2d:
50:37:df:60:e5:cd:54:73:6d:3d:44:97:94:f2:92:
b9:4c:65:5e:4b:eb:13:76:3d:60:42:d7:86:48:71:
bd:a3:db:62:14:18:96:76:83:04:37:f8:0b:55:9d:
aa:d0:51:ba:7a:3a:5d:d7:08:ab:58:52:db:e9:b6:
bc:74:24:ea:aa:a1:46:f6:59:48:bb:3a:db:af:10:
cb:0d:8c:e8:80:51:13:6b:62:ed:f3:e7:43:f3:e6:
f0:60:bd:22:24:c1:4b:94:67:42:21:11:04:83:00:
0e:c8:1b:df:b6:d7:e7:7e:57:96:09:9a:c0:43:2a:
ee:87:e8:8d:72:42:2b:9c:b4:72:e0:e9:92:9c:00:
b7:1b:32:c8:d1:40:f8:d4:de:39:88:6b:c9:8b:bb:
01:84:35:c8:73:34:6b:5c:61:44:8c:14:50:5a:60:
f8:74:71:7b:70:fe:56:e7:b9:fe:50:d4:76:e1:cd:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C7:E8:B6:9C:D1:EA:BB:16:16:91:85:F1:63:EF:54:AC:4E:3C:26
X509v3 Authority Key Identifier:
keyid:CB:49:84:F0:B9:1C:23:6F:41:98:C4:F2:6A:7D:BF:EE:86:E1:10:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0mE8LkcI29BmMTyan2_7obhEBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/psfotpzR6rsWFpGF8WPvVKxOPCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a84b1c-878e-42c6-a4cc-c42bd6ee6f6a/1/y0mE8LkcI29BmMTyan2_7obhEBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:02:a1:92:a2:76:87:9d:7d:28:53:58:e7:bc:8d:ed:90:75:
f7:b5:0d:82:78:d5:6f:be:a6:59:4c:5d:cb:11:c8:d0:37:f6:
fb:2e:9f:5a:ce:21:88:52:de:dd:f1:32:82:77:37:69:a1:17:
1e:ae:86:c5:e4:be:ea:c0:42:71:2e:3e:9b:9b:97:fe:d0:19:
5d:8b:7d:81:6c:f9:f4:45:33:ea:3f:3e:95:da:83:53:5d:09:
cf:87:64:95:da:41:88:76:bb:84:81:de:52:33:c0:9b:60:67:
1c:9a:7a:43:92:ff:f3:7a:a7:53:12:e6:db:54:8a:59:c4:a7:
27:aa:1d:b2:cf:77:9f:24:52:8e:01:a3:44:7a:a5:49:6c:4a:
6b:76:b3:95:f7:77:e7:83:39:65:27:47:d3:de:53:22:e3:43:
9d:9d:10:1e:e9:80:df:2d:aa:73:ef:40:dc:0a:6e:aa:77:83:
a2:da:67:97:39:1a:55:c3:09:ce:82:88:9c:4c:37:11:82:98:
e0:5e:8c:55:22:af:0c:76:e6:d9:36:fb:27:4b:23:73:28:fd:
17:7e:0c:82:17:3c:8b:b2:cf:95:cf:cf:a1:69:67:1c:98:84:
3d:46:6f:b7:72:7d:2e:ae:00:ca:4c:b7:06:8b:c8:ac:be:bb:
ac:c9:1a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org