Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Fyx4QwMwWXibNtbAQAXwIj22as0.roa
File: Fyx4QwMwWXibNtbAQAXwIj22as0.roa (raw, json)
Hash identifier: uYyMcrcrgmZ6xeBqLTobmiBrU77ts80b68uuYCnme/c=
Subject key identifier: 17:2C:78:43:03:30:59:78:9B:36:D6:C0:40:05:F0:22:3D:B6:6A:CD
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 03DC6BC2
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Fyx4QwMwWXibNtbAQAXwIj22as0.roa
Signing time: Sat 01 Jan 2022 05:55:56 +0000
ROA not before: Sat 01 Jan 2022 05:55:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206238
IP address blocks: 45.148.140.0/23 maxlen: 23
45.88.11.0/24 maxlen: 24
45.88.10.0/24 maxlen: 24
45.88.8.0/23 maxlen: 23
45.95.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64777154 (0x3dc6bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 1 05:55:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=172c7843033059789b36d6c04005f0223db66acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:a7:04:dc:c3:c0:a3:65:36:39:2c:34:fd:
ed:a6:10:46:19:51:48:b9:29:d0:ce:ff:dd:ba:e4:
4e:24:ba:2b:c5:2d:46:fc:a3:a6:d5:05:f2:70:f0:
7c:0d:71:31:11:bf:c3:69:3f:8d:58:c5:46:c1:93:
48:d8:3a:1a:95:5f:48:80:e7:7e:ee:4e:2e:b8:26:
41:f9:76:7e:8a:37:42:d5:cd:c5:20:a1:9c:ad:0e:
c9:ab:01:6e:68:00:4c:91:04:a9:bc:8a:05:3d:96:
02:14:d6:05:b9:3b:28:06:96:f0:f6:ee:8a:09:76:
f6:9f:16:e3:3e:f2:dd:ac:da:db:ec:37:08:ed:69:
68:8a:b3:95:69:2d:80:ea:b3:ba:8d:a1:3f:93:01:
77:09:85:eb:f6:21:ab:f3:2e:45:b0:51:c3:0b:6f:
eb:ac:e3:98:61:d7:3a:04:d4:86:65:46:ae:0f:92:
e6:30:78:5d:8b:13:65:31:e1:3c:cd:2b:14:19:d4:
55:2d:45:5e:45:c5:bc:c4:16:3e:ad:67:4e:5a:9c:
81:a4:01:e0:31:5f:7d:6c:73:cb:be:2a:18:ee:ed:
87:3d:8f:b2:ff:eb:e9:78:37:32:e8:8e:12:e2:dd:
9e:0f:d2:73:ca:94:f2:67:53:95:12:9f:2a:5d:16:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:78:43:03:30:59:78:9B:36:D6:C0:40:05:F0:22:3D:B6:6A:CD
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Fyx4QwMwWXibNtbAQAXwIj22as0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.8.0/22
45.95.64.0/23
45.148.140.0/23
Signature Algorithm: sha256WithRSAEncryption
67:fe:d4:18:b9:5b:df:f9:23:45:c2:66:90:1c:a4:3e:41:9b:
da:5e:e1:2b:a5:f0:78:19:f2:35:9f:c1:9f:5a:cb:74:04:6a:
ab:06:f4:cd:83:c1:7e:0f:82:a7:32:d6:88:bd:2b:70:97:e4:
7a:79:1e:fb:5a:b0:17:27:66:18:c6:89:69:52:bf:ad:45:21:
04:d2:87:8f:59:ce:8b:dd:af:1e:db:62:d0:ba:5e:fe:a5:94:
7c:c8:65:8a:66:7e:bd:44:89:db:e9:31:7e:94:2b:14:46:a4:
18:8b:fb:7b:32:cd:6a:d0:3b:96:14:2b:4e:26:3f:bc:5a:2e:
93:c8:81:08:5b:a1:1f:80:99:9c:ad:15:30:30:e4:c0:cd:a6:
fe:a0:88:45:6f:0e:b5:0a:8e:1d:ff:b8:61:cf:65:05:a9:90:
e6:4a:85:42:9c:5a:59:74:51:75:30:b5:94:e5:fe:be:b6:33:
01:d0:ba:87:11:87:9c:ac:0e:ed:21:5f:27:dd:ea:fc:1c:be:
13:9d:92:c7:fb:a4:61:1d:2f:eb:ee:e0:af:e4:f0:5f:9a:e8:
bb:2d:a5:3c:7f:c8:a5:74:29:6d:6c:5a:15:53:2e:c2:14:f2:
63:31:d6:08:ad:df:7f:98:ce:21:e2:76:7e:9d:8c:1b:77:fc:
50:f1:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org