Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/9Stpa7J9ONafI6dHiArhcxtudsw.roa
File: 9Stpa7J9ONafI6dHiArhcxtudsw.roa (raw, json)
Hash identifier: T5ATT4OYnj08xo7L0tasb+LD68+CdthrGvJnbfYD3gc=
Subject key identifier: F5:2B:69:6B:B2:7D:38:D6:9F:23:A7:47:88:0A:E1:73:1B:6E:76:CC
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A59D7B2
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/9Stpa7J9ONafI6dHiArhcxtudsw.roa
Signing time: Sat 02 Apr 2022 17:33:50 +0000
ROA not before: Sat 02 Apr 2022 17:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.119.12.0/22 maxlen: 24
45.87.172.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
45.87.174.0/24 maxlen: 24
45.87.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173660082 (0xa59d7b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Apr 2 17:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f52b696bb27d38d69f23a747880ae1731b6e76cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d7:d3:c1:db:e2:12:d8:e0:90:f6:2a:53:9d:
77:ac:30:19:40:48:3d:28:0e:52:21:e8:1a:17:63:
88:47:a0:4a:8c:28:4b:8d:f4:5a:42:e2:de:de:c5:
cb:7c:26:ab:6f:36:71:ec:14:54:a0:e7:65:57:bc:
60:d7:bb:d0:7e:6f:bb:44:d3:ae:e1:4f:51:ac:77:
ca:09:9c:3f:c1:ad:26:34:e5:a5:b8:db:70:70:9e:
74:50:4d:1b:d3:25:6b:c8:79:25:b2:56:db:0a:e0:
52:40:3b:f5:20:8a:b8:bf:a8:f9:e0:e2:f0:cd:4a:
2d:0e:1e:9c:a0:cf:4c:0b:72:0f:0c:31:de:6c:46:
66:b3:fd:e6:35:ec:49:5f:2d:b7:ef:1d:b0:cd:bc:
e5:fc:29:70:4c:46:81:b6:9e:6d:49:fc:43:52:5b:
4d:64:99:75:4d:aa:67:4c:06:df:18:d0:bf:e2:dc:
7b:2f:97:a2:ff:83:80:ac:12:78:52:e2:d9:56:6d:
66:d8:1b:2e:f2:af:f9:60:30:8f:16:3a:61:43:78:
79:7b:27:b5:9a:92:81:74:10:92:01:ed:bc:36:89:
48:13:55:5e:c7:e4:e5:9a:c1:f9:f6:15:3e:ef:2c:
07:b7:d3:45:1d:6c:64:2c:97:d5:03:2f:47:86:42:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:69:6B:B2:7D:38:D6:9F:23:A7:47:88:0A:E1:73:1B:6E:76:CC
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/9Stpa7J9ONafI6dHiArhcxtudsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/22
92.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:65:f3:dc:87:81:6e:36:f2:25:a0:4b:d0:00:20:60:3f:2e:
69:bb:f1:bc:e1:dd:e5:c8:21:64:f3:94:ff:22:ca:a2:f3:2e:
cb:b0:39:ac:92:da:1c:7c:9c:da:26:0d:14:39:53:06:f0:e1:
76:fa:5e:f3:94:7f:7c:8e:58:cc:11:e4:8a:c9:7f:57:3e:1e:
fe:4b:6a:22:9a:92:31:5d:b4:df:5b:12:54:9e:46:b6:f2:36:
53:90:da:43:ae:02:ee:20:68:7f:33:7c:ae:df:3d:d8:ef:44:
19:83:4c:43:99:3a:c6:d3:a6:19:4d:ef:33:c4:be:39:db:40:
3b:c7:af:ff:e9:04:4f:36:53:90:3d:e4:85:6b:75:3d:18:ca:
5e:7e:e9:b9:97:2c:40:4e:f0:75:d8:c1:53:3c:ce:b5:30:41:
a8:b4:85:a9:90:66:29:91:31:12:f1:73:f6:77:4f:1c:0e:92:
b9:48:96:23:0c:4e:26:c5:f0:19:4a:9f:e7:12:5e:33:8d:e7:
ac:b2:4c:1d:b8:04:c3:b2:de:21:a4:f9:70:52:f4:a6:56:b1:
70:23:19:fc:57:50:41:0a:fd:7c:9e:a0:e7:dd:52:60:db:ba:
05:7c:02:1c:9c:ee:f1:20:59:04:aa:25:7f:0a:8a:2a:f4:d4:
67:ee:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org