Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/23587f-6c39-45f9-baa9-f0600e8a3cd0/1/YzubjYJy9p_E9zI3jCaQMhRy1kw.roa
File: YzubjYJy9p_E9zI3jCaQMhRy1kw.roa (raw, json)
Hash identifier: JcfVIMMC9A5kWEsAO09k+aUrVaG/4hjl7GR04Mk3+O0=
Subject key identifier: 63:3B:9B:8D:82:72:F6:9F:C4:F7:32:37:8C:26:90:32:14:72:D6:4C
Certificate issuer: /CN=d14f25429537c2f96c1d6bd1058c33ed026915cf
Certificate serial: 0280B04F
Authority key identifier: D1:4F:25:42:95:37:C2:F9:6C:1D:6B:D1:05:8C:33:ED:02:69:15:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0U8lQpU3wvlsHWvRBYwz7QJpFc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/23587f-6c39-45f9-baa9-f0600e8a3cd0/1/YzubjYJy9p_E9zI3jCaQMhRy1kw.roa
Signing time: Sat 01 Jan 2022 15:04:02 +0000
ROA not before: Sat 01 Jan 2022 15:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 45.146.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41988175 (0x280b04f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14f25429537c2f96c1d6bd1058c33ed026915cf
Validity
Not Before: Jan 1 15:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633b9b8d8272f69fc4f732378c2690321472d64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c5:42:2e:63:d1:a5:75:f5:a4:a5:3e:4c:d7:
59:27:3d:de:74:39:eb:95:d6:82:b8:8f:90:77:ed:
05:36:3e:5d:ab:f6:2d:aa:88:8b:f1:b6:3b:97:a3:
99:f8:38:a5:d1:5e:fa:22:ac:6d:33:61:6e:89:bc:
e2:91:d5:01:ce:79:8f:6d:76:35:63:bb:96:cb:38:
4a:ae:67:c3:2d:42:81:43:72:ca:13:59:55:f0:38:
eb:fd:03:ce:19:07:9f:c6:1a:7d:02:6e:78:4e:c6:
4c:fe:c9:c6:7b:f2:16:f7:20:b8:cc:be:0c:7e:f1:
3d:09:e0:5e:e1:59:c3:a6:b3:ff:cc:77:c8:16:89:
c5:c9:95:85:78:13:9d:ff:e0:7e:b3:f2:a1:b0:49:
fe:38:7e:cc:ed:08:75:e0:0c:6b:4c:58:e3:60:9f:
2c:0e:66:25:5a:00:c9:56:6e:eb:60:24:c9:b8:6d:
42:04:b1:ae:cc:02:12:c2:cc:1c:0d:31:fb:bc:94:
1a:9b:1b:f3:c4:11:b6:3b:83:da:ba:f0:86:e2:03:
48:c5:e7:d8:d9:9f:d8:a0:1b:bb:f3:88:b1:83:ea:
78:cf:80:1f:09:cc:cd:1d:72:e0:3c:02:32:e9:0e:
48:e7:c7:ae:ae:f8:69:62:ae:8a:88:9e:e2:0a:ae:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:9B:8D:82:72:F6:9F:C4:F7:32:37:8C:26:90:32:14:72:D6:4C
X509v3 Authority Key Identifier:
keyid:D1:4F:25:42:95:37:C2:F9:6C:1D:6B:D1:05:8C:33:ED:02:69:15:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0U8lQpU3wvlsHWvRBYwz7QJpFc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/23587f-6c39-45f9-baa9-f0600e8a3cd0/1/YzubjYJy9p_E9zI3jCaQMhRy1kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/23587f-6c39-45f9-baa9-f0600e8a3cd0/1/0U8lQpU3wvlsHWvRBYwz7QJpFc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.224.0/22
Signature Algorithm: sha256WithRSAEncryption
09:bf:be:14:b1:97:d5:3b:16:3d:b6:99:94:e5:86:e5:c5:e3:
3b:35:80:15:52:79:d5:9a:ae:78:76:26:e1:cd:1b:6b:91:e0:
73:41:a5:15:2b:eb:b9:dc:3e:f7:81:ff:fd:01:cc:9f:26:5d:
4c:9a:27:8d:6a:20:e8:23:0a:dd:9d:6b:2c:5f:c8:9f:44:28:
12:76:98:7c:71:7a:4c:33:1b:dc:83:0a:18:ae:33:b7:49:97:
31:56:cf:f6:9d:4a:1f:f7:7f:ea:22:6f:72:2f:bf:71:90:31:
4a:19:71:d3:75:15:c8:67:4a:e5:79:79:95:03:ec:03:15:fd:
fc:ec:97:74:d9:67:3a:b1:dd:6f:22:b2:5c:4a:ea:a3:15:97:
c7:2a:a0:9f:38:35:6b:1a:6c:53:b6:ad:45:68:f1:5a:1e:f0:
ee:fc:43:7b:0a:dc:a8:a1:09:5e:e5:6e:d9:fd:e0:43:b4:59:
1d:1d:28:f3:3a:8d:49:87:8f:a7:f0:41:f6:d3:7b:10:d1:a9:
1e:65:5e:0b:b2:d1:4c:0d:8a:ac:fe:96:17:bb:05:6d:33:45:
6b:54:57:c8:2b:cc:5a:52:40:ec:f0:5a:00:6d:27:cb:ba:2e:
70:44:c2:7f:b6:46:6c:5e:ef:af:f5:f5:82:b7:7b:e0:a7:80:
3a:42:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org