Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/DJn3RIYRICnvq-KE9-DMrpyK9LY.roa
File: DJn3RIYRICnvq-KE9-DMrpyK9LY.roa (raw, json)
Hash identifier: KdsCtTSOs3ggHxb81MS8wzzJGKHmh52q48yRzVT04B8=
Subject key identifier: 0C:99:F7:44:86:11:20:29:EF:AB:E2:84:F7:E0:CC:AE:9C:8A:F4:B6
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01837ACEFAE425492E79B1269B4CF8070F58
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/DJn3RIYRICnvq-KE9-DMrpyK9LY.roa
Signing time: Mon 26 Sep 2022 17:18:48 +0000
ROA not before: Mon 26 Sep 2022 17:18:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204721
IP address blocks: 45.143.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7a:ce:fa:e4:25:49:2e:79:b1:26:9b:4c:f8:07:0f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Sep 26 17:18:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c99f74486112029efabe284f7e0ccae9c8af4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:7b:eb:02:47:1d:c7:85:d6:23:c7:67:b7:
42:6b:bb:da:77:c7:6b:19:b5:77:83:7d:b0:2a:e5:
af:d9:a1:3b:31:c8:1c:fb:24:d7:48:bb:6b:86:f4:
d8:25:da:44:51:68:db:b0:46:f3:53:ba:cc:6a:d7:
37:df:0c:e9:ae:e9:07:4e:33:d3:04:3e:bf:e3:89:
1d:eb:f9:19:6d:c0:00:47:1f:ce:8a:3e:85:77:85:
f0:a6:b1:e9:43:67:25:49:de:e6:a6:56:72:05:22:
5b:f6:fb:c9:c7:c0:22:a6:a2:bc:c2:11:b7:0c:b0:
69:e2:85:be:79:e4:e8:68:1e:66:b1:9c:d0:7b:f5:
41:5b:ba:6b:ca:c4:c2:83:13:ea:e6:19:03:68:06:
93:1d:f6:47:15:41:c0:f3:d5:25:f6:a0:87:00:5c:
dc:15:b2:42:82:60:a0:7b:4e:89:b0:96:8c:9e:b5:
50:e6:ec:bd:75:3e:91:51:a4:dc:75:e2:08:d2:b0:
18:50:ab:4d:4d:6a:db:8e:5f:56:e4:5f:fa:d0:f3:
ec:18:22:b3:c2:07:6f:2b:d3:ac:e1:d4:30:f3:55:
f6:f7:94:42:31:dd:cd:96:f1:21:77:73:23:95:74:
59:9a:d0:52:0b:b0:73:93:4b:5d:b4:d7:29:a7:2b:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:99:F7:44:86:11:20:29:EF:AB:E2:84:F7:E0:CC:AE:9C:8A:F4:B6
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/DJn3RIYRICnvq-KE9-DMrpyK9LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.6.0/24
Signature Algorithm: sha256WithRSAEncryption
00:db:32:f4:98:26:99:d4:43:6d:0f:f1:8c:82:26:51:1c:ca:
a4:15:7b:ff:2c:f1:44:cf:29:5c:2e:b2:85:ec:7d:7d:4a:26:
db:90:f0:e3:ee:37:65:3e:ea:d7:ad:66:1b:fe:4d:cf:36:f0:
65:11:63:94:f5:64:b9:9a:cf:74:88:df:78:75:cb:39:8a:d7:
b8:19:6d:29:3d:2c:3e:df:07:88:39:15:a1:78:08:81:c3:cf:
77:b7:e7:d9:c5:14:26:18:6f:e0:df:02:ba:e9:92:77:32:38:
73:a4:bb:4f:fe:a1:96:3a:55:98:8d:79:2d:9a:1c:0c:72:a2:
93:25:ae:b9:72:f9:8d:e7:4a:62:4e:cc:74:14:b8:64:64:c7:
b4:66:f5:21:a8:ff:76:6b:e9:7b:28:e4:93:16:30:c2:fc:ca:
22:70:60:2b:a6:f1:b0:61:54:55:31:e1:2e:d5:0e:5b:86:74:
16:20:4b:50:60:81:f2:6f:55:55:ea:d8:07:00:6c:37:8d:71:
76:17:4c:fc:52:e9:c4:70:0b:22:95:0f:14:75:ed:2f:13:61:
64:28:a5:5c:ac:8e:5c:1c:f3:6c:94:61:ab:c3:2a:ca:e3:b6:
57:1f:12:3f:76:25:3f:b9:00:88:58:76:35:0c:9f:be:35:30:
c8:ee:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org