Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/CCRAd614OzhnWrnie5mWXg6epwY.roa
File: CCRAd614OzhnWrnie5mWXg6epwY.roa (raw, json)
Hash identifier: z4ZM+OE4+UCn4yNg5OE+VtrsOceTDsLbi7EK9XxdwsQ=
Subject key identifier: 08:24:40:77:AD:78:3B:38:67:5A:B9:E2:7B:99:96:5E:0E:9E:A7:06
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C51DD32696D958307F5A62ABE47CB
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/CCRAd614OzhnWrnie5mWXg6epwY.roa
Signing time: Sun 01 Jan 2023 22:55:44 +0000
ROA not before: Sun 01 Jan 2023 22:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:51:dd:32:69:6d:95:83:07:f5:a6:2a:be:47:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08244077ad783b38675ab9e27b99965e0e9ea706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:85:f8:93:78:cf:29:da:d1:42:f0:64:43:22:
e1:44:11:41:be:c4:29:0a:90:52:e2:02:9c:bb:b4:
4b:73:bf:00:4f:8b:48:cc:6a:eb:3a:b1:66:ee:11:
ee:60:a2:0d:1d:77:b3:45:76:59:2a:b8:eb:3d:c4:
5b:58:16:62:9e:dc:b2:3e:51:a8:ab:9c:64:a3:02:
f3:70:4e:a5:46:b0:b0:1b:b6:20:08:38:da:d2:6c:
b1:dd:3b:1f:e0:67:67:99:8c:77:15:57:c7:62:c4:
3d:b5:d3:aa:8b:c6:a3:69:1f:1f:dd:7d:76:c4:a9:
96:f6:9c:4c:b0:c0:9f:8e:50:5d:dd:c7:9e:c4:6f:
c8:82:ec:e3:e1:08:a8:3b:bb:dc:e3:4b:6a:d6:0f:
9d:7f:7f:d1:5f:7b:25:0d:7a:62:0a:48:2b:c6:29:
ce:60:69:e2:cc:c6:bf:00:c3:b5:8a:95:bb:cb:06:
e0:57:e7:05:a9:d8:55:a9:06:d7:58:88:f2:d7:55:
6e:ee:77:02:cc:2b:7a:e3:cb:80:9b:65:ef:bc:ed:
ee:04:e7:88:83:8a:a4:a1:37:55:60:74:86:8a:02:
ef:64:d4:f0:e6:54:63:bd:81:4e:2a:82:f3:7a:3c:
1f:31:33:34:8c:b9:fb:d0:7f:6e:6b:52:98:1f:a6:
8e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:40:77:AD:78:3B:38:67:5A:B9:E2:7B:99:96:5E:0E:9E:A7:06
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/CCRAd614OzhnWrnie5mWXg6epwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
45.87.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:30:8d:23:98:d9:55:dc:71:72:33:3b:dc:1f:b1:c6:ba:5d:
14:bd:3f:79:63:0e:d8:af:9e:b0:57:ac:c4:c5:82:a5:7e:08:
77:82:f8:3f:91:32:85:c9:ec:6b:6c:3b:f8:43:07:e7:3a:68:
78:39:46:33:92:a0:e0:e8:a0:c3:a9:c9:b6:3e:ec:bd:9d:4b:
1d:d0:4b:f5:0e:ad:ab:83:88:ee:de:91:8b:f4:99:39:b5:bd:
f5:04:77:08:1e:45:30:d8:45:b9:cd:33:8c:a2:5c:c5:7b:a6:
e6:e5:c1:84:0f:21:c7:fc:65:27:46:50:52:f1:c4:9e:fc:34:
bc:da:74:be:a5:3b:fa:be:17:d0:dd:a5:cb:5c:9f:8c:6d:89:
d2:18:6c:99:b6:60:1f:9f:69:4e:a7:34:a9:52:9f:07:b9:69:
ac:79:01:e3:1c:ff:2e:97:1b:ce:c4:74:df:60:86:b3:3e:29:
fc:af:d5:0e:90:22:24:0a:2e:27:59:6f:38:a3:f3:f7:0b:ea:
a1:d6:d8:32:70:bf:af:4a:f1:19:22:90:36:c0:55:80:a6:fd:
c8:66:a4:44:0c:53:07:80:f3:55:97:97:c8:96:85:56:65:44:
60:47:c5:04:f0:fe:7d:4d:bd:54:21:03:af:63:f3:b7:93:f2:
e4:28:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org