Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/iFNaYGUOSCk7fC7cieuXUicJ72o.roa
File: iFNaYGUOSCk7fC7cieuXUicJ72o.roa (raw, json)
Hash identifier: oh5+NxtHYWOT9Zc4t54aWDPFJiJTyY16H+simoGnff8=
Subject key identifier: 88:53:5A:60:65:0E:48:29:3B:7C:2E:DC:89:EB:97:52:27:09:EF:6A
Certificate issuer: /CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
Certificate serial: 01856F66D5E38C8484934E3EEA9392C790AA
Authority key identifier: 9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/iFNaYGUOSCk7fC7cieuXUicJ72o.roa
Signing time: Sun 01 Jan 2023 22:14:48 +0000
ROA not before: Sun 01 Jan 2023 22:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 45.86.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:d5:e3:8c:84:84:93:4e:3e:ea:93:92:c7:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
Validity
Not Before: Jan 1 22:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88535a60650e48293b7c2edc89eb97522709ef6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:59:43:f9:3b:6e:e8:51:c8:ca:9c:51:39:
f6:0e:60:94:7f:08:66:a3:81:ea:28:74:8e:37:68:
14:40:a7:c7:09:59:78:b2:ff:fb:1f:a6:a8:ff:cf:
d1:5b:59:d4:2e:7a:9c:b4:cd:98:d4:38:49:a5:bf:
d7:31:e5:e5:11:bc:d0:33:df:4f:64:2e:cf:ee:e9:
80:b7:a5:4e:ec:fd:d5:35:a1:0a:af:f6:92:42:02:
b0:3e:c7:fb:ca:23:f5:07:12:3c:db:74:d5:0a:33:
02:e1:7e:ff:a1:eb:ea:f7:1f:c0:21:78:ff:cb:55:
b5:94:16:a1:24:c3:93:fd:df:30:1c:19:ae:c8:49:
56:1d:92:a8:53:ee:60:bd:ce:b0:4d:7c:78:37:7c:
27:06:5c:f5:12:82:93:5c:c5:d8:2e:dd:66:65:01:
ac:a2:e9:c7:df:d5:b2:dd:ff:56:95:61:7f:f5:03:
4f:93:8c:4b:50:51:43:e5:e0:f3:09:c5:3c:2a:e3:
87:45:87:cd:a9:18:86:2d:d2:92:7e:18:03:c1:d4:
07:08:ef:6f:a7:3f:3d:a6:bd:ef:62:b1:16:8c:56:
08:7d:67:02:93:3a:90:c8:67:8a:c8:ce:42:05:ff:
5c:82:c6:75:df:f3:bf:39:57:2c:dc:8c:1e:b6:c8:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:5A:60:65:0E:48:29:3B:7C:2E:DC:89:EB:97:52:27:09:EF:6A
X509v3 Authority Key Identifier:
keyid:9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/iFNaYGUOSCk7fC7cieuXUicJ72o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.84.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7a:85:53:39:fa:c0:f6:32:fd:db:73:5f:ae:87:1a:29:bf:
2d:b9:c6:4f:45:a4:25:b5:18:e9:2a:f3:b2:0f:41:bb:a1:dd:
bc:f0:95:29:f4:f5:35:dc:e6:75:e4:d4:8a:42:8c:bb:45:99:
92:3e:aa:a0:80:2a:6b:57:7f:04:75:56:e3:3c:17:15:78:57:
04:39:09:24:8d:7a:31:72:6b:49:4f:54:74:2b:8a:83:98:51:
be:99:cd:bd:7e:1d:60:fa:02:db:22:20:de:9c:96:83:88:48:
7d:79:f0:7d:a5:2c:61:58:a5:5e:75:63:e9:9a:43:ec:2a:8e:
b8:1a:86:27:41:72:1b:82:1f:a6:97:0f:cf:bf:6c:c2:e8:ba:
1a:b7:77:15:55:64:04:f5:0a:d6:fb:65:23:67:13:c8:8d:fa:
93:85:da:97:eb:1c:db:96:97:c8:59:c7:c5:9b:aa:6a:95:53:
6a:88:6d:8b:33:0c:5b:17:0f:81:33:88:7b:83:8e:a2:87:73:
23:fd:97:b2:4b:c5:0f:9f:7c:bc:f9:fa:e3:ca:2b:7b:25:9e:
04:fb:39:83:9c:e8:e7:d6:b6:0f:57:53:6b:c5:b5:01:ed:4b:
f8:5f:28:29:05:9f:4a:d3:8d:5a:ff:e9:56:bd:1b:47:82:b3:
41:bd:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 19 11:56:18 2023 by rpki-client on console-ams.rpki-client.org