Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wDKfig3uF0SERd3mx3-2by_3dTE.roa
File: wDKfig3uF0SERd3mx3-2by_3dTE.roa (raw, json)
Hash identifier: KPy71fTMjWLjE+u3cEzczimhnISok97jRB/kUPNSXz4=
Subject key identifier: C0:32:9F:8A:0D:EE:17:44:84:45:DD:E6:C7:7F:B6:6F:2F:F7:75:31
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0A51DC94
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wDKfig3uF0SERd3mx3-2by_3dTE.roa
Signing time: Thu 31 Mar 2022 15:24:56 +0000
ROA not before: Thu 31 Mar 2022 15:24:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 92.119.12.0/22 maxlen: 24
45.87.172.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
45.87.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173137044 (0xa51dc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Mar 31 15:24:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0329f8a0dee17448445dde6c77fb66f2ff77531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:f1:73:ed:cf:d7:6a:96:04:6e:28:48:be:
05:fe:82:4d:62:f8:ff:78:b6:d4:31:40:f8:9c:e9:
6b:bb:36:b3:e7:ac:ab:de:96:d3:3b:ab:8b:59:ab:
b7:a3:f3:00:68:c5:97:c8:9d:84:62:09:44:d5:6c:
5b:31:e2:53:a4:94:73:e6:6c:bc:13:dd:ea:4c:3f:
4a:53:f9:6b:47:be:f9:9d:85:b5:7b:43:50:2d:38:
b8:67:6a:d4:34:94:fa:ac:d9:ec:05:e0:d0:7e:53:
89:4b:0d:48:a8:10:fe:63:d7:bf:b4:8d:15:a1:ba:
6d:9d:05:34:18:fc:1f:be:1f:da:0c:2c:ce:ee:fd:
e9:0a:e7:7d:3d:0b:cf:f8:ea:58:7a:d5:7d:fe:8f:
76:25:3c:cd:9d:bd:4e:94:c6:39:23:01:ea:da:e8:
73:39:6d:8d:e3:23:f2:73:98:4b:10:3d:dd:42:dd:
57:d4:7d:8e:b5:19:09:6e:6a:02:9a:68:d2:d8:48:
7f:b0:5c:b9:45:d6:35:8f:a9:5b:fc:5e:b4:3f:26:
6d:d8:f7:0e:d9:fb:d6:3e:1c:09:aa:4b:c1:7c:aa:
45:44:77:90:64:6c:c8:00:f5:5b:83:38:f6:14:09:
b9:3b:93:c5:8a:a6:42:39:68:dc:39:c3:ca:6c:ec:
71:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:9F:8A:0D:EE:17:44:84:45:DD:E6:C7:7F:B6:6F:2F:F7:75:31
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/wDKfig3uF0SERd3mx3-2by_3dTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0-45.87.174.255
92.119.12.0/22
Signature Algorithm: sha256WithRSAEncryption
69:fc:85:16:d1:4d:15:6e:0b:e6:e9:c1:68:ce:48:5a:d5:13:
3f:82:08:8a:ff:e9:3c:4f:bd:84:77:2a:eb:f1:84:fb:2d:fc:
e4:a4:21:3a:cc:2e:ba:11:ae:cd:82:c0:3c:56:c9:ac:61:ae:
e5:56:2c:57:d4:da:9a:d6:80:a3:6d:91:59:02:f2:54:38:30:
74:0c:8b:8a:c5:61:62:fc:38:8d:56:65:e6:91:9a:5d:21:af:
0b:cf:b4:a0:ee:e6:59:60:c2:75:c5:d1:9c:da:ba:e8:51:0b:
b9:dc:86:30:43:02:42:af:1e:b2:b8:3e:bb:d4:88:cf:02:f3:
a1:4e:91:d7:3f:7f:c8:f0:67:93:38:8a:5a:38:f3:cc:20:a7:
04:00:ba:8f:82:9d:64:e4:5c:8c:8a:6b:cf:42:f5:c5:a6:22:
2d:2e:c0:4b:bf:d9:8f:4a:87:f0:34:79:e7:85:cb:ab:d5:f2:
8e:1e:c3:db:5c:79:45:ef:45:7f:46:55:d6:58:ea:ee:16:cb:
98:c6:6c:94:b9:2b:0c:30:dd:a0:d1:45:2d:d8:cf:66:5e:dd:
04:6e:15:48:a4:1b:b0:43:e6:45:84:e8:d2:9a:f1:1c:0d:79:
23:13:e1:98:c3:b6:8f:d1:92:8c:2c:9d:90:7a:2a:1c:11:1e:
35:e8:02:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org