Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/DfBlyOepZ818lOnz6C4LHwHH9Ew.roa
File: DfBlyOepZ818lOnz6C4LHwHH9Ew.roa (raw, json)
Hash identifier: S+6zHE97GdST+WWkJqVx3iNUf6DDl2YxVzoNmdIo2Sk=
Subject key identifier: 0D:F0:65:C8:E7:A9:67:CD:7C:94:E9:F3:E8:2E:0B:1F:01:C7:F4:4C
Certificate issuer: /CN=96a4cfd3d6c5ccba86329b03f6f280137307a1a5
Certificate serial: 018570CC074CEA1A0CDC59841900F33C1F20
Authority key identifier: 96:A4:CF:D3:D6:C5:CC:BA:86:32:9B:03:F6:F2:80:13:73:07:A1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqTP09bFzLqGMpsD9vKAE3MHoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/DfBlyOepZ818lOnz6C4LHwHH9Ew.roa
Signing time: Mon 02 Jan 2023 04:44:57 +0000
ROA not before: Mon 02 Jan 2023 04:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43872
IP address blocks: 45.136.108.0/24 maxlen: 24
2a0d:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:07:4c:ea:1a:0c:dc:59:84:19:00:f3:3c:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a4cfd3d6c5ccba86329b03f6f280137307a1a5
Validity
Not Before: Jan 2 04:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0df065c8e7a967cd7c94e9f3e82e0b1f01c7f44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:87:bf:5c:ac:bc:45:57:e3:1b:3b:f2:5a:a1:
d3:ab:87:39:3a:bd:e4:78:e5:39:75:79:a9:f8:44:
4a:30:e9:2b:30:fd:ab:3a:9b:ed:ab:cf:09:de:6c:
8e:6b:52:eb:19:b4:e3:93:98:d6:2d:28:4a:a9:6e:
a6:74:11:8d:5b:cd:67:4c:3b:55:6c:d8:99:c2:c6:
1d:31:8f:df:d3:45:78:93:00:cc:73:fd:1d:51:fb:
aa:4c:1d:15:3b:54:3b:d4:16:aa:b1:98:99:d1:f2:
8f:36:2f:cd:2a:c7:a9:d1:b2:f3:43:6e:6a:16:0f:
52:fc:2a:f9:64:43:2c:a5:e6:a5:64:f9:94:93:90:
89:2e:d7:4b:66:9c:1f:66:b2:76:00:99:8c:10:5c:
05:38:4d:49:6e:68:04:e8:c9:57:e6:bc:90:02:c2:
5c:26:6d:2b:43:69:a7:c5:b6:9b:14:c1:88:ad:85:
17:c2:67:24:3f:0d:41:bf:61:c4:be:72:a0:84:fa:
1c:08:3d:17:73:ab:52:6f:d6:97:67:65:26:7e:0f:
1a:64:2b:30:f8:c4:22:48:14:f2:84:9c:8e:64:71:
d1:57:dc:2f:92:54:8d:a8:51:5c:11:40:f4:25:db:
58:29:10:84:b4:93:07:7d:e3:fc:9f:1d:54:fb:fd:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F0:65:C8:E7:A9:67:CD:7C:94:E9:F3:E8:2E:0B:1F:01:C7:F4:4C
X509v3 Authority Key Identifier:
keyid:96:A4:CF:D3:D6:C5:CC:BA:86:32:9B:03:F6:F2:80:13:73:07:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqTP09bFzLqGMpsD9vKAE3MHoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/DfBlyOepZ818lOnz6C4LHwHH9Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/lqTP09bFzLqGMpsD9vKAE3MHoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.108.0/24
IPv6:
2a0d:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
1c:35:83:4e:94:52:d3:1e:c0:53:92:5a:b1:e7:4e:e0:a6:8f:
4f:c8:c8:0a:9e:35:a1:84:19:e7:8d:70:b1:fd:dc:b0:4d:8c:
d0:65:ee:e5:6c:36:f4:4e:1b:4c:d0:5a:cb:11:85:f7:a4:d1:
90:92:45:17:d6:5f:d9:d7:31:c6:da:26:15:a7:5c:af:82:44:
b1:fa:0c:79:94:6b:30:bf:1d:a3:68:b0:6d:f0:1e:19:b3:63:
01:f8:02:12:77:38:fe:36:71:1a:f2:a8:bf:dd:ec:cb:14:85:
d5:f2:de:0f:34:42:35:fa:44:37:eb:c4:29:b5:8e:9f:bc:1a:
f3:1c:4c:59:34:b7:27:ed:e2:01:f6:ef:0b:1e:b2:5a:97:96:
70:78:62:f7:00:2f:6e:c6:cb:fa:f2:1f:72:5c:85:08:22:24:
95:8f:99:ac:8f:ee:b4:42:3a:15:4f:08:e0:b4:71:f8:68:ce:
5a:c1:52:da:bd:49:6d:c5:63:c8:7c:13:5c:6d:d5:c5:bd:36:
f9:8f:f5:68:cf:a8:97:2f:e9:59:fa:76:23:37:64:47:fe:7b:
70:de:0b:d0:f3:66:e9:55:95:86:0d:62:72:a2:53:cc:00:d4:
4e:ec:2c:ab:5a:eb:7a:fc:59:58:c2:47:61:4e:03:4e:d4:99:
52:e5:83:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:51 2024 by rpki-client on console-fra.rpki-client.org