Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/L_FbrcKVD0U3TsyP0N-UjvrdGa4.roa
File: L_FbrcKVD0U3TsyP0N-UjvrdGa4.roa (raw, json)
Hash identifier: fgmO9UiBzZ5ykBbTpvxTVjgQ2+OnkM36gHUZFBpW8r0=
Subject key identifier: 2F:F1:5B:AD:C2:95:0F:45:37:4E:CC:8F:D0:DF:94:8E:FA:DD:19:AE
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 01856CC16730D24AB4E99E104903FC5C9ACE
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/L_FbrcKVD0U3TsyP0N-UjvrdGa4.roa
Signing time: Sun 01 Jan 2023 09:54:52 +0000
ROA not before: Sun 01 Jan 2023 09:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 45.143.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:67:30:d2:4a:b4:e9:9e:10:49:03:fc:5c:9a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 1 09:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff15badc2950f45374ecc8fd0df948efadd19ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:de:53:af:5e:06:6d:cb:ca:8f:b5:1b:3a:
e0:35:4e:07:eb:3b:45:58:fb:92:ff:82:67:4a:f7:
ac:67:80:80:48:1f:96:9b:b5:48:cc:5e:4d:d0:3b:
b9:f5:5d:08:d7:3d:fb:a2:bd:ac:75:f9:13:93:3d:
91:75:52:f3:56:de:31:99:69:c9:b8:45:ae:c5:1a:
80:95:02:62:cd:b4:2f:23:c6:83:ee:47:5f:9e:44:
e0:38:f0:5e:5a:34:64:76:79:e1:02:4f:93:28:1d:
29:5e:84:d6:97:e9:be:2d:6e:ec:28:85:62:9a:79:
b6:24:ef:ed:60:e4:19:22:89:5a:4b:b4:bc:92:a1:
82:1a:2a:07:20:3b:6d:03:75:20:86:19:40:78:df:
05:5c:29:bb:1b:15:69:50:b9:64:2c:85:d6:94:ad:
0c:5c:71:3c:ba:b2:58:5b:d6:6b:4e:c9:01:33:18:
1d:c2:c0:d5:23:d4:e3:e9:95:27:65:60:13:91:ff:
4b:4d:2a:f5:13:f6:1e:52:9d:a8:da:c3:fd:a3:42:
bc:f6:c6:bb:97:dc:f5:d7:87:39:8d:3b:53:22:81:
11:d9:56:a9:7c:07:6c:66:a1:5e:c3:48:a2:7e:09:
43:7c:db:77:72:9b:6a:6b:26:93:14:a2:1a:41:42:
ea:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F1:5B:AD:C2:95:0F:45:37:4E:CC:8F:D0:DF:94:8E:FA:DD:19:AE
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/L_FbrcKVD0U3TsyP0N-UjvrdGa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.5.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ff:47:2d:37:d3:25:71:5c:d6:2b:5b:b9:45:14:17:fb:56:
3a:12:e6:07:f7:bb:79:e4:db:a7:58:3b:5a:11:84:1a:1f:9b:
f1:c3:c3:ae:1b:59:dc:99:dd:0d:a6:45:14:2d:37:67:c2:c0:
13:65:86:f1:db:57:17:52:fa:ce:56:ca:57:69:97:14:2b:13:
c7:eb:7a:be:65:4c:5e:77:f5:ba:ec:29:7c:fd:d1:0e:a7:03:
cd:45:bc:29:5b:6e:cf:52:63:69:16:a3:31:88:e1:34:1f:d1:
89:50:9b:fc:5e:46:87:82:9c:75:d1:07:a9:03:a8:34:84:80:
a0:6d:13:d2:fc:34:f9:ea:64:32:f7:9d:31:af:3f:93:14:eb:
58:87:9e:0e:b7:a6:07:06:80:1f:fa:b7:d2:30:bc:8e:4e:88:
69:b3:10:39:7f:fd:63:22:76:cf:c9:38:39:16:38:09:e0:4a:
00:fe:66:ea:e0:8d:41:5c:e4:d8:89:bb:c0:c0:f7:53:b6:d1:
b8:08:f7:89:7f:c2:70:7e:31:d4:89:3d:b2:a1:8a:ee:fb:99:
ce:0a:ed:a6:d9:4a:ec:23:a1:db:9f:a8:bb:23:85:8e:d1:c4:
9a:b2:75:42:2d:8d:b2:ac:c7:81:70:f6:9a:58:28:4c:d1:c0:
32:ba:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:00 2024 by rpki-client on console-fra.rpki-client.org