Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/fqC-WS7F03GpxbcJ9al39740e3A.roa
File: fqC-WS7F03GpxbcJ9al39740e3A.roa (raw, json)
Hash identifier: DLnNq383PKiJ7WlDtNr4N1vMl2bb7GLADc3VDm8GDtI=
Subject key identifier: 7E:A0:BE:59:2E:C5:D3:71:A9:C5:B7:09:F5:A9:77:F7:BE:34:7B:70
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01831EEC43BC11B13F5D260D6AFFF6EA9DF0
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/fqC-WS7F03GpxbcJ9al39740e3A.roa
Signing time: Thu 08 Sep 2022 21:05:43 +0000
ROA not before: Thu 08 Sep 2022 21:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1e:ec:43:bc:11:b1:3f:5d:26:0d:6a:ff:f6:ea:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Sep 8 21:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ea0be592ec5d371a9c5b709f5a977f7be347b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c0:1a:41:d2:b0:1d:4d:f7:d1:7c:95:15:6e:
a6:fa:96:65:9f:be:8f:fd:48:ed:1f:46:cf:50:4a:
39:b5:6a:2c:71:45:5a:fd:d5:21:8d:bd:ea:9a:8f:
d6:37:76:88:04:21:da:c2:09:95:0a:d7:87:fd:15:
51:de:b7:e0:1b:04:a9:6b:7f:1a:24:b9:52:4c:e0:
eb:f3:28:73:b0:66:32:ba:79:db:be:7b:6b:dd:a0:
dc:ec:77:fe:20:46:e4:c9:f7:d6:07:39:c2:d7:bf:
81:cf:f8:51:4f:eb:2c:38:ec:45:46:f7:b1:39:d3:
79:86:cb:94:4f:9a:63:c7:d2:b7:7b:2e:73:d2:c0:
94:cd:07:26:2c:9f:84:cf:62:77:c0:82:26:b7:ec:
07:0e:55:1e:db:69:39:ce:37:a9:c5:be:aa:20:f6:
c9:5e:95:1a:7d:e6:54:f2:9a:77:06:8a:a0:3f:6a:
33:76:2a:1a:f4:ca:e7:6e:7d:40:1c:0c:af:c6:92:
ab:40:2b:4f:44:ae:7b:d8:e1:e2:9b:b4:88:a3:8e:
a1:01:c2:51:88:76:a7:82:c5:a2:17:1b:34:01:ae:
36:f5:6d:98:94:b6:30:8a:f7:bb:7c:79:14:ac:46:
34:3e:0a:e9:2a:da:f2:a5:68:12:08:f3:34:6d:8e:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A0:BE:59:2E:C5:D3:71:A9:C5:B7:09:F5:A9:77:F7:BE:34:7B:70
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/fqC-WS7F03GpxbcJ9al39740e3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
45.87.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:d6:55:27:f1:a4:f5:77:0b:14:b0:a5:17:a3:70:4f:58:43:
aa:af:e7:fd:ab:c1:26:0f:d2:4c:2f:d8:e3:23:86:5b:77:93:
9d:8e:12:80:2c:c0:e2:97:e5:86:84:4b:65:b0:a6:48:88:a9:
1d:e3:3f:54:46:87:44:9f:f0:7f:00:82:0b:09:dc:26:91:53:
5f:cf:25:42:a7:9d:1b:ca:22:e4:0f:3d:43:22:79:91:ac:61:
fc:3e:4d:60:a4:36:a4:1d:67:6e:fc:ec:6e:72:b8:d8:4e:55:
05:2e:56:e5:03:5e:2b:c1:40:14:ff:e8:67:87:33:3a:e0:c4:
58:55:3a:35:d9:ce:12:49:e9:6d:a2:cb:7c:6e:c1:e0:89:21:
8d:63:4c:2f:98:cc:14:bc:69:c6:4f:42:77:bc:b1:5c:fc:a7:
1a:e5:fc:32:18:27:03:54:e9:d8:d9:c7:0a:24:54:76:0f:7d:
a6:0e:4b:66:36:29:8c:52:18:b3:20:5b:40:8b:cd:35:50:fc:
a5:30:66:35:40:6a:4e:c4:80:18:69:a3:47:cc:eb:18:17:b4:
db:6c:0e:e8:f8:da:6e:bb:b5:32:33:e2:ae:a5:7b:08:e8:c7:
21:7b:78:d4:49:7b:c3:e8:58:fb:97:16:75:38:89:46:94:47:
a8:bb:58:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org