Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_Z6gOEaP0ltMXX7Kq2mJWXQNJRs.roa
File: _Z6gOEaP0ltMXX7Kq2mJWXQNJRs.roa (raw, json)
Hash identifier: 88Ic3NnZnDM/IkbOwxBPua7YK63oWWMt05HoJzvffGc=
Subject key identifier: FD:9E:A0:38:46:8F:D2:5B:4C:5D:7E:CA:AB:69:89:59:74:0D:25:1B
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018365E067D7FF7EF4C1E9E8187E44FDC831
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_Z6gOEaP0ltMXX7Kq2mJWXQNJRs.roa
Signing time: Thu 22 Sep 2022 15:45:48 +0000
ROA not before: Thu 22 Sep 2022 15:45:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.12.80.0/22 maxlen: 24
45.137.97.0/24 maxlen: 24
45.137.96.0/24 maxlen: 24
85.209.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:e0:67:d7:ff:7e:f4:c1:e9:e8:18:7e:44:fd:c8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 22 15:45:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd9ea038468fd25b4c5d7ecaab698959740d251b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:e5:41:c7:67:26:52:bc:0f:0d:06:09:d9:
aa:de:bb:ef:3e:c2:30:dc:b3:dd:1d:71:04:93:8f:
a7:d7:35:9a:0a:0f:e0:c1:ea:63:1c:b3:7c:58:61:
e3:53:e0:40:8c:1c:a5:ca:69:14:a4:85:91:16:63:
04:60:fb:df:94:e4:ab:c2:ba:0d:1b:23:78:42:a3:
55:f9:17:57:71:80:fe:26:43:d0:39:95:82:45:83:
ba:40:f4:e0:46:08:ec:b4:df:93:3a:80:8a:e8:ac:
8d:49:ff:7c:6d:8e:0e:a1:ee:a3:bc:26:5b:93:2f:
60:6f:9b:79:9c:50:dd:14:00:40:64:2c:88:6b:3d:
56:4e:c5:65:90:71:06:52:cf:ad:4e:2a:d5:b9:80:
a0:94:ec:54:38:dd:eb:de:e0:82:58:a2:ef:33:53:
7a:5f:36:f8:a4:a0:f2:f1:b5:05:6e:7a:45:84:5c:
72:2e:8e:0b:63:b7:c3:c4:9e:ad:ff:45:e0:2b:e8:
7b:05:44:a3:be:22:55:66:ff:78:d1:cf:18:e2:a5:
25:a4:63:96:2d:fe:fd:b7:70:55:71:37:29:df:df:
1e:b6:52:a7:8d:44:e9:06:e6:e7:5f:2d:c8:e6:4f:
71:c4:ec:b1:4e:63:2b:a0:35:cf:3d:0c:5e:6a:2d:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:A0:38:46:8F:D2:5B:4C:5D:7E:CA:AB:69:89:59:74:0D:25:1B
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/_Z6gOEaP0ltMXX7Kq2mJWXQNJRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.80.0/22
45.137.96.0/23
85.209.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3e:ba:b7:55:6a:b7:68:22:db:64:0b:5a:ba:ac:6f:26:50:
ab:5c:cf:bb:93:48:e9:1a:65:65:0d:f7:12:04:8d:95:72:fc:
03:d0:f9:5d:42:6c:a7:89:0b:3e:c2:99:54:84:c0:ef:df:e9:
07:55:52:36:bc:f1:28:4c:35:24:00:51:dd:3f:34:07:43:f9:
a3:ff:69:38:4b:82:09:bc:84:24:b9:a8:c3:4c:bc:60:c6:cf:
99:20:6f:27:bc:eb:36:a7:46:45:77:31:e6:24:e4:58:71:f9:
c7:b2:4a:1f:cf:bc:4b:53:ea:e2:c2:21:40:c3:b3:25:1f:38:
0e:e4:97:bf:8f:73:fa:81:24:7e:01:b3:70:23:92:35:da:34:
54:dc:9d:a1:78:6a:57:1c:6a:b7:08:6d:e0:9a:cf:82:bf:b9:
dc:71:db:d5:88:b0:a3:0f:57:72:cf:52:ae:64:32:08:11:a9:
22:20:75:47:21:c2:b7:27:a6:b5:fa:67:33:5c:00:d7:37:3a:
c0:ca:db:b4:91:18:55:98:42:37:bd:18:04:4c:50:a9:56:7e:
a1:78:81:ae:96:8f:20:c2:1a:9d:1a:c5:50:81:b8:cb:7d:57:
1a:a6:28:df:d3:fc:83:8d:f7:4a:ef:97:28:a4:04:c9:d1:e1:
f5:e1:56:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org