Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/9okBSoy3VczettAhxAASu7QABUs.roa
File: 9okBSoy3VczettAhxAASu7QABUs.roa (raw, json)
Hash identifier: CJBLYwDKKzBwYIABjby2b17iUlUiE1zicgK0vcKOHF0=
Subject key identifier: F6:89:01:4A:8C:B7:55:CC:DE:B6:D0:21:C4:00:12:BB:B4:00:05:4B
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D212BD7155CF88A87287BFFD5D683
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/9okBSoy3VczettAhxAASu7QABUs.roa
Signing time: Sun 01 Jan 2023 13:54:52 +0000
ROA not before: Sun 01 Jan 2023 13:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 45.146.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:21:2b:d7:15:5c:f8:8a:87:28:7b:ff:d5:d6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f689014a8cb755ccdeb6d021c40012bbb400054b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:0d:22:c2:0f:12:a4:1f:b6:79:50:77:1d:
e8:c5:9e:9e:50:5a:5d:40:be:cb:73:18:7a:ec:f2:
3e:20:25:a7:3b:b6:5a:37:8b:d1:67:99:4b:1b:2e:
ff:ab:26:a7:e3:56:e5:e6:85:29:01:f9:39:a9:37:
d9:72:09:02:12:a5:8c:95:f9:8c:77:14:e5:89:58:
47:70:97:29:ef:f9:3a:8d:7d:8f:1b:6c:e2:05:c8:
31:05:79:00:60:50:e1:a3:f5:f2:d4:10:31:30:09:
b6:55:13:88:fb:df:11:98:4a:e4:d6:ac:a5:c2:d0:
f5:63:6a:e1:ac:cc:dc:48:35:1c:80:6a:2b:17:da:
a7:ec:28:58:58:68:50:a4:5c:80:a7:86:68:b5:d2:
10:6e:7d:7e:5a:02:76:b6:b6:ee:f0:2b:7e:8e:b5:
c9:1f:30:17:c0:dd:a0:de:70:22:a4:3d:dc:28:92:
21:21:27:a4:7d:d0:47:7d:89:90:a9:d0:1f:04:cd:
2c:77:0b:e7:c4:36:d9:9d:2f:c9:f1:0b:02:a0:e0:
5a:39:71:27:cc:c5:65:ec:53:1c:cb:d1:48:58:a3:
d5:04:d1:fd:ea:8b:43:59:d2:d6:2c:21:d3:09:25:
c0:8f:0f:65:2c:81:5b:6b:5d:20:57:0a:a0:98:20:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:89:01:4A:8C:B7:55:CC:DE:B6:D0:21:C4:00:12:BB:B4:00:05:4B
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/9okBSoy3VczettAhxAASu7QABUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1a:10:8c:5a:01:71:de:a3:ec:a2:23:91:7e:83:01:31:15:
14:9a:30:12:ee:38:76:5e:fe:23:ea:1f:3f:a3:36:52:1d:6c:
54:03:85:79:a7:05:40:96:0f:a7:7c:79:5e:c8:b6:a9:a6:01:
2d:bc:47:f6:08:48:d4:0e:4f:79:45:bb:7c:6b:f4:62:16:5a:
56:2c:34:07:99:31:d5:fd:b0:26:35:74:00:7e:f4:33:2e:a0:
5b:95:64:00:7c:a5:be:1c:6f:9a:fd:c0:f1:3c:f8:72:a2:79:
87:a4:5b:e7:e0:52:2a:57:32:1d:f7:e3:0a:47:c7:85:ef:65:
d6:9d:b1:42:d7:4c:5c:7c:b9:d4:7b:21:66:de:cd:30:26:6e:
7c:89:fa:7f:4d:6c:d1:cf:c3:7f:13:d3:bd:3f:c1:9f:cb:5c:
ae:b9:fe:3e:af:e0:2a:1c:c1:31:04:e1:3a:30:0d:4d:1e:64:
75:51:c1:d3:67:ee:fc:92:05:66:af:db:4e:88:6a:75:ad:c3:
e9:63:51:a8:39:21:71:90:a5:55:ab:f2:dd:d6:06:9a:1d:ed:
84:17:93:f0:8c:54:9a:ee:28:bb:7e:81:c3:17:db:18:54:9e:
ea:ca:91:8b:38:86:71:fa:de:80:57:dc:97:71:c4:6d:c7:f0:
29:60:31:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org