Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/fc65f8-f720-4645-9521-3fc28ca34a6e/1/tiez3eAx92FYtADDt7ClYjvCBX8.roa
File: tiez3eAx92FYtADDt7ClYjvCBX8.roa (raw, json)
Hash identifier: 8dEq9ncLnSx0D6LqK4FCgGr9R35a8IWQ6cKbNK7rIO8=
Subject key identifier: B6:27:B3:DD:E0:31:F7:61:58:B4:00:C3:B7:B0:A5:62:3B:C2:05:7F
Certificate issuer: /CN=9d21472f7645514dc1abe60dfd567a66e42da0d4
Certificate serial: 0526E3EF
Authority key identifier: 9D:21:47:2F:76:45:51:4D:C1:AB:E6:0D:FD:56:7A:66:E4:2D:A0:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSFHL3ZFUU3Bq-YN_VZ6ZuQtoNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/fc65f8-f720-4645-9521-3fc28ca34a6e/1/tiez3eAx92FYtADDt7ClYjvCBX8.roa
Signing time: Sat 01 Jan 2022 05:03:06 +0000
ROA not before: Sat 01 Jan 2022 05:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199585
IP address blocks: 81.162.208.0/21 maxlen: 24
45.158.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86434799 (0x526e3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d21472f7645514dc1abe60dfd567a66e42da0d4
Validity
Not Before: Jan 1 05:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b627b3dde031f76158b400c3b7b0a5623bc2057f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:21:e7:5b:6c:33:61:52:45:61:47:3b:56:
84:7b:21:2f:f0:fd:57:bd:93:cd:9d:15:7d:dc:a5:
5b:1a:97:f2:70:90:3e:e5:5e:03:31:2c:6e:cc:10:
e5:c8:21:97:61:3e:c1:90:59:1d:db:27:7a:f2:0f:
53:f8:3e:14:cc:15:02:dc:89:fd:3b:8f:4e:da:8a:
ea:94:c1:c3:e4:dc:37:f4:e2:2c:39:92:99:f7:d0:
bf:bb:14:68:13:ef:5f:65:49:37:5a:4c:30:e1:5a:
80:e7:9d:44:cf:ea:4e:02:fd:c7:f4:a1:7e:92:bc:
c0:80:53:ff:e2:28:0b:58:bb:da:7f:7b:b8:72:8c:
ac:3e:ea:9f:0d:eb:b6:27:92:39:89:2b:c8:af:09:
78:c0:fd:e7:af:20:29:c9:aa:f5:9c:f9:2f:61:ac:
6d:5d:08:44:b2:8c:71:2c:7b:89:a3:c2:f1:f3:e1:
46:92:e9:aa:07:5a:f9:9e:aa:00:f3:6b:d6:04:1e:
55:c2:d8:89:f7:7f:77:86:ef:e2:1a:6a:6c:01:9f:
3a:90:d1:ce:7c:42:04:1f:6b:3d:eb:83:3b:d4:bf:
a4:b7:ae:a0:6c:69:21:8d:de:0c:42:e4:36:9e:26:
88:4c:cc:07:65:7d:b9:60:fa:24:a9:b1:44:71:c1:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:27:B3:DD:E0:31:F7:61:58:B4:00:C3:B7:B0:A5:62:3B:C2:05:7F
X509v3 Authority Key Identifier:
keyid:9D:21:47:2F:76:45:51:4D:C1:AB:E6:0D:FD:56:7A:66:E4:2D:A0:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSFHL3ZFUU3Bq-YN_VZ6ZuQtoNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/fc65f8-f720-4645-9521-3fc28ca34a6e/1/tiez3eAx92FYtADDt7ClYjvCBX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/fc65f8-f720-4645-9521-3fc28ca34a6e/1/nSFHL3ZFUU3Bq-YN_VZ6ZuQtoNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.108.0/22
81.162.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:7a:f3:5d:1f:ca:98:16:23:d2:5b:9c:4d:3d:32:55:8e:75:
6e:eb:45:ce:41:aa:2a:19:6d:74:b3:a3:f7:52:da:c4:cd:b4:
6b:6d:d2:d9:0f:4a:44:ef:23:dd:a4:6e:5c:d1:a8:07:86:c6:
f7:49:2e:55:9b:74:56:db:78:e8:99:ca:f3:bb:c2:98:01:9b:
7f:b4:c4:aa:5c:15:15:e5:04:1d:37:c6:c1:4b:15:eb:e2:29:
26:15:9d:ba:ae:ec:eb:64:83:c9:99:d6:16:4e:e4:ec:30:a7:
4e:fb:6c:40:69:bf:2a:9c:9d:3b:9f:c6:f8:25:80:17:0f:dd:
8f:67:44:f1:ee:4b:a6:fa:b1:a7:a2:cc:2d:82:fb:33:ec:88:
59:ee:7b:29:c5:32:7d:79:f9:a8:ac:f6:06:7d:83:f7:4a:8b:
15:ac:81:f1:98:6e:b5:3a:dc:82:c0:9f:50:27:2d:ef:82:9e:
7a:19:8a:47:1b:22:e5:95:51:d1:1a:eb:bf:41:35:07:bc:5d:
a4:ae:61:77:a5:35:92:66:88:7e:a7:74:3b:fd:d2:f7:0a:50:
72:2d:f9:e6:c9:05:7a:82:9c:b4:32:7f:5d:75:53:63:a5:c3:
2c:9f:ff:6f:2b:9d:3b:47:9f:1f:af:bf:da:29:08:1e:c8:d6:
63:28:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org