Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/yXB64_d6-eJk4srAY0xMxcPmxAA.roa
File: yXB64_d6-eJk4srAY0xMxcPmxAA.roa (raw, json)
Hash identifier: bgSqIDoo9HHEAPg4vbwtgXYUPcXflDx/DB0aolkf/SU=
Subject key identifier: C9:70:7A:E3:F7:7A:F9:E2:64:E2:CA:C0:63:4C:4C:C5:C3:E6:C4:00
Certificate issuer: /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial: 018570304B07C0DDD2CD930CB67F49204794
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/yXB64_d6-eJk4srAY0xMxcPmxAA.roa
Signing time: Mon 02 Jan 2023 01:54:51 +0000
ROA not before: Mon 02 Jan 2023 01:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.149.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4b:07:c0:dd:d2:cd:93:0c:b6:7f:49:20:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
Validity
Not Before: Jan 2 01:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9707ae3f77af9e264e2cac0634c4cc5c3e6c400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:d2:e2:d7:29:29:d7:8a:c9:94:23:5e:66:
79:46:8d:75:93:27:1e:4a:3f:c6:53:dc:8c:ac:82:
84:da:00:86:7e:18:21:9f:ba:a9:ff:49:0c:d7:08:
4e:3e:5c:b0:77:83:3d:bb:0b:74:85:56:48:c0:81:
2e:83:a1:d0:98:9d:79:4b:a0:ed:12:cf:13:7a:7a:
78:7e:46:f8:31:df:6b:db:4a:65:0d:f8:c9:f6:2b:
25:26:58:44:0d:7e:8b:a9:b7:db:87:07:49:1d:6d:
cd:01:21:e2:04:e2:ec:fb:98:c4:ba:8e:93:2d:97:
dc:dc:e5:ad:98:94:f4:9e:03:1d:cb:0f:6c:6d:68:
ba:8e:a1:e1:61:f1:02:0b:79:cd:b3:65:15:4e:c0:
bc:cd:22:3d:88:92:76:b1:6c:42:ca:61:a7:88:5b:
a0:11:99:41:27:15:cf:e4:28:8e:bb:90:ca:72:9e:
2b:3d:c7:54:df:96:71:f6:50:85:d5:6e:66:e6:bc:
39:34:ae:aa:7e:3f:33:09:80:a9:b8:d4:84:fd:8d:
61:af:33:8e:c0:eb:7f:2a:31:86:7f:ee:d9:32:5f:
45:11:8e:39:dc:0d:5c:d6:92:33:0e:0c:91:2a:a3:
68:e4:b0:ee:40:d4:1d:76:a1:78:ce:ca:d6:ce:85:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:7A:E3:F7:7A:F9:E2:64:E2:CA:C0:63:4C:4C:C5:C3:E6:C4:00
X509v3 Authority Key Identifier:
keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/yXB64_d6-eJk4srAY0xMxcPmxAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d9:c1:a9:4e:51:ea:f4:3a:da:31:c1:21:05:67:85:4d:95:
e5:9a:fe:f5:81:2c:81:86:40:aa:16:39:e7:fb:27:4e:4d:12:
e0:e7:77:b6:0c:fe:1c:16:7b:d8:78:1c:64:a7:ad:1c:d7:a1:
e3:ce:cb:3a:62:00:77:2c:cf:25:82:86:d3:e8:86:f0:ec:68:
97:d7:35:11:44:29:2e:23:80:d6:d3:41:13:aa:c4:7a:db:b4:
0b:03:17:21:be:aa:60:ae:0b:7a:fe:48:f1:02:38:da:ca:89:
08:59:7b:8f:0a:1c:54:4c:ab:3a:6b:db:6c:c6:00:36:f0:f6:
00:62:78:9d:eb:ea:08:3d:2f:fb:ee:ff:15:32:c8:99:00:70:
f5:6f:c9:5b:63:bf:16:8c:af:75:e9:4c:fc:ba:83:c9:07:54:
25:e9:84:2f:83:73:35:16:51:72:ba:29:b6:de:04:c9:42:4b:
52:09:ea:a2:d3:ea:07:16:2b:a3:c8:9d:31:5b:ec:c6:87:e5:
01:e7:c4:a2:a0:34:60:8a:f7:96:35:48:ee:4c:10:97:9c:b5:
ad:a4:ee:a9:bf:8c:d3:27:4c:e8:74:c2:57:5f:b7:89:69:6e:
af:f3:4b:96:b4:ac:ff:e5:63:e2:0e:59:70:1e:be:eb:88:b0:
df:99:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org