Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/D_St0kJ3CIWleOCvmBz0SfM87As.roa
File: D_St0kJ3CIWleOCvmBz0SfM87As.roa (raw, json)
Hash identifier: xDM7iKHgYLWjQyWrGp0UgOACq3QVNBuBnYyJvrTckhk=
Subject key identifier: 0F:F4:AD:D2:42:77:08:85:A5:78:E0:AF:98:1C:F4:49:F3:3C:EC:0B
Certificate issuer: /CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Certificate serial: 07A0E300
Authority key identifier: 4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/D_St0kJ3CIWleOCvmBz0SfM87As.roa
Signing time: Sat 01 Jan 2022 15:06:52 +0000
ROA not before: Sat 01 Jan 2022 15:06:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 45.142.112.0/23 maxlen: 23
45.142.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127984384 (0x7a0e300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7209f8b7ed4fa9bfb278880c29f98d6a96b63c
Validity
Not Before: Jan 1 15:06:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ff4add242770885a578e0af981cf449f33cec0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:07:59:4e:51:41:57:d8:b8:1d:ef:13:05:
68:f5:9d:a3:d8:df:3f:68:07:e5:09:ed:41:1f:7b:
5b:5d:05:26:37:30:53:59:7b:b8:54:f7:24:29:16:
53:cf:a9:0a:15:f2:dc:f5:76:02:fe:ad:e7:ca:92:
15:94:6f:7d:40:10:90:fa:10:c2:62:03:9c:e2:06:
ae:30:4d:60:b0:5a:ca:0a:29:41:ec:03:2a:bb:ac:
e0:a5:cd:68:1f:d9:8b:c7:cb:2b:07:06:1b:38:45:
06:08:17:67:d3:18:0a:82:cd:f5:9e:24:dc:df:a3:
f5:57:70:b7:b1:c5:ed:31:a1:f4:de:61:5c:7a:6a:
73:c8:0c:ee:18:39:31:4c:66:03:58:52:6a:91:5c:
ca:4f:18:a1:8e:3d:28:43:f0:ad:76:16:9a:e7:77:
8b:cb:dc:b1:5e:bc:e5:a6:20:86:d8:e0:12:18:a0:
59:9e:43:2a:03:e2:11:84:64:71:ec:a3:25:d5:35:
1d:73:f4:a3:6f:f8:1e:19:b5:67:d1:7b:70:83:0b:
0e:f6:71:0c:2e:53:58:d5:f2:1e:2d:52:6b:f4:49:
f3:2f:8c:84:e7:19:1e:5b:2c:a1:68:0a:db:2a:5c:
9a:c8:00:90:74:53:8b:51:5b:14:f3:5d:3e:e6:ec:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:AD:D2:42:77:08:85:A5:78:E0:AF:98:1C:F4:49:F3:3C:EC:0B
X509v3 Authority Key Identifier:
keyid:4A:72:09:F8:B7:ED:4F:A9:BF:B2:78:88:0C:29:F9:8D:6A:96:B6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnIJ-LftT6m_sniIDCn5jWqWtjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/D_St0kJ3CIWleOCvmBz0SfM87As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/46d595-9b69-48bd-bd01-c240c9afd149/1/SnIJ-LftT6m_sniIDCn5jWqWtjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.112.0/22
Signature Algorithm: sha256WithRSAEncryption
24:47:75:8d:c5:9f:83:f3:af:8b:c5:be:55:d4:23:59:58:70:
f9:91:23:24:58:82:1f:e5:48:2c:c2:18:d4:27:a2:c4:47:68:
93:f7:c3:46:82:6a:da:26:f4:1c:11:be:52:8c:52:70:cd:3e:
34:b8:4e:b9:78:44:6b:1d:94:8d:49:3c:81:86:45:62:5d:37:
74:07:01:c8:c1:f7:b2:89:46:c0:00:9f:1f:ac:dd:56:fc:ed:
67:ec:76:6a:63:bb:89:d6:56:95:20:bd:b6:74:39:f4:a7:4c:
ab:e0:ea:f5:b7:6f:26:71:5b:79:c1:79:a9:3e:ab:8b:a8:5c:
60:52:fe:1b:42:ec:f5:6e:35:45:e2:74:41:90:67:5b:7c:c5:
36:bd:3a:83:52:2c:07:cd:93:12:b8:79:de:d6:fb:4b:eb:6b:
59:eb:18:02:e3:66:6e:e3:67:ea:ba:df:40:46:1f:91:77:e4:
42:87:b3:55:a3:9d:a5:b2:4d:75:1b:ad:92:ef:3b:a9:70:af:
f6:f8:2e:22:6c:67:37:bc:31:21:79:a7:64:cd:8f:b1:9c:1a:
54:82:34:98:7f:5d:de:f5:97:09:09:41:6f:be:58:ef:2a:e6:
c8:61:c1:62:e8:d5:4a:5b:9c:25:ef:03:e0:22:7c:83:a5:f2:
bd:1e:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org