Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/faa8db-1227-4b80-82af-33a8338bd111/1/SpzLK_cYw49Dh9qqg_PgPgSEp-k.roa
File: SpzLK_cYw49Dh9qqg_PgPgSEp-k.roa (raw, json)
Hash identifier: aTEuAqEpwI7gcK7g20vPD6NQliE5IrT2SRAasuW/JOc=
Subject key identifier: 4A:9C:CB:2B:F7:18:C3:8F:43:87:DA:AA:83:F3:E0:3E:04:84:A7:E9
Certificate issuer: /CN=447c31946c610963ff1a55224fb460bb3e4a63f1
Certificate serial: 08A69277
Authority key identifier: 44:7C:31:94:6C:61:09:63:FF:1A:55:22:4F:B4:60:BB:3E:4A:63:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHwxlGxhCWP_GlUiT7Rguz5KY_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/faa8db-1227-4b80-82af-33a8338bd111/1/SpzLK_cYw49Dh9qqg_PgPgSEp-k.roa
Signing time: Sat 01 Jan 2022 02:02:11 +0000
ROA not before: Sat 01 Jan 2022 02:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208974
IP address blocks: 45.12.170.0/24 maxlen: 24
45.12.168.0/23 maxlen: 23
2a0e:b507::/32 maxlen: 32
2a0e:b500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145134199 (0x8a69277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447c31946c610963ff1a55224fb460bb3e4a63f1
Validity
Not Before: Jan 1 02:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a9ccb2bf718c38f4387daaa83f3e03e0484a7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:9b:2b:d0:bf:d4:a9:fa:90:95:6a:7a:3e:
b3:97:e9:34:de:d3:63:08:3f:7a:78:60:ad:ac:0b:
90:da:11:8e:06:85:8f:76:a4:52:10:41:87:2e:5f:
2e:39:b3:ee:1d:3e:dc:fb:a5:e6:a6:69:27:39:7d:
b6:ba:88:d6:09:d1:86:7f:15:e3:16:71:3c:67:ae:
58:2c:25:df:78:e8:f1:8d:79:c5:12:80:99:10:fd:
27:77:0f:cc:65:3b:c7:ac:cd:72:cb:4d:fa:43:bc:
60:3c:8e:23:1c:23:1e:93:96:51:25:9d:76:9b:13:
c8:c8:75:2e:8c:36:00:17:b1:96:a4:12:22:50:ab:
f6:7b:f6:6f:9c:0d:fd:cf:1e:ae:ac:ca:76:1b:60:
db:8d:e2:19:1c:c4:87:a5:e8:0d:1f:0d:b3:bb:15:
e4:6c:2e:9c:54:89:7d:15:e5:5e:ee:4e:b0:9a:f6:
03:05:01:8d:81:1c:fb:53:41:82:4f:27:56:71:0e:
c8:3e:47:43:0d:d5:84:06:17:59:82:5f:66:99:2a:
00:b1:61:61:24:84:95:b0:70:8f:98:7b:ee:bd:4b:
51:47:f9:b2:22:16:1b:eb:f5:d1:3b:49:56:a9:9e:
41:34:b6:d3:9d:e4:8c:88:76:b6:7c:3d:8f:7e:92:
2a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9C:CB:2B:F7:18:C3:8F:43:87:DA:AA:83:F3:E0:3E:04:84:A7:E9
X509v3 Authority Key Identifier:
keyid:44:7C:31:94:6C:61:09:63:FF:1A:55:22:4F:B4:60:BB:3E:4A:63:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHwxlGxhCWP_GlUiT7Rguz5KY_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/faa8db-1227-4b80-82af-33a8338bd111/1/SpzLK_cYw49Dh9qqg_PgPgSEp-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/faa8db-1227-4b80-82af-33a8338bd111/1/RHwxlGxhCWP_GlUiT7Rguz5KY_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.168.0-45.12.170.255
IPv6:
2a0e:b500::/29
Signature Algorithm: sha256WithRSAEncryption
74:36:eb:86:e1:87:f6:58:f3:d5:ee:b8:69:11:0b:fa:63:2b:
24:f8:9b:19:85:e3:52:cc:1a:e5:55:5c:4d:9b:5e:0a:e9:5c:
05:84:0c:84:b4:7c:2b:ea:60:23:23:9d:07:dc:5e:40:df:74:
a5:fa:4f:e3:fe:66:87:1f:9a:22:8e:6a:1b:1f:34:e6:90:0c:
9c:ed:58:3d:38:af:dc:d1:1e:73:c3:c4:13:00:72:90:6c:0b:
0e:3e:81:bb:a7:1e:48:1f:65:f4:57:3c:2f:2a:41:20:7a:de:
46:c3:fe:15:c3:92:64:e3:f6:c1:31:a1:38:b3:4a:14:3d:7b:
c6:27:dd:a2:fa:ec:e7:86:18:d8:0c:c0:d6:8e:07:db:12:57:
6d:cc:2b:ef:6d:e3:1e:c1:ba:29:f2:8a:1a:2b:16:99:11:40:
95:8c:32:f2:93:8c:ba:a8:7c:36:c4:d4:10:d7:2e:9a:91:74:
9c:24:d5:f3:78:cf:33:c5:a8:b3:a7:7a:4d:35:25:46:83:26:
63:9f:d4:e0:5c:f7:d8:9f:cb:24:de:c3:84:35:3b:ad:82:bb:
1b:5b:7a:23:0b:2f:5c:be:8f:14:a3:d2:6f:d6:40:72:40:ee:
99:be:9c:8c:d0:ec:2c:a5:90:d5:44:ac:a3:fa:a9:0d:5d:59:
b2:24:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:25 2024 by rpki-client on console-ams.rpki-client.org