Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/Y66BHrsa3HtD97xlQRxi7b9e4PQ.roa
File: Y66BHrsa3HtD97xlQRxi7b9e4PQ.roa (raw, json)
Hash identifier: wc+bQcCv62zgBIhPqqtnUWUY5hTGztwF06NI7LN6Mtk=
Subject key identifier: 63:AE:81:1E:BB:1A:DC:7B:43:F7:BC:65:41:1C:62:ED:BF:5E:E0:F4
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 018BB4A1FED8F8780CB5AB76438BE0EBEA57
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/Y66BHrsa3HtD97xlQRxi7b9e4PQ.roa
Signing time: Thu 09 Nov 2023 15:09:57 +0000
ROA not before: Thu 09 Nov 2023 15:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.156.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:a1:fe:d8:f8:78:0c:b5:ab:76:43:8b:e0:eb:ea:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Nov 9 15:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ae811ebb1adc7b43f7bc65411c62edbf5ee0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:54:c3:c4:96:4d:f2:84:a4:a2:c9:d3:4c:25:
34:e6:56:80:07:4f:cf:af:7a:1f:da:cd:55:82:d5:
a8:82:33:a9:d1:87:ee:2f:fb:21:d3:da:85:75:1f:
6b:eb:4c:a8:13:ef:c4:06:1d:df:2d:a1:a2:49:62:
10:0e:5a:f3:e8:6c:af:2a:c7:19:3c:24:d0:fb:25:
f7:89:74:0b:d3:13:41:c8:d7:f9:6b:97:ad:3d:21:
e7:87:43:6c:e8:f0:f2:25:2b:50:8b:9f:a2:27:e1:
f2:a8:e3:e0:99:92:05:42:42:05:23:0f:2a:cf:2d:
d3:00:57:a6:78:1f:6e:2d:87:c7:fa:f6:56:f8:49:
a5:1b:7e:e3:c9:de:40:b3:3f:02:ef:d8:b2:06:0c:
5c:a9:c9:bd:df:82:8b:d9:f9:62:26:84:4c:dc:33:
32:ca:62:ac:df:cb:2f:a5:10:b8:06:14:da:81:16:
a9:e6:82:e7:4e:9c:d9:bd:fd:b3:57:ab:c4:e4:5e:
86:c0:00:29:cc:c5:b5:79:14:41:2e:b9:4e:a8:a9:
e3:24:a1:c0:6c:c7:a7:40:58:14:5f:8e:51:90:9d:
ab:5e:43:47:cf:71:e2:8f:11:e9:8f:c3:84:9a:24:
40:46:0c:68:fb:5c:c3:3a:9a:25:27:6e:4d:29:46:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AE:81:1E:BB:1A:DC:7B:43:F7:BC:65:41:1C:62:ED:BF:5E:E0:F4
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/Y66BHrsa3HtD97xlQRxi7b9e4PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:27:a1:d8:20:b2:37:df:65:a9:80:d5:a6:d4:89:16:dd:14:
ac:54:39:44:5f:85:ad:00:b3:f9:94:36:c9:94:9b:24:e9:13:
95:aa:b1:2e:fb:29:68:b1:3a:53:b4:a3:b3:4d:8f:53:d0:c5:
fc:38:26:7f:28:bf:0a:30:3f:a1:48:99:4c:0f:64:53:0a:ab:
cb:2d:3f:16:f9:ad:c9:3a:e8:a1:87:3d:f2:27:33:7c:d2:cf:
39:61:05:94:8b:df:19:6d:ba:46:81:43:53:e8:80:54:82:7a:
0e:46:8e:57:f3:77:55:fa:9c:96:26:65:5c:37:a3:38:8d:e6:
98:04:85:b8:34:05:91:8b:36:f3:f0:75:c8:a3:59:d2:01:38:
16:99:e2:ed:2a:26:9f:de:c5:2a:2b:4f:64:8b:4a:f6:14:fe:
ac:92:72:a4:dd:0f:24:74:a8:3b:90:ee:7a:be:de:b7:de:68:
b7:a9:df:09:6e:18:c6:9a:5c:a6:4e:61:ed:c9:01:44:91:78:
f9:8c:8d:45:29:c1:f0:89:1c:bf:5b:fb:60:ff:79:80:a1:ff:
06:56:23:ff:e8:08:03:db:dc:fe:58:bd:1b:0f:69:e7:83:33:
f8:a5:a6:c8:bf:3a:ea:88:d9:c5:8a:39:1b:d6:fa:76:2a:86:
a7:c5:e9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:37 2024 by rpki-client on console-ams.rpki-client.org