Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/ys6K_D85T-Su4FcCBAaqCpax4ec.roa
File: ys6K_D85T-Su4FcCBAaqCpax4ec.roa (raw, json)
Hash identifier: 1X++Ipt54ouyK3/+nwEbjyJBqb3javvi46eaDq3PNKI=
Subject key identifier: CA:CE:8A:FC:3F:39:4F:E4:AE:E0:57:02:04:06:AA:0A:96:B1:E1:E7
Certificate issuer: /CN=7d47d63346951d9316bbc2578645b5eae24531b9
Certificate serial: 018877057AADB76EB54EA313FB9159733203
Authority key identifier: 7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/ys6K_D85T-Su4FcCBAaqCpax4ec.roa
Signing time: Thu 01 Jun 2023 12:53:47 +0000
ROA not before: Thu 01 Jun 2023 12:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62455
IP address blocks: 45.11.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:05:7a:ad:b7:6e:b5:4e:a3:13:fb:91:59:73:32:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d47d63346951d9316bbc2578645b5eae24531b9
Validity
Not Before: Jun 1 12:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cace8afc3f394fe4aee057020406aa0a96b1e1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:e6:59:70:8e:74:ba:91:2b:fb:3a:7c:9d:
cc:0e:24:7e:2a:e3:fb:38:e5:e3:25:73:48:7a:05:
73:ad:cf:c0:cb:d9:ad:bb:83:e3:b9:63:6d:20:80:
ec:09:cb:72:76:8a:1c:c3:b5:62:34:ea:54:fd:45:
26:37:18:04:b0:22:db:0e:ba:cb:00:97:06:51:a7:
6f:e3:85:75:1d:20:26:b5:c3:dd:29:60:58:83:60:
4f:9a:42:35:e8:de:4f:65:f1:93:60:2a:b4:69:17:
16:55:23:ab:16:08:30:f7:5a:68:99:7b:1c:4b:dc:
d3:83:3a:37:a9:d7:8d:f2:3f:69:8d:4c:4d:08:23:
0e:8d:74:72:c5:b3:c9:e1:cc:89:22:7f:48:0e:f1:
88:41:00:9f:ca:f5:ed:4b:1e:64:79:ec:c8:43:10:
1e:db:a2:b6:d7:4c:ab:a4:ff:2c:db:b9:ec:20:3e:
e9:74:fc:15:d6:cb:a2:77:1f:fa:55:88:83:44:de:
2e:a8:40:43:54:5e:07:1c:2c:17:61:21:24:97:4a:
3d:1d:89:bf:4a:87:96:9d:86:84:64:4a:1f:7c:52:
da:00:aa:75:e4:77:42:15:1b:df:ee:35:48:ad:72:
e5:42:f3:38:19:f3:2f:4b:49:0b:46:3b:31:4e:45:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:8A:FC:3F:39:4F:E4:AE:E0:57:02:04:06:AA:0A:96:B1:E1:E7
X509v3 Authority Key Identifier:
keyid:7D:47:D6:33:46:95:1D:93:16:BB:C2:57:86:45:B5:EA:E2:45:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUfWM0aVHZMWu8JXhkW16uJFMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/ys6K_D85T-Su4FcCBAaqCpax4ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ffc311-3110-47f5-8c4f-0c9f76a34005/1/fUfWM0aVHZMWu8JXhkW16uJFMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:9b:b3:27:1f:d6:b2:ac:b4:f9:3e:ed:b6:a9:ca:fd:7d:84:
6f:ef:5d:d1:aa:46:f9:45:36:bb:48:22:d6:13:04:b6:88:ab:
d3:87:67:c7:4f:23:0d:29:98:1f:31:b9:3d:a7:ab:0d:f4:95:
7d:28:17:38:7b:c1:33:ba:81:2c:d7:13:cf:43:7c:8a:9e:b5:
5c:db:9c:bf:88:68:3a:72:37:31:97:f3:13:c2:2f:98:43:57:
f8:7c:a1:3b:cb:c5:06:06:27:7b:ba:4a:a2:c7:a4:46:cd:9e:
14:45:87:fb:a3:ba:38:3c:e9:11:84:3c:24:8f:82:73:b6:9f:
b7:e4:35:8c:ed:58:b8:e8:36:09:ba:e5:fc:b5:51:fa:6c:0e:
b2:ab:93:42:9a:a6:96:79:39:41:80:58:40:c8:7a:23:9b:4b:
70:97:c0:39:3e:61:ff:d1:04:51:ab:28:75:8b:61:b2:43:45:
75:0f:e8:c1:9f:23:96:47:1e:e6:02:a5:23:90:43:32:7b:56:
65:cb:4e:36:a2:81:d3:5d:f2:40:a7:1b:02:a0:ce:10:51:71:
f0:1a:42:8c:e3:e9:c9:15:80:1b:b7:b2:83:39:41:d3:46:2d:
52:06:8f:70:89:f3:dd:cd:fa:db:24:1a:be:c5:38:55:cf:e6:
4c:5c:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:51 2024 by rpki-client on console-ams.rpki-client.org