Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/b9gv9iCbOomTtUCQCnufWWFVSJs.roa
File: b9gv9iCbOomTtUCQCnufWWFVSJs.roa (raw, json)
Hash identifier: nGTUhHV44N981rqD4jp55zB+TGGixaywH6kuW1Ql3Pg=
Subject key identifier: 6F:D8:2F:F6:20:9B:3A:89:93:B5:40:90:0A:7B:9F:59:61:55:48:9B
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 01856EC1F1A1954DFA70FC30CB473A96ED83
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/b9gv9iCbOomTtUCQCnufWWFVSJs.roa
Signing time: Sun 01 Jan 2023 19:14:42 +0000
ROA not before: Sun 01 Jan 2023 19:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14315
IP address blocks: 45.155.226.0/24 maxlen: 24
45.155.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f1:a1:95:4d:fa:70:fc:30:cb:47:3a:96:ed:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 19:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fd82ff6209b3a8993b540900a7b9f596155489b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a6:42:ce:58:25:c8:c4:bb:7a:c7:d0:a9:40:
61:d3:2b:d6:83:34:cf:b2:a1:19:22:0d:1e:2f:20:
56:f2:b2:ed:3d:60:4b:9f:8d:6c:44:e0:92:3e:40:
6e:53:62:13:5b:3d:d9:c6:3f:70:e4:08:9a:ed:f9:
b7:c5:5e:fd:95:22:36:90:64:3f:00:57:dd:5a:c1:
0a:85:d5:38:2f:74:43:72:a4:fe:16:89:92:c3:e5:
31:90:08:31:e9:e9:e1:44:d4:36:b5:13:81:5e:c8:
34:a1:84:2d:90:94:32:0e:cc:96:c3:41:96:8c:e2:
1c:ed:27:41:c1:56:51:8c:a7:ff:b1:41:29:30:b3:
c7:1d:f7:7a:dd:a8:7c:61:30:d6:c9:81:ff:15:12:
0c:4f:b5:d8:9c:02:66:56:9b:d8:f6:a4:b4:5b:49:
d9:4a:5e:d8:b5:53:b3:88:0f:28:d1:16:b6:4c:1b:
c3:85:61:22:10:cc:01:78:3a:e2:7e:a3:03:aa:02:
9b:c1:41:68:2c:44:42:d2:f6:9d:4b:4a:0e:3c:77:
68:b9:6e:b0:f5:3d:23:d7:28:58:b8:42:5d:a1:38:
cc:bc:a5:0c:1f:d2:83:8a:5e:6a:e7:51:82:e1:96:
5e:87:9b:42:11:9b:34:3f:43:ae:90:64:ca:6d:e0:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:2F:F6:20:9B:3A:89:93:B5:40:90:0A:7B:9F:59:61:55:48:9B
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/b9gv9iCbOomTtUCQCnufWWFVSJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.224.0/24
45.155.226.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4f:09:67:97:85:49:c6:40:0f:2e:03:dd:b5:62:1a:94:10:
6d:75:59:31:b7:15:7a:4b:a8:b9:e6:ec:eb:71:32:a6:74:43:
53:b8:1e:75:04:54:54:e7:09:97:65:65:91:71:52:b4:f2:3e:
cf:4b:5a:d9:db:57:83:1f:50:81:41:ee:1d:06:12:ef:21:ab:
73:09:67:24:ac:19:79:4f:be:09:2e:6d:f2:66:f8:54:14:25:
46:cf:36:58:a1:c5:1d:c6:67:92:8b:a5:c1:90:e3:a5:65:66:
b1:f9:f0:ae:b8:96:08:1a:ed:b6:1d:b7:e8:bc:ad:40:6c:47:
de:0c:ea:e6:02:5a:9d:2e:58:5c:8d:c6:ee:e5:e8:f1:10:c2:
76:97:7a:95:21:cb:b3:55:9c:f4:d1:71:a2:10:8b:54:e5:cd:
ba:98:cd:32:7e:79:ff:54:04:a2:ba:f3:66:f9:2e:e5:4b:33:
5f:7d:09:8b:7b:29:a0:8e:20:78:c1:a3:9f:ee:2e:09:20:ab:
bf:78:7f:b5:f3:a2:95:7b:a1:b1:8a:20:81:7c:f5:5a:9f:c8:
c3:71:52:42:12:21:fc:1a:3a:1d:7f:66:ab:f0:71:2b:43:35:
6b:11:40:b1:bf:f3:87:db:7a:6f:ff:df:92:59:71:ee:99:2f:
b1:04:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:10 2024 by rpki-client on console-fra.rpki-client.org