Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/sW3ty0BBRFQ1LPKVc-ALZBoQkcQ.roa
File: sW3ty0BBRFQ1LPKVc-ALZBoQkcQ.roa (raw, json)
Hash identifier: InJREFlmAXsyqzUTngfHhUw/ZRhN4nlZWiSeJUxTz+M=
Subject key identifier: B1:6D:ED:CB:40:41:44:54:35:2C:F2:95:73:E0:0B:64:1A:10:91:C4
Certificate issuer: /CN=dee4e6b18f4205a1a15470df2148a81c63566363
Certificate serial: 01857082C881FC6079C689091B66BDEDCB18
Authority key identifier: DE:E4:E6:B1:8F:42:05:A1:A1:54:70:DF:21:48:A8:1C:63:56:63:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uTmsY9CBaGhVHDfIUioHGNWY2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/sW3ty0BBRFQ1LPKVc-ALZBoQkcQ.roa
Signing time: Mon 02 Jan 2023 03:24:57 +0000
ROA not before: Mon 02 Jan 2023 03:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35421
IP address blocks: 45.9.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c8:81:fc:60:79:c6:89:09:1b:66:bd:ed:cb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee4e6b18f4205a1a15470df2148a81c63566363
Validity
Not Before: Jan 2 03:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b16dedcb40414454352cf29573e00b641a1091c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:65:58:65:3c:a5:7e:49:69:dc:4e:ce:71:
f2:d9:9e:59:a7:8b:25:84:eb:8b:cd:3e:f5:a9:08:
2b:c8:c0:de:6a:c8:d5:7b:bc:7c:17:1f:73:ca:f5:
b9:d4:c3:cf:67:0d:9d:27:3e:5b:21:ca:fd:e8:5d:
c0:d3:e1:28:0d:95:88:03:ae:69:7b:a9:cd:a3:4e:
3c:fb:e3:7c:92:8b:37:a3:fb:4c:8c:83:e6:c7:cd:
ba:54:c8:c7:46:56:47:92:fe:32:a7:54:96:e9:51:
97:95:e5:59:05:15:5a:48:27:19:ed:2f:ca:35:7c:
43:b1:33:da:29:2b:53:b9:11:f2:90:81:6f:f1:72:
ec:bc:4a:bc:bc:9f:2e:71:83:07:bb:f3:57:14:d3:
4b:5a:f9:ca:62:6d:80:46:31:cd:bc:18:90:60:8a:
c9:ac:53:df:60:82:23:fd:4a:ef:de:2e:14:d8:f2:
d4:3e:c3:ea:80:32:dd:32:27:56:46:9e:af:73:27:
e8:df:b4:fe:03:d2:58:11:dd:f4:01:99:77:b4:ce:
05:a5:d2:00:bc:a1:90:6c:69:00:af:38:46:54:82:
e7:b0:ab:b4:e0:45:0e:9b:18:d6:8d:30:60:ff:e1:
89:20:1b:e8:2d:f8:a4:07:9e:a8:0f:58:77:74:35:
0c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6D:ED:CB:40:41:44:54:35:2C:F2:95:73:E0:0B:64:1A:10:91:C4
X509v3 Authority Key Identifier:
keyid:DE:E4:E6:B1:8F:42:05:A1:A1:54:70:DF:21:48:A8:1C:63:56:63:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uTmsY9CBaGhVHDfIUioHGNWY2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/sW3ty0BBRFQ1LPKVc-ALZBoQkcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/814a4a-bc5e-4ebf-abb8-2f491c664109/1/3uTmsY9CBaGhVHDfIUioHGNWY2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.56.0/22
Signature Algorithm: sha256WithRSAEncryption
55:4b:35:a3:41:f6:7a:38:7b:20:74:3c:0c:b7:d4:e9:52:97:
d2:72:53:fe:b7:bd:13:25:7b:35:71:6d:59:14:5b:04:0d:1c:
97:5a:8b:e4:34:cb:de:b5:d5:26:8c:02:fa:e9:53:78:fc:3f:
9e:43:9c:94:50:76:ce:6a:62:84:69:db:53:fb:ec:0a:a5:62:
b9:a7:80:6e:87:ce:ab:88:b6:81:59:a2:ce:4a:1d:07:c2:7c:
4c:50:5d:de:a1:a7:8e:56:a0:dc:15:48:6c:68:da:e5:d0:a1:
29:72:69:9b:3a:45:8e:02:ec:52:3b:c4:ad:22:f2:fd:2c:a8:
e6:b8:85:9b:d7:1b:69:83:55:7e:68:a5:27:ba:a4:7c:6e:d3:
00:f5:ed:3e:45:3a:4e:17:8d:9f:8e:28:55:21:41:fa:c1:95:
8d:15:96:1c:8c:2e:e1:e7:18:da:03:7d:88:78:63:ad:d3:df:
b0:5e:b8:9c:4a:db:33:b4:7d:c3:ec:11:a9:fb:c6:0a:7e:7c:
b0:9d:f2:11:6d:49:8d:4e:77:dc:9a:4e:ec:18:1e:59:00:c8:
9d:41:93:53:c9:5a:8a:6f:e6:6c:89:3e:d4:a4:3f:85:88:1b:
8e:7b:a6:db:5f:49:2a:7c:a0:58:48:64:59:cc:ff:01:4d:17:
43:74:de:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 12:50:43 2023 by rpki-client on console-fra.rpki-client.org