Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/1-fC2Zh7jPDbPyEX_S_lvSGHzvIY.roa
File: 1-fC2Zh7jPDbPyEX_S_lvSGHzvIY.roa (raw, json)
Hash identifier: ngx/Q7LdRUULQirBnWxFnu2VYf/OEwwD5IuWJCXlZkY=
Subject key identifier: F9:F0:B6:66:1E:E3:3C:36:CF:C8:45:FF:4B:F9:6F:48:61:F3:BC:86
Certificate issuer: /CN=d3202774b7de641d8ea18be56a75ff6098747618
Certificate serial: 01856EB9092C611D63CBC1A412894B4FD591
Authority key identifier: D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/1-fC2Zh7jPDbPyEX_S_lvSGHzvIY.roa
Signing time: Sun 01 Jan 2023 19:04:58 +0000
ROA not before: Sun 01 Jan 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
109.95.124.0/22 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:09:2c:61:1d:63:cb:c1:a4:12:89:4b:4f:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3202774b7de641d8ea18be56a75ff6098747618
Validity
Not Before: Jan 1 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f0b6661ee33c36cfc845ff4bf96f4861f3bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:46:d6:20:37:70:08:32:3a:e0:7f:9d:67:
3a:98:f1:e8:a2:57:3f:b9:71:7e:ea:8f:9e:ab:86:
ac:a9:36:86:af:82:a0:a8:d5:3d:2f:5f:66:8a:65:
0d:0c:8e:c8:8a:bc:41:41:63:86:f5:c0:af:d9:bc:
cd:36:59:9d:92:8a:e2:f3:4f:09:c6:f7:cb:14:ed:
fc:6e:32:62:2b:f2:5a:51:27:6e:4d:a2:19:7e:34:
1a:9f:6d:39:82:67:f5:f9:8e:ff:1d:e6:65:ab:c7:
d8:93:e0:79:a4:1f:d2:8f:29:24:b4:f5:92:fe:5f:
5c:95:0c:8f:e2:93:47:55:9b:d9:8c:90:5f:52:99:
42:dc:6d:02:fc:e2:1b:b6:4d:59:88:05:4f:bd:24:
e1:3d:8b:ff:e4:5a:9e:5c:b0:bd:f4:76:a5:f5:39:
92:53:f0:5c:6f:09:79:af:c7:90:6a:db:65:2f:dc:
46:b9:b2:c5:a8:6a:aa:49:f0:61:97:1f:99:00:f6:
10:a8:d2:2f:40:e6:93:0c:57:9e:9a:76:ad:48:76:
1e:4e:0f:c6:13:fb:02:50:13:b8:56:d5:a3:f7:30:
ce:57:51:55:f0:90:3a:0f:d1:bd:88:bf:45:aa:74:
a4:91:77:88:2c:9c:d4:32:8b:9f:12:8f:ed:46:f3:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:B6:66:1E:E3:3C:36:CF:C8:45:FF:4B:F9:6F:48:61:F3:BC:86
X509v3 Authority Key Identifier:
keyid:D3:20:27:74:B7:DE:64:1D:8E:A1:8B:E5:6A:75:FF:60:98:74:76:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yAndLfeZB2OoYvlanX_YJh0dhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/1-fC2Zh7jPDbPyEX_S_lvSGHzvIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cb4b6b-18aa-4e2c-a405-e7e77b6fac1e/1/0yAndLfeZB2OoYvlanX_YJh0dhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
74:f5:12:5b:56:37:c1:51:5b:d0:78:e2:72:b9:4d:df:63:41:
c9:07:34:1d:b3:59:17:40:59:02:51:4e:41:5d:53:c3:5e:c6:
3c:e9:b4:12:16:d6:f8:56:ee:5d:4d:aa:28:85:d8:f7:56:a4:
51:53:d6:3e:55:fd:52:fb:2f:6b:e2:b0:36:71:26:a6:d0:c6:
1b:0e:0f:8b:3f:15:50:f8:f6:4f:6f:d1:77:60:43:5f:2b:90:
20:06:66:5c:8e:b9:d1:ad:99:d3:a8:b5:33:39:ac:24:5d:28:
d6:64:3d:bd:72:5b:59:85:01:90:04:be:01:cd:f8:70:b1:0e:
fd:4c:8f:15:69:52:2d:55:f1:ed:38:82:5b:a5:d2:f1:d5:eb:
1c:cd:60:0c:32:9b:87:04:0d:c8:7a:3e:ba:40:2e:9e:4e:ac:
b5:aa:d9:5d:71:2d:d4:55:07:aa:d3:4a:bb:1e:d0:bf:de:f5:
44:0f:2e:ba:af:cd:e5:04:fa:1c:a8:d7:db:29:32:f2:08:99:
b7:8b:6e:b1:9a:50:34:64:5f:1b:5f:f8:1b:fb:d0:74:81:a5:
d6:1b:7a:44:58:84:65:55:5d:69:56:15:b8:ff:61:d8:2f:16:
90:61:1d:3d:7a:18:71:1d:fd:9f:a1:1c:0b:fa:f7:74:ca:b1:
7b:33:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org