Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/J1GNS6-m3K4iuuppsKDgOocxesg.roa
File: J1GNS6-m3K4iuuppsKDgOocxesg.roa (raw, json)
Hash identifier: n0LIsAKg0ZwN4tYsnjZEFYznH0qTqyKw1sN9acJrXCU=
Subject key identifier: 27:51:8D:4B:AF:A6:DC:AE:22:BA:EA:69:B0:A0:E0:3A:87:31:7A:C8
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 0187C2B827FDF7981DD9BF1D0CF4051A0BF2
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/J1GNS6-m3K4iuuppsKDgOocxesg.roa
Signing time: Thu 27 Apr 2023 12:37:41 +0000
ROA not before: Thu 27 Apr 2023 12:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.156.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:b8:27:fd:f7:98:1d:d9:bf:1d:0c:f4:05:1a:0b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Apr 27 12:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27518d4bafa6dcae22baea69b0a0e03a87317ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:04:ca:8e:97:f3:15:a5:f3:78:eb:20:9d:
35:98:1a:22:d2:0e:77:3a:24:e2:36:eb:3b:db:de:
8c:af:e5:c4:56:b5:9a:fa:16:30:cb:d9:53:81:d5:
22:3d:36:ab:ce:51:25:92:56:c4:fb:93:f8:f4:3b:
09:56:c0:5d:53:b3:ab:f8:9b:f8:ae:28:39:a3:c5:
f8:7c:5a:4a:cb:2c:4e:43:8f:62:39:56:52:f2:e0:
41:2b:41:e7:48:cd:9d:be:12:54:e6:ce:84:ae:72:
3d:2e:97:0a:90:8b:f1:22:20:6e:1a:44:d6:38:42:
ea:4d:f6:a0:55:3d:1b:12:e8:94:e5:0b:04:d3:a4:
cf:f3:59:b0:2e:33:25:10:ae:b0:77:bf:b8:03:38:
7f:bd:d6:a6:9f:0d:ac:a6:3b:06:62:4b:3c:d3:65:
6a:f1:46:04:8b:47:47:07:e0:00:bb:66:b9:e1:f2:
6d:ef:98:ce:62:f7:1a:25:f8:e9:2d:3e:0a:27:c3:
2a:d2:b5:bf:f6:77:64:02:98:7c:7b:29:ee:34:2f:
51:5f:79:23:b5:b4:9d:9c:d5:8e:5c:47:96:df:45:
c9:88:7b:9b:cd:e2:51:f3:67:2f:6d:16:d2:98:fb:
c6:04:ff:2e:bd:83:7d:e9:f9:30:6c:ad:3c:60:aa:
56:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:51:8D:4B:AF:A6:DC:AE:22:BA:EA:69:B0:A0:E0:3A:87:31:7A:C8
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/J1GNS6-m3K4iuuppsKDgOocxesg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:c0:6d:a9:92:4d:c4:17:56:97:b9:ae:24:7c:4e:9f:7a:79:
58:6f:c8:2f:0b:a6:32:6a:02:b9:9b:89:b2:59:11:14:89:d9:
ec:e9:37:9d:88:0a:8e:b4:73:1a:82:88:af:51:00:4f:af:a8:
4a:3f:8c:7e:a2:95:1d:4d:06:80:bc:be:88:99:99:57:89:43:
fa:08:51:b6:20:9f:3d:e6:a9:d3:f2:5e:fb:72:42:e7:77:28:
34:79:13:b3:bd:a7:00:bf:c5:a4:c1:a4:0d:93:a6:c3:f2:e2:
27:e3:b2:bc:3b:12:26:5e:8c:e5:83:3e:d7:a3:b5:11:fd:d3:
95:21:c3:33:36:eb:cd:cb:cd:f4:79:3d:1a:08:95:e9:28:32:
4e:01:0e:0b:ad:05:2c:ef:91:33:5f:ac:45:1a:af:0b:3c:3c:
42:0f:69:f2:d0:e1:4f:69:7d:1c:26:24:8a:8c:58:59:90:da:
b0:d6:69:93:3c:93:08:74:e1:99:c0:21:00:b8:d4:37:d0:7f:
33:d3:9c:ae:ae:36:d3:46:61:f8:3f:01:45:33:dc:38:ff:f7:
a8:2d:e7:46:3b:3c:6c:8f:f5:d4:b8:7f:2b:5d:59:a5:71:32:
5e:b1:d3:f8:93:a2:3d:dc:f7:1c:92:bb:af:2d:3b:7a:50:94:
32:80:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org