Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/CcrzYImIWt2KQrqZSzpgoaTkZyM.roa
File: CcrzYImIWt2KQrqZSzpgoaTkZyM.roa (raw, json)
Hash identifier: S03bTL7n7lHfhZp69cHeuNuYA35EETjxzdWhYanKxnk=
Subject key identifier: 09:CA:F3:60:89:88:5A:DD:8A:42:BA:99:4B:3A:60:A1:A4:E4:67:23
Certificate issuer: /CN=0f4b9919cace992eef71a440a123dba3df2a9485
Certificate serial: 018736B5752CF63E8AC04A04AF7445022726
Authority key identifier: 0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/CcrzYImIWt2KQrqZSzpgoaTkZyM.roa
Signing time: Fri 31 Mar 2023 08:07:54 +0000
ROA not before: Fri 31 Mar 2023 08:07:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 45.132.218.0/24 maxlen: 24
45.132.219.0/24 maxlen: 24
45.132.216.0/24 maxlen: 24
45.132.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:b5:75:2c:f6:3e:8a:c0:4a:04:af:74:45:02:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f4b9919cace992eef71a440a123dba3df2a9485
Validity
Not Before: Mar 31 08:07:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09caf36089885add8a42ba994b3a60a1a4e46723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4e:ab:46:bb:23:ae:cf:cd:a4:9e:fe:04:c6:
03:e3:c8:3a:af:f5:4b:d3:b5:b5:72:9c:98:10:28:
80:c4:e7:3e:ab:b3:19:aa:e1:a7:c8:0e:57:a3:97:
95:5c:ce:bd:b8:4b:8b:00:97:25:75:a1:a8:dc:75:
1f:91:1e:d0:cf:6e:26:22:ce:d2:86:07:32:83:63:
6e:22:33:9b:06:11:dc:08:36:eb:2d:e6:39:03:31:
70:67:09:38:75:34:87:80:a9:c2:74:fe:84:0b:81:
5c:d0:63:d4:8d:b1:8e:30:c3:b7:c0:e2:96:6c:90:
71:65:e0:14:bf:a1:da:b0:66:8e:46:0c:af:c5:be:
62:b1:8a:fb:65:8d:54:84:b6:c4:b5:54:1f:aa:10:
6c:7b:94:dc:5e:b5:40:4d:a6:c0:ea:2f:ad:d3:e9:
20:82:20:c1:a7:0e:b4:4c:25:83:ee:05:6a:1c:04:
cc:c2:9b:6c:b0:1f:10:b4:ac:1f:c6:fd:81:45:3b:
a6:ad:29:41:b2:e9:aa:c2:fe:6b:d3:97:c8:f6:5b:
92:f7:68:5c:6d:f7:a4:39:9f:53:20:91:47:59:83:
e4:81:64:da:93:f3:ad:37:65:41:3c:f2:df:93:24:
ec:29:80:5a:ec:e9:a1:95:fb:11:d3:a4:4b:b0:15:
db:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CA:F3:60:89:88:5A:DD:8A:42:BA:99:4B:3A:60:A1:A4:E4:67:23
X509v3 Authority Key Identifier:
keyid:0F:4B:99:19:CA:CE:99:2E:EF:71:A4:40:A1:23:DB:A3:DF:2A:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0uZGcrOmS7vcaRAoSPbo98qlIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/CcrzYImIWt2KQrqZSzpgoaTkZyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/efc75a-cf92-4c4a-9441-aca5a4414212/1/D0uZGcrOmS7vcaRAoSPbo98qlIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:8a:7a:94:4d:cc:3d:6f:b0:3c:d6:84:66:7d:c5:ee:70:68:
fe:71:16:b6:40:44:32:2f:4f:36:08:92:f8:74:5a:b2:55:b9:
05:5f:81:c6:b7:53:b8:71:79:33:15:7f:b1:fe:6d:8d:ff:fb:
cd:ce:3a:63:d7:08:68:a7:43:c5:ff:60:19:52:ae:3a:cb:83:
3a:ba:3e:ff:48:e6:c7:a9:79:4d:b3:ca:df:50:5a:8e:38:9f:
ab:6a:32:a3:76:ac:85:74:bb:f3:29:64:f4:4e:6c:8c:cb:f7:
aa:e0:dd:ad:b3:d8:8a:28:bf:7c:94:8b:61:19:5b:6f:45:36:
fa:61:e0:09:a8:ad:43:c6:c6:39:ce:6a:2f:97:ff:06:dc:48:
77:17:e7:d9:48:91:a0:6d:29:f5:5b:39:90:19:cd:fa:3a:b7:
d2:91:c8:9e:d7:bd:67:55:08:24:f7:4e:62:5a:32:89:61:7f:
20:5f:3f:09:b6:3e:86:9c:f0:f7:f9:5d:35:de:88:49:67:e6:
a8:7b:73:01:e7:8e:a9:15:8b:fc:7e:de:e6:60:bd:0c:dc:77:
f1:60:8a:12:b3:db:f7:d4:3e:01:88:6d:2e:f5:14:88:8f:b6:
bc:a6:c4:e9:c8:0c:ba:9e:84:57:1c:90:b3:27:f4:a4:66:ec:
c9:7c:94:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org