Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/KttSrfdufL6GbE8NXmMfRS6JzbM.roa
File: KttSrfdufL6GbE8NXmMfRS6JzbM.roa (raw, json)
Hash identifier: tLAYsO5xSYCxfu0gnpbg8DInYx1n1jCKxtjUjOdSh7Q=
Subject key identifier: 2A:DB:52:AD:F7:6E:7C:BE:86:6C:4F:0D:5E:63:1F:45:2E:89:CD:B3
Certificate issuer: /CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
Certificate serial: 01856F9DB72199C875BCDB9CD51450C6716D
Authority key identifier: 1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/KttSrfdufL6GbE8NXmMfRS6JzbM.roa
Signing time: Sun 01 Jan 2023 23:14:44 +0000
ROA not before: Sun 01 Jan 2023 23:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51013
IP address blocks: 45.10.97.0/24 maxlen: 24
45.148.80.0/22 maxlen: 22
2a10:bbc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b7:21:99:c8:75:bc:db:9c:d5:14:50:c6:71:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f106f466c4afa3b9dc3bfff43caf70b8658c4e2
Validity
Not Before: Jan 1 23:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2adb52adf76e7cbe866c4f0d5e631f452e89cdb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:95:41:92:e1:81:4f:33:b9:a4:df:24:ad:
40:49:bc:bc:9f:60:3f:63:a5:a8:28:07:ec:f8:bc:
c7:5b:81:be:d1:30:e2:ab:27:87:77:1b:74:2d:45:
c6:96:a5:bb:b4:43:96:95:68:af:98:39:35:6e:6b:
c8:e9:e3:9c:15:93:0d:48:8f:19:fe:15:16:8c:b9:
5d:3d:45:23:b1:f2:c7:d3:d1:c6:14:3d:f8:fa:27:
62:4a:29:49:29:01:d0:bd:11:e3:a4:1b:13:cf:da:
51:4f:56:b9:0a:d6:20:58:85:9b:1e:8a:b9:f7:f2:
07:ef:0f:51:69:85:c5:e8:b3:a7:6a:e2:74:47:6c:
90:51:de:36:6e:bb:fd:16:a0:6e:53:c1:b0:4d:eb:
41:31:d7:67:8c:70:6b:68:32:a5:17:4a:05:49:49:
31:80:f6:bd:8d:37:24:ba:6a:bb:1a:3d:aa:bb:cf:
75:77:54:56:4a:7d:43:c8:74:70:77:f2:0a:30:c7:
7a:85:09:e4:f3:01:76:93:ab:06:93:10:f1:76:0d:
87:5a:81:26:ae:71:6e:ff:9b:59:6d:30:64:b5:13:
19:3d:54:9a:2f:d4:9a:8a:d2:96:6d:ae:99:b6:07:
b0:0c:21:b4:e1:0e:ec:ae:6d:a5:13:94:e3:3a:a2:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DB:52:AD:F7:6E:7C:BE:86:6C:4F:0D:5E:63:1F:45:2E:89:CD:B3
X509v3 Authority Key Identifier:
keyid:1F:10:6F:46:6C:4A:FA:3B:9D:C3:BF:FF:43:CA:F7:0B:86:58:C4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxBvRmxK-judw7__Q8r3C4ZYxOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/KttSrfdufL6GbE8NXmMfRS6JzbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cbd8e7-312c-4a48-830d-aa755b12de80/1/HxBvRmxK-judw7__Q8r3C4ZYxOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.97.0/24
45.148.80.0/22
IPv6:
2a10:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:a2:09:3a:e5:71:60:c4:78:c1:9b:3f:0f:33:d4:ca:64:25:
8d:4c:36:c8:79:40:cd:cb:11:bf:01:55:b8:db:b0:ad:0c:b0:
e2:7b:93:78:bc:46:15:78:b1:1a:ee:6b:0e:cf:d9:5f:4a:11:
be:0a:d6:88:a9:f0:12:4a:d0:28:d5:c0:ae:ef:29:da:9b:fa:
2d:6e:aa:40:f8:72:d1:9a:48:7a:fb:0d:65:31:fc:eb:20:7d:
b1:0a:fa:99:61:99:b3:ee:8c:3b:61:70:ee:a9:70:ed:c1:db:
68:8f:d7:1b:aa:4e:50:93:90:8c:3f:ef:7b:e3:4e:4f:cd:70:
0b:4f:b7:db:2b:f6:18:68:ec:5a:52:66:5e:47:72:bf:69:80:
d2:b9:c9:69:07:74:88:04:46:e2:72:d8:b2:5a:d1:ed:09:c1:
00:bf:39:10:8f:e3:07:91:2c:e5:98:f3:f0:58:2c:30:5d:51:
57:e7:d1:a4:fc:a8:a9:9e:73:5f:0a:eb:b7:21:cc:36:c2:ef:
9a:29:98:77:0d:ac:24:07:5a:9e:fe:dd:a1:3b:c2:d0:88:6a:
c7:21:a9:e3:1e:a5:3b:d6:f7:af:ce:bd:fc:5c:70:75:ed:eb:
33:94:6f:17:28:e6:18:08:89:a0:72:33:15:8d:51:62:cc:f8:
8c:22:7d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:02 2024 by rpki-client on console-ams.rpki-client.org