Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/BD2vH-JB84xa_u-5Mbl1U97UxBE.roa
File: BD2vH-JB84xa_u-5Mbl1U97UxBE.roa (raw, json)
Hash identifier: yQNLoOLFDykEcyNlzOg9qIxyfzTu2q/RihIgwo/pAV4=
Subject key identifier: 04:3D:AF:1F:E2:41:F3:8C:5A:FE:EF:B9:31:B9:75:53:DE:D4:C4:11
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 018475C39E20E0B6FF90393DEA110CE06FFB
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/BD2vH-JB84xa_u-5Mbl1U97UxBE.roa
Signing time: Mon 14 Nov 2022 10:51:04 +0000
ROA not before: Mon 14 Nov 2022 10:51:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 45.149.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:c3:9e:20:e0:b6:ff:90:39:3d:ea:11:0c:e0:6f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Nov 14 10:51:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=043daf1fe241f38c5afeefb931b97553ded4c411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:ab:22:c4:ee:23:e9:39:de:fc:e8:34:61:
3b:3f:3a:1d:11:7f:be:71:d4:b1:1d:56:f9:e1:d6:
7e:1a:ce:a9:38:42:c3:62:57:75:4d:f2:35:9b:09:
f4:f3:c0:b6:b1:8d:ff:5e:79:e5:34:9c:00:7b:7b:
71:97:6a:06:41:f3:13:01:24:27:82:5f:44:36:fb:
d2:08:c5:36:e8:0e:da:f0:c7:3a:b4:ee:9f:99:0b:
0f:92:87:9a:95:a7:45:99:d4:9c:b5:28:76:20:4c:
01:58:e8:b0:f8:29:92:f7:ae:03:f8:8e:bc:47:10:
ff:0f:a3:d0:f3:54:82:85:d9:20:1e:32:82:1a:4d:
8a:31:e2:e6:50:ea:c4:75:83:e3:af:19:48:05:c9:
6c:a6:43:4e:bb:d9:7e:05:13:ea:1b:b5:d0:51:c9:
ea:a5:de:a7:93:7f:e3:64:57:2b:8d:b3:8e:0c:c2:
7b:98:d7:83:ad:4a:c0:81:8b:f3:69:c5:ab:00:b7:
e0:93:cf:c2:41:23:84:d3:36:8e:5a:19:3b:e8:39:
85:f5:28:53:33:5c:e0:e9:0c:17:ca:87:9d:e5:fe:
33:7c:0e:17:a4:14:93:d3:67:c4:cb:ae:a9:56:0e:
5e:ba:22:d7:ec:c5:84:ca:2a:61:50:33:10:90:79:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3D:AF:1F:E2:41:F3:8C:5A:FE:EF:B9:31:B9:75:53:DE:D4:C4:11
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/BD2vH-JB84xa_u-5Mbl1U97UxBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a9:19:57:da:37:38:42:8b:5f:fd:64:3e:f8:78:4c:f7:76:
d2:2a:f4:6b:88:21:3e:36:c4:30:5e:84:45:f1:50:9f:e5:7c:
a1:be:8a:24:2b:1f:21:b3:57:97:f1:62:21:3d:77:c3:b0:a2:
36:ab:c7:ea:07:f6:b1:4f:93:5f:a3:f4:1a:a8:3a:b2:fc:a2:
24:b4:42:9c:9c:cc:c0:f3:0e:02:b6:2d:73:c9:bc:67:7d:53:
b0:75:47:38:54:a6:b5:4b:bb:8f:49:0f:f1:06:22:fd:f9:9f:
63:a8:8e:d6:56:77:17:df:9d:a4:4d:80:37:6f:0a:7d:60:54:
af:51:ac:44:46:ee:30:86:b9:ab:c8:76:7d:6f:c6:9f:e7:2f:
7d:58:2f:c1:9f:6c:44:06:12:5b:1f:a3:99:22:b3:88:56:9a:
3b:df:ea:52:fc:38:c3:aa:b2:82:1f:94:c6:f6:2a:cb:fd:3a:
d1:1d:63:48:ff:cf:49:47:7c:0c:6e:ee:2f:0b:8c:0d:e2:8f:
24:d3:4f:62:47:81:66:13:13:58:0c:9a:0a:25:df:c6:60:05:
d2:f9:e9:2f:30:97:99:7d:7b:b5:e6:fb:5a:24:92:63:6c:2c:
eb:da:a9:8a:d6:9d:b6:96:68:08:d8:1c:de:f5:41:85:93:a9:
fb:58:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org