Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/zM2bVXlLd9f1GNTR_e4z6xoukCQ.roa
File: zM2bVXlLd9f1GNTR_e4z6xoukCQ.roa (raw, json)
Hash identifier: KFNryJ2eRXFpJHSFuFCdYOpvaSg1AY5q5bwzvxYMp94=
Subject key identifier: CC:CD:9B:55:79:4B:77:D7:F5:18:D4:D1:FD:EE:33:EB:1A:2E:90:24
Certificate issuer: /CN=fd33f44e08988baecafdb5cf290bdc8d18c9e46a
Certificate serial: 0661082B
Authority key identifier: FD:33:F4:4E:08:98:8B:AE:CA:FD:B5:CF:29:0B:DC:8D:18:C9:E4:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TP0TgiYi67K_bXPKQvcjRjJ5Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/zM2bVXlLd9f1GNTR_e4z6xoukCQ.roa
Signing time: Sat 01 Jan 2022 07:04:39 +0000
ROA not before: Sat 01 Jan 2022 07:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205614
IP address blocks: 45.135.124.0/22 maxlen: 22
2a0e:8b40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107022379 (0x661082b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd33f44e08988baecafdb5cf290bdc8d18c9e46a
Validity
Not Before: Jan 1 07:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cccd9b55794b77d7f518d4d1fdee33eb1a2e9024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:7f:df:e5:90:aa:ae:aa:68:58:1e:f4:79:
79:23:77:17:27:10:2d:be:2c:9b:f1:48:0a:08:27:
e1:34:a0:1e:9b:1d:d7:0a:ef:2d:7b:ae:ad:e8:22:
6f:66:95:4e:08:35:05:54:da:23:da:77:d5:91:a8:
d6:c6:98:96:70:ee:c3:7a:33:48:dd:6a:9f:24:82:
40:45:e4:91:ee:b1:8e:73:f5:23:7f:6b:d5:71:d7:
48:97:95:b5:83:a7:c6:20:c6:84:69:25:86:26:d4:
d1:a1:7c:76:9d:ce:25:ac:23:84:8d:e6:72:bf:d6:
59:cc:d6:2c:08:0f:d8:ac:26:86:c1:27:f0:8d:95:
5a:ce:d4:65:be:03:c2:45:06:c9:a5:99:4b:05:aa:
e0:65:9f:94:79:41:0c:dd:ad:20:1d:c0:ba:d3:8f:
07:b9:e3:d0:c7:98:f3:70:ab:9f:14:7e:e7:11:b4:
8e:97:ed:25:e9:73:d7:df:b5:fe:21:9f:6b:c7:18:
4f:55:80:5b:0d:ec:56:93:e5:ef:ba:4a:2e:a1:92:
43:54:47:39:67:b4:52:cb:95:09:97:ec:12:88:8b:
be:b3:be:f7:02:9b:e1:34:41:a3:39:f9:11:ea:ec:
4b:a7:ef:9e:43:98:cb:d8:8c:38:bd:20:57:c6:c1:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:9B:55:79:4B:77:D7:F5:18:D4:D1:FD:EE:33:EB:1A:2E:90:24
X509v3 Authority Key Identifier:
keyid:FD:33:F4:4E:08:98:8B:AE:CA:FD:B5:CF:29:0B:DC:8D:18:C9:E4:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TP0TgiYi67K_bXPKQvcjRjJ5Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/zM2bVXlLd9f1GNTR_e4z6xoukCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/_TP0TgiYi67K_bXPKQvcjRjJ5Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.124.0/22
IPv6:
2a0e:8b40::/29
Signature Algorithm: sha256WithRSAEncryption
23:0c:58:3c:28:1e:ca:19:ce:bc:fc:86:86:13:62:be:c0:1c:
3a:ca:56:12:62:62:37:54:f0:16:68:57:a9:44:e7:2e:63:16:
59:61:36:ce:ed:5d:f6:26:66:df:31:97:6f:cd:18:f4:03:9d:
a9:1f:0f:52:4f:be:4a:5d:b4:51:86:d8:02:b0:a0:2b:68:e4:
50:59:6b:ab:40:dd:5f:4d:2a:fe:4f:31:36:fa:74:8e:c6:b4:
79:52:3d:83:dd:ba:c1:64:a0:6a:e2:3b:6d:03:50:95:af:82:
f1:c2:4a:ef:82:f4:3f:a1:5f:9c:12:cf:df:bd:6d:ec:92:f2:
e9:0e:65:5b:9a:be:70:c1:2d:76:e4:5e:70:b7:4d:d3:58:c4:
5e:71:43:8f:73:31:02:ad:6b:3c:53:69:95:4f:71:50:f4:be:
85:3b:46:32:ea:20:46:c1:82:b3:bb:dd:86:dc:06:16:18:d5:
b5:fe:91:49:a3:b7:b7:68:5f:10:a8:1a:16:af:3b:75:d8:c2:
50:5c:91:ad:55:de:73:ae:73:8c:89:77:75:7e:83:09:df:31:
04:56:a7:e9:e1:8c:d0:e6:c7:22:83:b7:7b:e8:1c:52:e9:b6:
9f:7d:c2:b9:dc:64:38:09:1f:91:07:bf:82:b2:f3:c9:28:4a:
76:5b:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:25 2024 by rpki-client on console-fra.rpki-client.org