Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/yL6N6MCuN20IYdpIYxs4Vfm5wBo.roa
File: yL6N6MCuN20IYdpIYxs4Vfm5wBo.roa (raw, json)
Hash identifier: cO4lINLqWDOUNu3VkqWXYGyatrJ7CzFbfvIonJK5aAs=
Subject key identifier: C8:BE:8D:E8:C0:AE:37:6D:08:61:DA:48:63:1B:38:55:F9:B9:C0:1A
Certificate issuer: /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial: 018345BEFA01049E24D60B068D539E4727B9
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/yL6N6MCuN20IYdpIYxs4Vfm5wBo.roa
Signing time: Fri 16 Sep 2022 10:01:27 +0000
ROA not before: Fri 16 Sep 2022 10:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 45.88.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:45:be:fa:01:04:9e:24:d6:0b:06:8d:53:9e:47:27:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Validity
Not Before: Sep 16 10:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8be8de8c0ae376d0861da48631b3855f9b9c01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:8f:f2:ff:63:a5:e8:38:1c:27:32:52:b8:
32:7f:3f:4a:1b:22:74:ac:1f:d5:91:6a:1c:bd:78:
88:bc:22:7c:5d:ff:42:45:85:d6:f4:ef:84:45:2d:
0b:f9:af:3a:7e:6f:f8:64:15:d6:5f:4a:bf:1e:0c:
c4:a3:33:0f:bc:bb:2f:f4:ea:61:a1:02:d4:f4:5f:
a5:ef:32:f4:51:5a:9e:b7:4e:68:f8:74:0c:1c:cc:
fb:b4:e4:36:bd:c1:c5:c0:db:ec:e7:27:a4:6b:50:
7d:ac:5e:f7:9f:6c:bb:d5:d4:fe:41:00:1a:f0:4a:
c2:5e:f4:bf:e9:64:b3:9a:b4:65:70:24:37:12:74:
38:b1:ff:3d:36:e6:91:b5:14:db:fc:b0:7e:0b:36:
f4:ab:05:bf:b0:b1:4b:84:26:de:5a:91:32:f4:22:
a2:8f:59:26:63:e3:65:d2:cf:33:da:a6:af:14:4f:
3c:2b:92:a3:fe:5e:e8:fe:15:01:f2:8e:81:7b:ca:
9d:b2:40:33:70:ae:fd:30:96:ce:a6:d3:f7:06:d5:
f3:bb:78:99:04:91:b0:30:4f:14:97:5e:96:07:ad:
2e:d8:d5:40:ff:f0:86:50:48:c3:98:db:99:95:59:
11:24:ab:77:a6:9b:63:7a:a8:ea:1b:47:0e:0f:b2:
09:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:8D:E8:C0:AE:37:6D:08:61:DA:48:63:1B:38:55:F9:B9:C0:1A
X509v3 Authority Key Identifier:
keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/yL6N6MCuN20IYdpIYxs4Vfm5wBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:62:26:ae:7a:4e:a4:d6:5b:46:61:4a:1e:a0:54:f1:7e:50:
d1:6a:d6:4b:12:59:41:0b:bc:4a:c9:9e:1d:55:ca:4e:41:dd:
54:cc:9c:a5:51:47:6b:8e:0a:d5:dd:48:14:9f:84:3b:ae:15:
04:48:7e:db:0e:c4:27:a3:4a:ed:65:14:a2:8a:0b:5e:cb:bc:
1b:46:e7:f6:0b:ed:df:8c:f4:bf:b6:6d:af:51:48:5f:5c:ce:
b9:2a:0e:9b:52:6c:04:4c:5a:fd:12:de:1d:43:e3:44:81:f3:
f5:58:39:b8:1c:eb:14:a2:29:d7:0a:0f:a3:31:b2:e7:ec:27:
ac:ba:77:1b:18:bf:19:9e:57:8b:45:96:da:ce:4c:be:9a:1e:
1a:62:90:a2:ef:8c:cb:41:ac:e1:ea:13:38:5e:e7:bb:09:11:
75:0a:fa:9e:07:42:64:07:c5:0f:9e:2d:1b:e3:af:76:4a:c8:
60:e5:6e:f8:8d:4c:a7:9e:04:6e:65:d9:53:90:52:02:0c:b8:
8f:d6:f4:bd:71:e4:c2:f7:69:4a:58:0e:ae:2a:c0:a8:e0:af:
84:19:bf:d4:02:3f:c8:2e:e3:44:fc:c3:aa:e7:d2:a2:fe:8b:
c3:0d:38:bb:9d:81:49:6d:4a:29:58:f7:84:19:f2:40:56:28:
7f:aa:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org