Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Ytw1JjaBU0V_kfh3M2Bl9LzWcfM.roa
File: Ytw1JjaBU0V_kfh3M2Bl9LzWcfM.roa (raw, json)
Hash identifier: yGtO/ZDZ2OjtjT2tGjn52D0HYnNdaisuRbFItMXSzco=
Subject key identifier: 62:DC:35:26:36:81:53:45:7F:91:F8:77:33:60:65:F4:BC:D6:71:F3
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0184EC531BFC2F795DB1FB7A2248535C8C9A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Ytw1JjaBU0V_kfh3M2Bl9LzWcfM.roa
Signing time: Wed 07 Dec 2022 11:23:00 +0000
ROA not before: Wed 07 Dec 2022 11:23:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24875
IP address blocks: 45.148.140.0/24 maxlen: 24
45.88.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:53:1b:fc:2f:79:5d:b1:fb:7a:22:48:53:5c:8c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Dec 7 11:23:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62dc3526368153457f91f877336065f4bcd671f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:73:07:f4:00:7c:40:90:50:9d:b1:2a:b4:5e:
ea:32:d4:80:8a:dc:43:23:6f:7a:1f:27:cc:a3:b0:
50:0f:22:6a:21:1f:1c:dd:41:99:56:db:90:f6:78:
a5:40:f1:83:af:d1:5f:e6:6d:78:d9:ef:f2:eb:b5:
1f:3b:35:0e:25:cc:95:6d:fa:7d:11:78:3e:c7:8e:
da:fe:be:47:9b:e6:83:22:7d:8e:40:ad:50:fd:89:
bf:10:92:52:76:5a:b4:3d:49:28:b6:b7:d5:dd:d4:
5a:23:c9:53:fc:06:ae:1e:e2:83:6e:da:4a:77:24:
70:1e:e7:e7:13:e3:00:03:c2:fa:58:0f:f3:d4:c7:
fd:1d:81:0d:e1:f0:90:be:14:6b:dc:aa:68:c2:3b:
14:3c:cf:8b:56:c9:d5:9b:53:52:b9:ee:7e:00:1e:
a9:32:e9:8e:ff:9f:5c:05:d1:79:c2:84:4d:89:b6:
15:4b:29:af:df:5b:e4:83:67:29:f3:86:21:fc:b8:
28:51:fb:69:8f:42:b7:c5:e2:48:98:3c:5a:b1:bc:
d2:54:d6:45:64:74:dd:49:2c:b1:44:a6:0a:5a:4c:
22:c8:d9:52:06:fa:43:fc:35:3b:a6:57:be:3e:52:
1d:fe:05:68:1c:d5:04:69:6d:7b:14:23:c2:75:1c:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:35:26:36:81:53:45:7F:91:F8:77:33:60:65:F4:BC:D6:71:F3
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Ytw1JjaBU0V_kfh3M2Bl9LzWcfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.8.0/24
45.148.140.0/24
Signature Algorithm: sha256WithRSAEncryption
79:98:0a:2b:50:e3:2d:f1:d4:1d:2f:3f:a9:f2:e5:a4:a7:06:
a7:a5:64:de:87:d7:aa:01:ae:a1:9e:42:f5:2d:24:8f:af:25:
d8:1a:f8:b1:b9:58:23:60:d0:ef:4f:37:f5:2f:01:1d:d9:f9:
2e:f7:7d:70:14:51:af:52:18:59:b9:13:40:5d:e1:19:84:22:
99:3f:19:e1:0d:e8:bf:a0:39:57:27:f8:b8:ad:6f:33:4d:4c:
47:7d:99:88:d0:ae:18:7f:c4:a9:5b:74:81:5d:3d:07:02:43:
1f:ca:1d:60:20:cc:1d:22:a4:d8:b6:a0:07:dc:32:bf:77:e0:
85:f2:b5:a6:d6:74:7a:30:f9:eb:8a:22:0e:e4:07:b8:3b:14:
0b:d8:cb:1a:ae:4d:32:a0:55:57:6e:4f:6d:e0:38:f9:7b:96:
a2:f8:2d:02:8f:03:99:e4:7f:69:44:1c:11:ef:1f:67:3f:c0:
e8:11:25:1e:f1:7d:91:8b:85:ed:b4:78:ce:3b:88:6b:b1:19:
98:c3:a9:03:6a:7b:99:7e:2d:f6:04:e5:48:c0:0e:1f:b9:73:
e0:a7:93:81:f5:c4:c6:94:8f:d5:40:64:29:2f:0c:e4:1f:bc:
16:68:10:33:d8:cf:0f:46:4e:4d:aa:2e:b9:45:13:6e:f5:47:
b5:e9:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org