Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/Z7x8o3cQclmkqgvxMYWPW0MG9Xc.roa
File: Z7x8o3cQclmkqgvxMYWPW0MG9Xc.roa (raw, json)
Hash identifier: 0athSYNKszj5TMtbcameTZMX47smbBvVHxy7qg7hr/c=
Subject key identifier: 67:BC:7C:A3:77:10:72:59:A4:AA:0B:F1:31:85:8F:5B:43:06:F5:77
Certificate issuer: /CN=257039ae9a49ed74c776a935ce91809afb5f6a63
Certificate serial: 08911F38
Authority key identifier: 25:70:39:AE:9A:49:ED:74:C7:76:A9:35:CE:91:80:9A:FB:5F:6A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXA5rppJ7XTHdqk1zpGAmvtfamM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/Z7x8o3cQclmkqgvxMYWPW0MG9Xc.roa
Signing time: Sat 01 Jan 2022 09:02:17 +0000
ROA not before: Sat 01 Jan 2022 09:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208928
IP address blocks: 45.15.1.0/24 maxlen: 24
45.15.0.0/22 maxlen: 22
45.15.0.0/24 maxlen: 24
45.15.0.0/23 maxlen: 23
45.15.3.0/24 maxlen: 24
45.15.2.0/23 maxlen: 23
45.15.2.0/24 maxlen: 24
45.147.128.0/23 maxlen: 23
45.147.128.0/24 maxlen: 24
45.147.130.0/24 maxlen: 24
45.147.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143728440 (0x8911f38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257039ae9a49ed74c776a935ce91809afb5f6a63
Validity
Not Before: Jan 1 09:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67bc7ca377107259a4aa0bf131858f5b4306f577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:e2:d1:7a:47:44:e7:e2:fb:66:42:dc:f4:
0c:ee:01:02:84:6f:60:43:f0:54:31:f6:97:2a:f7:
2f:f8:ec:91:c0:5b:a4:a1:ae:a7:f2:da:fe:f3:99:
23:60:f2:0a:d3:af:73:f2:51:88:6f:3f:cf:13:05:
80:32:a5:82:5e:e7:e5:34:57:88:1f:db:8a:64:a1:
6b:61:41:a7:71:ec:55:4a:ac:e6:14:a8:a3:cd:25:
ec:16:b7:ce:62:6f:9c:56:11:9c:09:1e:37:a5:ee:
f6:83:70:ec:ac:78:46:9b:5f:0c:ee:61:64:fa:a3:
0a:db:c3:98:74:57:3b:ea:53:b0:50:74:37:31:10:
91:92:8f:b7:1a:60:bf:7e:b8:5d:93:e1:0b:6b:57:
59:b9:0b:b9:7e:48:c7:3a:7a:0c:27:c3:35:33:50:
7f:2d:a6:57:ac:b5:40:3b:c0:4a:7d:7f:f1:e9:cc:
20:24:fb:fd:29:82:e9:ff:3b:9f:cc:4e:12:23:b8:
d3:78:2b:ad:b0:df:06:24:89:2e:9b:e0:ef:f8:39:
fd:0e:35:e8:2e:eb:7d:a8:28:89:81:35:46:bf:cd:
38:ed:db:9d:2a:95:da:50:73:dd:43:6a:ed:a6:4d:
07:ad:66:b8:fd:72:3f:52:c3:80:fe:99:46:31:2f:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BC:7C:A3:77:10:72:59:A4:AA:0B:F1:31:85:8F:5B:43:06:F5:77
X509v3 Authority Key Identifier:
keyid:25:70:39:AE:9A:49:ED:74:C7:76:A9:35:CE:91:80:9A:FB:5F:6A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXA5rppJ7XTHdqk1zpGAmvtfamM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/Z7x8o3cQclmkqgvxMYWPW0MG9Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/0882e2-5208-484d-bc96-779fe6a6c22a/1/JXA5rppJ7XTHdqk1zpGAmvtfamM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.0.0/22
45.147.128.0-45.147.130.255
Signature Algorithm: sha256WithRSAEncryption
6e:43:d4:d1:f6:db:f7:3e:21:c3:21:1a:c2:90:e6:dd:6b:51:
3a:d5:50:5e:4a:e0:b5:47:00:c5:52:1c:b3:d2:fe:f7:ce:16:
9d:b2:f2:df:cd:86:4f:dc:d4:84:8a:84:c2:b7:8e:88:fd:18:
49:f7:6f:3d:dc:74:12:6a:d6:51:e8:95:6d:78:e6:62:de:b4:
50:f7:a6:2d:ac:ef:4a:64:95:3d:9d:0c:f5:cf:2c:24:30:d5:
80:33:77:7e:83:6e:95:92:1e:3e:0c:36:5b:b9:7b:2f:09:06:
b7:55:03:ac:e2:7b:8d:59:21:7c:89:b3:d2:26:24:eb:a7:b4:
85:69:9a:0d:9d:79:b2:43:ca:1c:a7:be:2d:af:32:2f:51:bd:
4a:00:e8:5e:3e:3e:b7:c6:bf:63:95:8a:34:7e:0c:b3:bb:f6:
18:a9:c7:d6:8d:cd:0c:7f:d2:e1:2c:84:71:32:4a:e8:f0:31:
49:6d:50:08:19:bb:83:80:b7:e7:cd:af:86:1d:aa:bd:46:aa:
e4:a1:a5:a1:a8:46:18:f7:52:6a:8c:59:71:11:75:b1:43:33:
05:27:8c:d0:0f:e3:47:a0:56:b7:8b:75:1b:d9:fe:c6:69:7c:
55:8c:a2:7e:87:fb:cf:bb:d3:ce:58:a4:a4:57:3c:01:b4:72:
4c:5b:73:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:05 2024 by rpki-client on console-ams.rpki-client.org