Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/CU9_l5U4_haC8oLtEHjrX3o82oo.roa
File: CU9_l5U4_haC8oLtEHjrX3o82oo.roa (raw, json)
Hash identifier: r/qYfFt4qV1OypLIGbM0xDtCfX+fhgLxM7c/A58zJNg=
Subject key identifier: 09:4F:7F:97:95:38:FE:16:82:F2:82:ED:10:78:EB:5F:7A:3C:DA:8A
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C34370AC436775B930A1276DAE4963087
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/CU9_l5U4_haC8oLtEHjrX3o82oo.roa
Signing time: Mon 04 Dec 2023 09:44:31 +0000
ROA not before: Mon 04 Dec 2023 09:44:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 194.40.248.0/24 maxlen: 24
45.12.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:37:0a:c4:36:77:5b:93:0a:12:76:da:e4:96:30:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 09:44:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094f7f979538fe1682f282ed1078eb5f7a3cda8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:72:b1:d1:af:4d:67:8a:60:33:e4:3d:7b:
c9:a6:15:f0:da:76:f1:92:e1:68:32:2e:88:09:b0:
51:be:80:4a:1b:7d:ad:19:b6:36:4b:d8:5f:2b:84:
5e:fe:13:09:b3:1d:27:1b:6f:0d:8e:7e:15:30:54:
da:25:b6:ca:8e:09:22:2e:98:ed:e7:af:44:40:96:
f6:c2:41:3a:bb:fb:4e:5c:78:d9:ba:7a:42:ff:88:
ac:4a:21:eb:e0:fc:a4:4b:f5:0b:7d:14:19:a7:b0:
8a:ee:2c:d4:3b:2b:f8:ff:a3:66:c4:0b:48:43:2d:
d6:42:ad:93:23:0f:90:1a:60:58:cb:47:03:78:76:
c6:a2:29:97:b6:e2:30:17:8a:17:29:1a:b9:34:48:
4a:bc:d3:87:46:7c:52:25:cb:ed:da:7b:a7:73:6e:
52:54:fb:73:eb:17:4e:55:03:1a:ea:16:b5:a8:f1:
6e:ba:54:d5:56:e2:51:bf:22:65:a6:27:fa:63:20:
0f:7b:26:8d:e8:02:3a:32:f5:e2:0e:04:c3:71:61:
7e:96:6e:c9:05:c8:c3:de:91:7c:56:29:a8:03:d9:
1c:4b:a6:6b:d1:b2:6c:09:74:fa:1f:cc:04:f0:53:
50:0e:1a:6b:be:ac:2f:a0:70:0b:ed:68:67:41:4e:
f3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:7F:97:95:38:FE:16:82:F2:82:ED:10:78:EB:5F:7A:3C:DA:8A
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/CU9_l5U4_haC8oLtEHjrX3o82oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.89.0/24
194.40.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:26:ca:0b:f2:5f:af:9c:27:4d:2d:55:95:f4:7c:ca:08:2e:
72:f3:dc:62:ef:0f:5e:9e:02:cb:e3:2a:15:ab:6b:54:de:35:
f3:86:4c:25:87:57:ad:56:e6:1d:63:6b:02:5c:65:02:96:36:
22:43:7b:ad:5b:67:be:da:56:5b:24:a5:cd:65:84:30:99:54:
05:a5:2d:16:4b:2c:d2:47:55:a5:08:e9:e2:a8:7a:b1:2d:99:
3e:10:3f:6f:b1:a8:10:18:57:9f:6c:91:74:99:b9:42:e1:84:
fe:f5:03:a8:a5:da:e1:f4:64:dc:c5:b5:ab:8a:1d:46:69:23:
16:3a:9c:53:82:0d:ab:f3:06:d1:a0:74:68:bf:07:1a:88:99:
53:d6:53:0f:45:52:95:e5:d4:60:8b:ad:1f:a4:57:09:d0:73:
81:8d:cd:d6:6f:e0:c7:71:f6:80:93:52:32:0e:d4:07:cf:45:
9f:2e:05:5a:56:fa:83:b6:04:22:78:c2:a0:27:55:1e:d1:e0:
e1:c6:78:f6:13:6a:3d:2d:b4:dd:5e:02:7f:ba:a2:c7:54:e3:
e0:e6:1d:b7:71:39:8d:f9:86:b3:03:9c:71:64:92:9f:f9:e3:
d2:ba:f3:73:c8:45:b1:21:64:29:7a:06:01:60:21:d5:b0:8c:
ad:15:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org