Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/pLLeJUD18GAOWpRnyc8EPM0ns9Y.roa
File: pLLeJUD18GAOWpRnyc8EPM0ns9Y.roa (raw, json)
Hash identifier: PLC/w9er7DOVQTXEoRj7CJz9RbW/+0H8ayk3dxZI1Nc=
Subject key identifier: A4:B2:DE:25:40:F5:F0:60:0E:5A:94:67:C9:CF:04:3C:CD:27:B3:D6
Certificate issuer: /CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Certificate serial: 018C336A766EDFD798F3F8AC7C050B291BBE
Authority key identifier: 02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/pLLeJUD18GAOWpRnyc8EPM0ns9Y.roa
Signing time: Mon 04 Dec 2023 06:01:04 +0000
ROA not before: Mon 04 Dec 2023 06:01:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 45.12.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:6a:76:6e:df:d7:98:f3:f8:ac:7c:05:0b:29:1b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0212a07ce793a5f0416027bf4aab8bd1ceaf0fce
Validity
Not Before: Dec 4 06:01:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4b2de2540f5f0600e5a9467c9cf043ccd27b3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:d6:d9:a3:22:ed:0e:ca:21:f2:d6:77:fb:
e9:b5:33:7a:d7:65:ba:07:07:b1:43:67:39:d4:9b:
7a:be:ff:a1:9d:8e:d0:32:25:c0:d0:82:3b:bf:4b:
1b:17:0c:c5:74:1c:25:d2:50:49:2e:16:df:c1:bf:
9a:ee:90:d1:7c:b7:d4:a3:df:96:06:6e:5d:3d:1f:
59:f5:1c:cf:df:dd:b6:ab:9f:4a:d7:2b:1d:e1:3e:
79:02:73:5c:c0:43:fe:f2:6f:af:b9:a0:39:d4:30:
a2:c3:cd:79:0f:58:88:b3:22:ce:8c:55:18:f8:1f:
56:5d:c5:ef:75:24:88:2d:1a:bf:99:bf:90:a3:8c:
c4:4a:a9:ff:48:8f:f1:21:8b:3b:dd:84:7c:bf:fa:
34:08:32:ca:3f:c0:0d:95:b0:86:53:97:93:db:d9:
f1:2f:be:4f:02:57:f9:00:8d:96:28:87:22:37:90:
4f:07:b2:b0:89:dc:d8:0c:7c:1c:cb:fd:45:f3:1c:
47:8c:8e:ec:c2:83:e2:d9:ee:47:6d:84:6c:0f:b5:
a3:b6:83:13:5b:2e:69:b7:af:fb:f3:d5:4a:6b:5f:
0d:2c:dc:0e:86:f0:ad:e7:04:93:a7:9d:c8:be:d2:
b6:a2:8d:01:5f:dc:13:e8:bb:3a:63:47:47:c1:27:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:DE:25:40:F5:F0:60:0E:5A:94:67:C9:CF:04:3C:CD:27:B3:D6
X509v3 Authority Key Identifier:
keyid:02:12:A0:7C:E7:93:A5:F0:41:60:27:BF:4A:AB:8B:D1:CE:AF:0F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhKgfOeTpfBBYCe_SquL0c6vD84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/pLLeJUD18GAOWpRnyc8EPM0ns9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e775eb-7d8a-4835-9456-bd7bf949d9c2/1/AhKgfOeTpfBBYCe_SquL0c6vD84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:53:68:21:00:56:c9:31:c1:ac:56:25:48:38:ec:a8:3a:2f:
d0:bd:8e:50:95:9a:64:6f:f1:8c:2f:55:23:fd:7c:f4:3f:36:
bc:1e:b5:77:0a:4a:07:d4:a7:5b:a4:30:c4:0c:ab:79:a2:ce:
86:89:1a:d0:8f:b9:ec:6d:40:81:b7:e1:75:a0:57:d8:0b:af:
4e:1a:cc:9a:f2:df:5d:c0:f5:d9:58:ef:20:a6:6f:0e:6f:01:
04:9a:06:c8:29:50:bc:1c:54:ff:a8:90:10:42:58:cd:4e:a5:
03:b3:13:df:92:f5:eb:41:41:8a:35:b9:bc:11:79:fb:51:00:
91:d9:9e:1c:fa:a8:5c:a4:df:72:77:67:45:55:6e:ea:c7:75:
c5:e9:aa:8c:01:64:b3:f4:be:f3:02:f5:6f:fd:ce:88:04:a6:
e0:c1:c6:92:43:54:0a:44:5e:64:c2:54:03:fe:a5:a3:cf:29:
a0:38:6c:d1:89:d2:80:31:e5:b8:bc:4b:c6:2e:5a:32:c4:89:
bb:4d:33:11:eb:44:64:44:c3:65:a6:f4:16:82:59:e5:19:d9:
6c:6b:7b:54:ca:99:24:48:1b:a2:75:8b:d2:2a:f0:d0:36:44:
85:30:1b:bd:63:07:51:6a:ca:0b:f4:80:05:ca:b8:85:9e:ea:
5d:08:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:16 2024 by rpki-client on console-ams.rpki-client.org