Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/dFYrDlWW08-qZ6zLwQcSadCTL7k.roa
File: dFYrDlWW08-qZ6zLwQcSadCTL7k.roa (raw, json)
Hash identifier: 3mmMosCdmrCxTDyusN2+nYnUH3yYt+Oj9qYtF1MjT/0=
Subject key identifier: 74:56:2B:0E:55:96:D3:CF:AA:67:AC:CB:C1:07:12:69:D0:93:2F:B9
Certificate issuer: /CN=c00216f3c879332fe26ea943b29a64d5520069b4
Certificate serial: 03C59282
Authority key identifier: C0:02:16:F3:C8:79:33:2F:E2:6E:A9:43:B2:9A:64:D5:52:00:69:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAIW88h5My_ibqlDsppk1VIAabQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/dFYrDlWW08-qZ6zLwQcSadCTL7k.roa
Signing time: Sat 01 Jan 2022 05:02:53 +0000
ROA not before: Sat 01 Jan 2022 05:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 45.140.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63279746 (0x3c59282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00216f3c879332fe26ea943b29a64d5520069b4
Validity
Not Before: Jan 1 05:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74562b0e5596d3cfaa67accbc1071269d0932fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8f:e2:b4:50:49:91:6f:4e:4e:66:e1:82:c2:
ec:d1:76:b4:c7:b8:35:be:66:e3:01:0e:63:21:da:
3c:4e:57:4c:71:10:a9:c4:c2:a1:d3:fa:fc:ac:42:
f0:d4:be:a7:87:b0:8f:c6:53:fa:65:61:e5:72:87:
e7:46:96:c7:0b:60:2b:59:36:e1:54:95:a1:be:ed:
12:ea:bb:f4:50:f7:48:b7:77:8d:84:e0:d1:0e:3d:
d6:0d:16:41:da:e6:1b:43:66:0b:9e:77:c9:2c:28:
4f:2d:7c:16:79:16:61:4e:61:dd:2a:fc:89:85:d2:
91:fc:c2:0c:c5:2d:78:76:40:55:a1:97:76:63:42:
ea:75:32:25:22:48:fa:b3:c9:94:38:b5:84:bf:f8:
fc:51:a7:86:a1:e8:40:4a:55:b4:b4:52:5b:75:4c:
ca:ab:e7:77:3b:c4:d4:16:fa:52:44:69:b8:d2:00:
f0:4e:c9:1d:d5:fe:18:a0:e3:8b:4a:8b:cc:97:63:
eb:a9:ef:bc:7b:7c:36:71:2b:1d:2a:f1:46:12:b8:
59:22:ee:b6:52:72:78:bb:d7:74:f8:bd:d6:5f:3d:
95:36:c6:34:1a:71:c9:7b:6e:f1:e7:c5:65:70:24:
98:d3:fd:4f:c6:b5:ca:6c:9f:b1:3f:0c:08:3b:60:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:2B:0E:55:96:D3:CF:AA:67:AC:CB:C1:07:12:69:D0:93:2F:B9
X509v3 Authority Key Identifier:
keyid:C0:02:16:F3:C8:79:33:2F:E2:6E:A9:43:B2:9A:64:D5:52:00:69:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAIW88h5My_ibqlDsppk1VIAabQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/dFYrDlWW08-qZ6zLwQcSadCTL7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5297e5-4807-4c8c-b081-bfa88755a4d2/1/wAIW88h5My_ibqlDsppk1VIAabQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.7.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5a:78:a9:05:91:0e:4c:95:63:ef:aa:d2:4b:ab:40:bb:87:
62:e4:43:cd:d1:bd:88:7f:67:a6:ae:f2:4a:d2:2d:e1:10:7b:
31:3a:e5:3e:4f:ce:38:63:f0:3f:ce:64:7f:b7:ce:d6:01:a8:
12:65:a6:44:30:6f:2e:56:e2:fe:75:8a:7e:cf:c6:d7:2e:02:
b1:35:20:d9:6b:5e:ff:40:1b:50:49:80:36:29:41:f8:af:de:
27:5f:31:8d:07:39:99:3c:cd:e9:e9:50:2b:f2:9a:92:1f:b7:
9d:61:80:6f:c1:39:e7:0e:96:08:40:e8:8f:6e:b2:27:77:1a:
05:58:28:87:60:4d:34:59:41:17:f7:f7:c2:f6:1a:a2:74:fb:
62:5b:2e:92:af:9b:a2:b2:23:72:26:2f:e5:b3:d9:6f:8a:a0:
e6:9b:95:f9:77:13:ea:16:59:a4:4a:d0:9c:51:7f:c5:06:a4:
90:22:2a:d0:c4:71:b9:2f:ee:ea:67:e7:0d:60:ed:a1:0a:10:
49:28:3e:24:2e:63:69:41:44:f3:c6:92:57:42:4a:87:14:6f:
34:cf:6b:2b:26:4c:10:f4:fb:d3:e9:ca:f0:17:a4:3b:f2:9a:
f2:ef:b3:4b:30:21:28:ca:e0:c1:a5:2a:77:31:46:2e:80:27:
31:aa:0c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:36 2023 by rpki-client on console-fra.rpki-client.org