Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/psaeiIAXTAJucyWy9y82kUMBvd8.roa
File: psaeiIAXTAJucyWy9y82kUMBvd8.roa (raw, json)
Hash identifier: BqqdACjEGb+oMbATxEGJe/nN3DTBlfWdR5dOcewbDy8=
Subject key identifier: A6:C6:9E:88:80:17:4C:02:6E:73:25:B2:F7:2F:36:91:43:01:BD:DF
Certificate issuer: /CN=affd6578a7cbc6884049a0ebeb65c039c58e2583
Certificate serial: 01E8355B
Authority key identifier: AF:FD:65:78:A7:CB:C6:88:40:49:A0:EB:EB:65:C0:39:C5:8E:25:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_1leKfLxohASaDr62XAOcWOJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/psaeiIAXTAJucyWy9y82kUMBvd8.roa
Signing time: Sat 01 Jan 2022 06:58:11 +0000
ROA not before: Sat 01 Jan 2022 06:58:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.9.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31995227 (0x1e8355b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affd6578a7cbc6884049a0ebeb65c039c58e2583
Validity
Not Before: Jan 1 06:58:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6c69e8880174c026e7325b2f72f36914301bddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:20:c2:de:9a:8e:68:68:27:22:f8:c3:a8:
02:dd:90:f3:17:1e:fd:d6:1d:b6:70:c9:7f:c6:ce:
24:be:c8:2e:57:b1:8b:8e:33:1a:1c:5d:c4:02:f3:
34:33:a6:76:a6:c6:40:36:10:2c:be:3c:54:26:6a:
d2:19:e5:4b:19:f4:fa:d3:67:e3:3b:7d:26:25:b5:
0a:46:d1:d0:8a:71:46:bd:b4:ce:f4:7c:b8:d4:dc:
62:4c:ac:3d:dc:32:d7:ef:48:67:fc:39:ff:a1:f2:
f0:e5:21:ab:4d:e0:fe:5e:30:8d:03:5d:0b:44:46:
08:5c:80:d3:69:fc:a8:c1:ab:76:b4:64:7c:21:66:
c4:85:cb:53:c4:d1:b6:1a:89:68:85:46:74:60:d2:
71:69:d6:88:87:c4:18:20:5d:07:59:d3:af:9d:c9:
16:a1:be:da:31:91:96:36:10:a9:1b:89:22:4c:e9:
84:9f:5e:f3:75:b9:5b:77:43:9e:92:a7:bb:cb:12:
f1:19:d6:85:ac:7e:0d:b6:2c:d6:4f:c0:39:4b:40:
8b:e2:d2:50:e0:ae:2b:f9:86:f6:6d:87:0e:11:04:
fa:37:db:bc:ff:68:69:9a:d5:5a:a3:56:82:d6:55:
cd:e2:1f:a0:13:90:8a:9c:3b:0f:6e:99:f8:9e:5f:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C6:9E:88:80:17:4C:02:6E:73:25:B2:F7:2F:36:91:43:01:BD:DF
X509v3 Authority Key Identifier:
keyid:AF:FD:65:78:A7:CB:C6:88:40:49:A0:EB:EB:65:C0:39:C5:8E:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_1leKfLxohASaDr62XAOcWOJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/psaeiIAXTAJucyWy9y82kUMBvd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.21.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7a:85:36:13:3f:e0:2a:60:25:e7:a3:95:3d:dc:7d:16:6a:
ce:ba:76:bc:8d:8b:00:e0:86:a4:8c:c6:c3:54:d6:b5:c7:66:
71:c9:6b:ba:43:e8:34:9c:de:b7:a3:d5:63:3c:b4:8e:a1:20:
a9:57:c4:43:46:68:f3:8a:60:83:86:bf:a7:2d:d9:10:5b:98:
f4:f5:76:de:2f:24:59:04:fa:3b:ea:b3:82:f6:f4:18:42:91:
e3:d8:f2:de:34:bb:a1:70:6e:8d:e3:b8:14:f8:0a:eb:10:24:
46:1b:e6:0d:b6:53:a1:d0:43:ad:12:50:98:40:4d:f4:1c:db:
e9:02:3c:ef:dd:f5:50:6e:a0:e1:ff:fb:c8:e2:68:6b:ea:25:
a6:bc:b4:96:7d:8e:a0:ca:b9:ad:b3:27:97:bc:29:b3:26:39:
41:5c:be:7c:69:72:9a:e1:1d:7c:5c:38:c5:ae:1c:f5:ac:34:
ad:14:b7:50:5d:23:8b:3d:e2:0f:f8:c2:1b:17:61:c9:a9:f6:
3c:57:30:c8:9d:c4:c1:40:9d:f3:8e:03:73:7c:e0:e2:e1:6e:
49:f9:08:83:3d:d8:cf:a5:fb:a4:e9:81:75:82:34:a4:45:2d:
2d:e7:00:ce:71:6e:7b:aa:85:67:75:58:fe:37:85:52:bf:98:
33:80:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org