Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/8hsDUHz4aGxtdpscGxCzgmkkqlk.roa
File: 8hsDUHz4aGxtdpscGxCzgmkkqlk.roa (raw, json)
Hash identifier: Xr94S9hm4C1ekwBLaLBq6BtXj5I5XJedKz7+xxEhoxk=
Subject key identifier: F2:1B:03:50:7C:F8:68:6C:6D:76:9B:1C:1B:10:B3:82:69:24:AA:59
Certificate issuer: /CN=b9979c26f2ca6f0f4e6e74a1c50b1e7d1d209111
Certificate serial: 0181F209B2584C160406418EC3992DF7D5DA
Authority key identifier: B9:97:9C:26:F2:CA:6F:0F:4E:6E:74:A1:C5:0B:1E:7D:1D:20:91:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZecJvLKbw9ObnShxQsefR0gkRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/8hsDUHz4aGxtdpscGxCzgmkkqlk.roa
Signing time: Tue 12 Jul 2022 10:52:10 +0000
ROA not before: Tue 12 Jul 2022 10:52:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 45.82.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f2:09:b2:58:4c:16:04:06:41:8e:c3:99:2d:f7:d5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9979c26f2ca6f0f4e6e74a1c50b1e7d1d209111
Validity
Not Before: Jul 12 10:52:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f21b03507cf8686c6d769b1c1b10b3826924aa59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:78:24:5c:a2:67:ee:94:0a:f5:ed:48:68:f5:
94:4e:72:56:1f:90:2c:24:48:ad:51:48:05:7a:fa:
a9:66:67:85:98:57:2b:db:fe:c9:1e:10:dc:12:71:
c3:fc:f5:18:96:5f:40:bd:03:94:78:16:fd:66:0e:
33:98:1a:a1:3c:9c:81:b0:9b:ab:e1:ca:92:e0:b4:
34:8a:fe:4a:97:e6:e3:fd:4a:e5:fe:a7:95:e3:e5:
1f:63:3c:e6:31:9a:7d:a9:ef:4b:93:e8:46:63:fc:
0e:01:1b:0d:73:54:cc:ab:2b:4f:d3:5f:46:6d:57:
04:c1:89:fb:c9:c9:f7:cc:97:8b:cb:72:c1:d7:f6:
54:b9:e0:e2:76:92:bd:0d:a1:bb:e7:41:bd:6a:42:
19:2c:19:30:cc:56:0c:36:c5:9a:c4:ca:45:4a:48:
88:0a:ad:81:a0:f5:bf:88:09:8f:f8:79:47:c4:a0:
43:a2:ff:c0:b0:6f:65:38:31:20:15:cc:27:d4:5e:
8c:93:de:ab:b6:a0:25:4b:f6:bd:16:ee:85:82:9d:
c6:da:51:9e:93:d2:13:c5:71:28:27:c7:ff:1b:c8:
12:fa:76:39:4a:52:a6:2e:2f:59:14:2c:c3:bb:22:
2f:61:90:b2:c1:bb:5e:4a:fb:38:39:54:6e:06:e4:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1B:03:50:7C:F8:68:6C:6D:76:9B:1C:1B:10:B3:82:69:24:AA:59
X509v3 Authority Key Identifier:
keyid:B9:97:9C:26:F2:CA:6F:0F:4E:6E:74:A1:C5:0B:1E:7D:1D:20:91:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZecJvLKbw9ObnShxQsefR0gkRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/8hsDUHz4aGxtdpscGxCzgmkkqlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d8c611-f6f8-4418-adfd-6edee0b1410c/1/uZecJvLKbw9ObnShxQsefR0gkRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.201.0/24
Signature Algorithm: sha256WithRSAEncryption
65:04:73:ee:cc:35:dd:63:09:e4:ef:36:06:45:02:0b:4d:b0:
05:4a:d8:3a:93:59:c0:66:52:96:31:dd:64:84:92:07:aa:69:
1b:f4:0b:64:60:15:d2:9d:99:de:0b:e6:b2:e6:e5:b7:4e:27:
37:1e:35:99:65:3e:36:44:f2:05:50:2b:3a:0d:ac:53:db:89:
3d:f1:76:82:47:18:ba:e1:55:ee:3a:98:88:5f:39:3f:62:0a:
92:2e:9c:07:79:68:51:28:81:7b:f3:2f:c1:eb:d0:ef:e0:d1:
05:06:3f:cb:d9:f3:e3:6d:0b:20:58:82:af:3c:2f:9f:21:74:
7f:96:2e:4a:1d:fe:9c:22:8a:be:3b:e0:48:a2:53:b1:00:c1:
95:f4:d8:da:3e:ed:80:37:ab:a0:08:a8:91:ce:ad:06:48:80:
96:83:73:95:3b:c4:fc:b2:86:f1:85:ae:2a:fe:9c:f4:5b:7f:
8d:f5:81:f5:67:ea:f9:f8:bb:f1:96:83:11:8f:52:68:35:83:
8a:2d:d9:68:00:43:f7:52:7b:bf:e5:c0:4b:53:c6:68:a0:1e:
23:6b:0d:5d:73:f5:f8:00:5b:83:23:3d:b0:76:d2:c4:d3:50:
05:4c:67:87:36:ab:a9:d5:e3:35:b8:4f:9f:a7:39:f0:f7:26:
a0:65:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:55 2024 by rpki-client on console-ams.rpki-client.org