Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/gNbYTycSr35RRbjked3_6HVxG0U.roa
File: gNbYTycSr35RRbjked3_6HVxG0U.roa (raw, json)
Hash identifier: faVnZg11fkRZ2eprjXtVPc5Tio1Qon7F4yVKf7bN3ik=
Subject key identifier: 80:D6:D8:4F:27:12:AF:7E:51:45:B8:E4:79:DD:FF:E8:75:71:1B:45
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01856D9D1D1EC3F3E541D9653DF6124EC7EE
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/gNbYTycSr35RRbjked3_6HVxG0U.roa
Signing time: Sun 01 Jan 2023 13:54:51 +0000
ROA not before: Sun 01 Jan 2023 13:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.146.105.0/24 maxlen: 24
45.80.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:1d:1e:c3:f3:e5:41:d9:65:3d:f6:12:4e:c7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Jan 1 13:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80d6d84f2712af7e5145b8e479ddffe875711b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:d8:5f:24:65:01:f5:a5:ee:5e:81:1a:d9:
e7:5f:fe:80:85:17:dd:ca:bb:39:74:b9:4e:01:f6:
20:8d:7d:61:74:d3:61:56:34:94:82:60:22:4d:1a:
bd:f3:82:16:d9:fd:9a:db:03:82:20:d8:61:c3:16:
87:69:e9:99:ca:c1:2c:4c:91:1c:87:36:a7:0b:d3:
44:c5:0e:c2:b8:d5:0e:81:0a:16:85:f9:1b:4e:63:
a1:2c:98:71:24:65:70:02:80:67:99:90:ac:db:2d:
95:dc:71:d3:16:8b:24:ba:8b:97:6f:3d:5d:c2:81:
ca:e5:0c:3e:c5:93:ff:d6:88:7e:e9:11:93:cc:4c:
e8:17:bb:b5:a0:40:ae:c0:61:a0:be:ab:a4:c9:45:
d4:c9:90:95:39:71:9c:23:ef:48:e0:a0:5e:87:ee:
94:2c:39:1b:1c:b9:ca:89:2e:0d:0b:37:c5:40:b8:
22:ac:b4:6f:04:4a:dc:87:f6:ff:26:25:16:c7:38:
89:bd:39:a1:b1:3c:e8:ec:82:14:5d:b8:71:1c:e6:
07:5a:9e:1f:ea:0f:9c:7c:5f:a0:c2:f7:fa:c4:b8:
61:9d:23:69:44:5b:35:90:08:c7:58:0f:dd:a9:9b:
25:42:f4:f7:62:fb:a4:4e:89:14:83:81:4a:a6:4d:
55:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D6:D8:4F:27:12:AF:7E:51:45:B8:E4:79:DD:FF:E8:75:71:1B:45
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/gNbYTycSr35RRbjked3_6HVxG0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/24
45.146.105.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8f:de:fc:d6:a1:39:f5:f4:f0:70:ea:ec:c5:5e:4e:8c:0a:
6d:ed:c4:24:04:1c:a0:6b:bf:9c:90:ed:45:88:db:ec:93:99:
7d:20:b1:e4:e1:b2:a4:6c:25:0f:e2:39:32:73:76:65:d4:15:
98:51:28:9f:90:4b:96:6a:2c:4f:6c:92:cd:56:80:5d:23:e8:
a2:73:c0:e9:45:f5:cd:92:1a:ff:2f:2b:51:17:48:ee:04:b3:
53:13:3e:54:fb:f8:94:9d:9f:95:da:1e:c0:7c:92:cb:59:f0:
b1:bf:6f:80:db:43:82:55:dd:2d:68:f1:cf:b6:f4:37:8f:1f:
a3:f3:59:88:39:da:d7:44:07:41:0c:e2:c5:a2:aa:6b:b4:59:
a2:5b:ba:28:71:2e:54:f8:b2:cd:3f:c8:76:25:7a:95:18:ea:
1d:e0:b7:3f:cb:9d:0a:b5:dc:8f:49:d1:e8:86:c3:25:8d:6a:
7a:fb:fd:d2:13:37:07:97:5a:6e:3b:a3:a1:53:ee:aa:de:af:
ba:da:f1:f0:58:ae:be:4c:b3:32:6d:30:f3:d7:86:22:6b:00:
df:fb:01:1a:83:f0:30:14:e8:40:3e:bc:7c:0d:b9:41:09:fa:
df:fb:e4:7c:9c:3b:db:92:e6:e1:e1:3a:4a:fb:07:d7:8d:49:
2b:8e:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:39 2023 by rpki-client on console-fra.rpki-client.org