Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/QS9aTUJnGNQf0YKWybMaxNmYR8o.roa
File: QS9aTUJnGNQf0YKWybMaxNmYR8o.roa (raw, json)
Hash identifier: HLQAnQ5BP7X6GZQjlWvbn+tPs9Bu7x1shaeYtv2W3L4=
Subject key identifier: 41:2F:5A:4D:42:67:18:D4:1F:D1:82:96:C9:B3:1A:C4:D9:98:47:CA
Certificate issuer: /CN=c3f1c2d3d9e46341d0a27f05584ad1b0fcba3e40
Certificate serial: 0181FC022D72BE15DDB29934A69C78B34347
Authority key identifier: C3:F1:C2:D3:D9:E4:63:41:D0:A2:7F:05:58:4A:D1:B0:FC:BA:3E:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_HC09nkY0HQon8FWErRsPy6PkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/QS9aTUJnGNQf0YKWybMaxNmYR8o.roa
Signing time: Thu 14 Jul 2022 09:20:09 +0000
ROA not before: Thu 14 Jul 2022 09:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208364
IP address blocks: 45.132.9.0/24 maxlen: 24
45.132.10.0/24 maxlen: 24
45.132.8.0/24 maxlen: 24
45.132.11.0/24 maxlen: 24
2a0e:6540::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:02:2d:72:be:15:dd:b2:99:34:a6:9c:78:b3:43:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3f1c2d3d9e46341d0a27f05584ad1b0fcba3e40
Validity
Not Before: Jul 14 09:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=412f5a4d426718d41fd18296c9b31ac4d99847ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:e5:93:90:e8:60:62:1d:ce:ae:8f:c2:80:
c4:32:b3:51:6a:18:ba:38:a6:66:a9:de:13:dd:73:
ee:80:54:0e:e4:02:b7:db:b2:08:3a:11:fa:80:d0:
62:84:e6:56:68:1f:f8:c3:51:b7:02:9a:5d:13:ac:
2d:42:3e:10:0e:d8:f1:25:33:81:d4:86:e4:14:c9:
10:a0:72:49:d4:ef:f5:33:25:ee:ea:98:0f:f6:38:
27:1f:3b:6d:4a:27:ce:2f:c3:42:37:99:d9:36:4f:
fa:53:ce:65:9b:45:9b:8d:da:fb:22:de:8f:16:11:
08:49:2e:04:7d:5b:c8:1f:ed:70:49:30:2d:43:f5:
85:5c:d8:72:35:7c:0f:8d:28:90:34:5e:78:3e:e0:
a4:47:61:d4:d3:62:de:95:64:2f:56:05:76:8b:21:
77:8c:a8:e7:16:4d:23:d6:a4:cd:5d:20:40:ed:32:
fc:75:15:68:06:c9:34:8f:f4:55:64:a9:54:9d:63:
e3:ed:a6:51:2f:3f:5d:a0:c5:d0:bf:3a:34:6c:c7:
db:82:d7:b3:b7:8c:68:16:a2:5c:44:32:99:0b:8d:
d3:aa:a0:c6:e0:89:42:41:b4:3d:4c:c8:a3:09:9d:
56:54:92:c0:dc:25:51:97:0b:c9:5b:fc:d5:29:44:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2F:5A:4D:42:67:18:D4:1F:D1:82:96:C9:B3:1A:C4:D9:98:47:CA
X509v3 Authority Key Identifier:
keyid:C3:F1:C2:D3:D9:E4:63:41:D0:A2:7F:05:58:4A:D1:B0:FC:BA:3E:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_HC09nkY0HQon8FWErRsPy6PkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/QS9aTUJnGNQf0YKWybMaxNmYR8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c30960-92f0-46c5-8f4e-8b61b417c328/1/w_HC09nkY0HQon8FWErRsPy6PkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.8.0/22
IPv6:
2a0e:6540::/29
Signature Algorithm: sha256WithRSAEncryption
a6:86:3a:33:1c:a6:76:20:53:ff:0b:76:cd:eb:06:bf:e9:bc:
89:54:a2:8a:02:ba:ab:64:fd:45:af:6d:b2:59:f7:c5:1a:24:
95:8b:dd:e0:f5:09:3f:ba:5a:1f:62:e2:a3:74:79:9a:ed:3d:
5a:56:95:89:34:f8:28:66:22:31:b4:d4:72:72:fa:12:30:56:
03:39:78:3c:20:dd:63:6f:40:81:2f:f0:33:17:42:f3:90:2c:
af:40:03:bb:65:7c:ba:be:8d:2a:5d:eb:ba:e7:b6:65:e5:52:
41:c2:e6:5f:21:ad:43:74:fe:be:09:f7:d9:a6:92:b2:75:e9:
3f:fe:5a:74:ec:7b:32:0d:46:af:87:de:13:19:7f:81:48:60:
8b:22:2d:91:a6:e7:4b:1b:0c:ff:44:58:c1:86:76:0a:4b:e2:
1b:08:ae:f6:65:86:58:3b:6d:63:f0:af:72:37:b1:b0:84:33:
c6:2b:e4:2e:5d:85:70:75:d0:00:65:cc:ae:2e:c8:92:97:0f:
65:b2:e3:b6:4a:22:53:8c:6c:e4:f7:6f:71:e1:9f:ca:13:c3:
01:de:68:35:dd:dc:d3:05:03:ad:2a:f7:eb:87:3a:53:db:64:
8b:5a:40:bf:2a:59:8e:50:a1:a6:e4:73:c4:75:c0:64:34:32:
13:47:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:50 2024 by rpki-client on console-ams.rpki-client.org