Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/OSI20qsb7sXUNSn_6_C0rcjvLAQ.roa
File: OSI20qsb7sXUNSn_6_C0rcjvLAQ.roa (raw, json)
Hash identifier: LW4cD55tpSwcdsonrH5twqG9jNSmZVOuSKVv96q6KA8=
Subject key identifier: 39:22:36:D2:AB:1B:EE:C5:D4:35:29:FF:EB:F0:B4:AD:C8:EF:2C:04
Certificate issuer: /CN=96a4cfd3d6c5ccba86329b03f6f280137307a1a5
Certificate serial: 01E96FA9
Authority key identifier: 96:A4:CF:D3:D6:C5:CC:BA:86:32:9B:03:F6:F2:80:13:73:07:A1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqTP09bFzLqGMpsD9vKAE3MHoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/OSI20qsb7sXUNSn_6_C0rcjvLAQ.roa
Signing time: Sat 01 Jan 2022 00:58:40 +0000
ROA not before: Sat 01 Jan 2022 00:58:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43872
IP address blocks: 45.136.108.0/24 maxlen: 24
2a0d:1e80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32075689 (0x1e96fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a4cfd3d6c5ccba86329b03f6f280137307a1a5
Validity
Not Before: Jan 1 00:58:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=392236d2ab1beec5d43529ffebf0b4adc8ef2c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:30:d5:65:32:87:40:33:f3:eb:28:e4:2e:
08:d5:7b:cd:1c:99:e7:2c:10:e4:f1:41:20:d8:cf:
9d:f8:e2:74:36:a5:1a:07:1d:1b:1f:50:46:4f:46:
6f:5d:12:47:bb:2c:18:b5:ec:be:6f:6d:70:af:44:
0c:a5:4d:01:ce:4c:22:dc:fa:5e:24:ae:db:2d:8a:
25:9a:6e:4f:75:f3:f7:65:83:44:71:7d:19:c1:a1:
ee:d0:24:0d:7f:ce:52:c9:55:5a:6b:39:14:77:9a:
44:d4:78:e8:6e:86:93:db:ec:9e:16:97:ac:b4:61:
6f:93:d6:38:c6:4b:51:20:c3:84:0b:5e:14:a5:0e:
3c:df:b3:5b:c9:64:1b:34:76:f2:da:8d:19:ed:ae:
26:1d:ce:f2:ff:f6:04:23:ea:a4:cb:a0:92:c4:37:
92:06:50:e2:ab:32:18:bb:8e:cb:20:1b:70:e8:9e:
5e:ce:46:c2:77:2a:77:3a:39:c7:95:36:26:70:e0:
17:c4:c7:51:85:19:ec:46:b4:8c:5f:f7:2f:e8:68:
50:6e:ed:92:1b:87:f4:07:a1:77:71:d3:7a:2d:aa:
f3:4a:0a:2e:0c:bd:da:33:76:b9:c0:27:06:6b:0f:
8f:07:83:b3:b8:a1:57:75:64:7c:2d:8d:12:a5:e1:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:22:36:D2:AB:1B:EE:C5:D4:35:29:FF:EB:F0:B4:AD:C8:EF:2C:04
X509v3 Authority Key Identifier:
keyid:96:A4:CF:D3:D6:C5:CC:BA:86:32:9B:03:F6:F2:80:13:73:07:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqTP09bFzLqGMpsD9vKAE3MHoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/OSI20qsb7sXUNSn_6_C0rcjvLAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d3ca04-a1b6-4878-bb86-6966f1eafde5/1/lqTP09bFzLqGMpsD9vKAE3MHoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.108.0/24
IPv6:
2a0d:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
a4:91:a0:9a:c0:c9:1e:6b:b4:f5:5c:cf:fd:fd:f5:18:db:f4:
5a:15:2f:f3:8f:04:04:d7:23:66:aa:f0:8a:c6:59:1f:2d:81:
15:c8:14:86:c3:50:cd:3b:47:ff:82:d4:44:33:be:bf:cf:54:
fa:b4:c0:36:db:88:07:bd:83:34:38:1c:10:a6:10:a2:60:d7:
5a:6b:2e:6f:37:ac:2c:0b:a8:c7:ba:7b:37:cc:59:fb:1c:22:
a3:1c:11:b9:45:7f:9b:34:a4:c3:f0:85:91:0f:8d:7a:58:37:
b4:ca:56:89:db:9a:aa:a2:03:80:5f:52:9c:69:8c:92:48:06:
85:e3:5a:fc:29:bd:69:80:c6:7a:03:fe:fc:97:cf:76:9b:bb:
52:d2:d1:d5:d7:2c:df:5c:e8:dc:10:1e:94:f5:5b:7e:96:27:
67:7f:66:d8:57:51:f9:bb:34:32:67:fd:e7:aa:57:ce:69:86:
48:2b:82:c7:32:bd:4a:e9:b4:16:4c:0a:72:d7:d2:6b:2a:54:
23:56:f5:05:c7:8e:21:db:26:2a:20:a2:a2:6a:90:ab:39:f3:
a3:f0:26:a9:af:5b:a5:13:3d:ae:bf:7d:89:11:2b:1c:45:a5:
bf:fa:39:51:fc:52:07:ad:e5:88:2f:52:96:1f:0e:9c:20:d8:
9d:fa:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:51 2024 by rpki-client on console-ams.rpki-client.org