Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/DudJCPfEHCtASo3S5QL_npdKSFw.roa
File: DudJCPfEHCtASo3S5QL_npdKSFw.roa (raw, json)
Hash identifier: bIe0lH+DFX/EAtBP6KAbcoI0At0G3R5s4QVPOsJYYZE=
Subject key identifier: 0E:E7:49:08:F7:C4:1C:2B:40:4A:8D:D2:E5:02:FF:9E:97:4A:48:5C
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 0183C29916CAFD52F4C35C421B583D8D9C86
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/DudJCPfEHCtASo3S5QL_npdKSFw.roa
Signing time: Mon 10 Oct 2022 15:52:36 +0000
ROA not before: Mon 10 Oct 2022 15:52:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205431
IP address blocks: 45.8.217.0/24 maxlen: 24
45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c2:99:16:ca:fd:52:f4:c3:5c:42:1b:58:3d:8d:9c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Oct 10 15:52:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ee74908f7c41c2b404a8dd2e502ff9e974a485c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:75:0f:3d:82:23:3f:7e:74:24:f8:cc:33:
c0:33:3c:c8:18:15:9d:84:28:70:ed:3c:bc:36:28:
c9:71:00:7a:3b:3d:d8:da:6b:24:6a:57:d4:70:36:
c8:93:f3:cf:22:d0:ba:c8:17:f3:36:fc:7d:63:00:
67:d0:48:d9:45:21:a0:1d:96:c9:e2:e0:2d:61:92:
f4:04:ce:67:a9:e0:42:9f:7b:70:fa:2a:cc:02:8e:
14:f1:e3:50:e0:e1:10:79:78:a2:04:1a:a8:4c:70:
ea:f7:ec:06:74:16:7a:01:49:a4:96:79:f9:38:9f:
f1:2c:14:78:3e:08:1e:3a:c3:6a:d2:b5:97:16:1a:
b1:b0:d0:2a:c1:ba:94:47:6c:8b:bd:99:04:f8:49:
57:20:06:2b:b4:51:bd:65:a2:46:e1:07:d7:17:55:
db:ce:4a:b4:33:a9:17:c6:0c:d9:39:ce:61:6d:be:
f5:6d:b1:40:ec:8c:a2:d7:37:bb:60:8a:63:db:b7:
74:a4:7e:9c:7c:01:77:5c:17:b6:7a:0d:38:6a:69:
36:ec:3d:27:e9:c3:ae:ed:85:6c:af:84:df:84:f8:
f7:ee:0f:17:d6:de:27:d5:31:85:9c:3d:7a:bd:6d:
04:30:94:4b:c3:39:b7:b6:0e:46:16:9a:ff:9a:f5:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:49:08:F7:C4:1C:2B:40:4A:8D:D2:E5:02:FF:9E:97:4A:48:5C
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/DudJCPfEHCtASo3S5QL_npdKSFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.217.0/24
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
84:23:91:32:39:59:b9:26:2c:cf:0f:9f:e3:5b:00:f7:fc:20:
15:77:9d:d3:48:cd:60:04:0b:5a:3e:5c:7f:4e:37:72:60:36:
1d:bc:65:8e:f5:0e:d8:61:7b:2a:22:a4:04:d2:dd:f3:29:67:
c1:b3:b9:c8:95:4b:29:ff:4b:87:0f:b8:a8:ec:23:8d:92:22:
10:f7:8d:4f:11:91:3f:4c:54:bc:83:ff:d1:1f:d4:b1:43:77:
02:9b:9c:41:e4:ac:b9:15:e7:dc:c9:f8:34:d4:c4:42:38:e0:
ce:64:4f:36:b6:58:63:8f:12:d1:13:c2:61:85:19:c4:95:42:
d2:15:d7:e3:4b:15:1a:2f:9b:66:74:34:bf:79:1d:b5:80:6f:
1c:6a:6a:0a:3b:c5:dc:45:df:ca:84:75:f7:aa:39:93:01:cb:
7f:27:d0:d4:b0:cf:d5:0f:71:25:e8:85:65:16:36:3f:db:5e:
01:5f:e6:25:78:78:f5:2c:a1:8b:22:60:f0:df:25:25:6e:f5:
42:48:be:e2:01:c2:8b:52:80:b8:ab:2f:c2:f1:d7:2b:cd:ee:
82:da:3b:88:b8:6a:8b:6f:f9:cc:8e:89:a9:e3:3f:08:9c:57:
59:9d:14:48:04:bf:ab:45:6b:4a:ab:54:26:31:00:90:56:5f:
3e:80:9a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:42 2024 by rpki-client on console-fra.rpki-client.org