Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Q0Gwp7nvGeLZMEzDUe-SLdlq2G4.roa
File: Q0Gwp7nvGeLZMEzDUe-SLdlq2G4.roa (raw, json)
Hash identifier: 8QafwLUsG7wqQNEo3Aio7q74D3PI90oIYvjDn80QWuU=
Subject key identifier: 43:41:B0:A7:B9:EF:19:E2:D9:30:4C:C3:51:EF:92:2D:D9:6A:D8:6E
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 018332DD71DACBC214DD77712DA2078BFFD1
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Q0Gwp7nvGeLZMEzDUe-SLdlq2G4.roa
Signing time: Mon 12 Sep 2022 18:01:56 +0000
ROA not before: Mon 12 Sep 2022 18:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 45.8.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:32:dd:71:da:cb:c2:14:dd:77:71:2d:a2:07:8b:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Sep 12 18:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4341b0a7b9ef19e2d9304cc351ef922dd96ad86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:0f:39:f4:7e:e2:da:60:c2:d8:6d:00:07:
0a:26:b1:fd:1a:c5:d9:cc:de:42:01:4b:0f:15:89:
c9:1e:bc:6a:ed:81:00:5c:80:e1:4a:80:b0:28:ea:
ee:d8:20:97:11:9a:d3:c4:c8:d3:4f:f9:23:f3:cf:
76:e7:d1:d4:a3:0b:f3:1b:22:11:8b:22:5d:67:2a:
d2:a9:3e:2b:0b:46:d4:39:db:b2:15:fb:a5:3e:67:
14:91:4e:b1:e8:7b:9d:bb:a5:15:62:15:dd:d3:67:
fd:be:18:bf:4c:c2:d4:d8:4c:f6:f7:36:1d:cb:58:
22:3c:6c:e5:a5:b2:10:cb:b0:62:06:41:28:f9:f4:
bd:7d:cd:86:2a:d5:41:18:49:66:de:ea:f6:77:e9:
43:f3:54:bb:92:ed:eb:70:47:21:6e:02:11:fa:93:
df:9c:cd:68:bf:0b:d5:f7:41:01:ac:a5:8e:5b:75:
08:ba:41:0d:f5:89:85:54:16:08:15:0b:1e:40:16:
c0:79:fd:1c:81:d2:b8:8a:86:c6:f2:37:fb:80:18:
89:4a:9b:a7:67:18:3a:ab:e8:98:a1:72:38:91:cc:
cc:e3:1b:45:b9:ea:38:aa:bc:63:b1:06:15:e3:f6:
8c:23:2a:d1:1f:8e:68:a1:2e:f7:ee:b8:0b:39:ca:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:B0:A7:B9:EF:19:E2:D9:30:4C:C3:51:EF:92:2D:D9:6A:D8:6E
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Q0Gwp7nvGeLZMEzDUe-SLdlq2G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.219.0/24
Signature Algorithm: sha256WithRSAEncryption
95:94:8e:66:e2:a3:84:86:51:4c:31:cb:6d:8a:1d:a9:c3:d1:
e0:bb:3e:ed:a6:a2:29:18:03:3a:ac:63:ea:fa:91:8e:48:bb:
0c:2d:3d:8f:f8:d6:41:6d:75:7e:59:11:4a:22:5b:d8:8c:ca:
23:1b:49:eb:11:51:b1:64:6b:e5:74:ba:a3:75:6c:88:d5:b3:
b1:f4:32:b8:71:e2:1d:9d:8d:2f:d2:59:23:95:86:12:0e:28:
e5:88:9d:7d:b5:c2:6d:7e:ba:a2:85:9e:67:b1:e8:52:6b:7a:
df:2c:94:3b:36:6a:7e:f2:fb:6c:fa:93:70:42:49:e0:20:35:
53:d5:a4:31:55:50:87:f3:f3:8b:e9:ae:26:c6:f8:43:7e:ba:
6e:be:f8:1a:89:2a:a3:94:b3:fb:58:cf:48:d1:ec:2a:c7:ba:
6d:b5:10:9c:4e:01:9d:d4:5f:3b:09:bb:39:c1:91:f3:8b:4e:
e9:9c:83:1c:74:b6:a8:fa:64:ed:08:95:cf:05:a2:13:11:63:
86:7e:ce:bf:00:fc:9b:bb:e9:61:09:43:1e:1e:fe:4e:b6:5d:
4a:1f:d8:5b:71:5d:ac:64:7b:5e:58:6c:5a:ed:47:4f:a2:90:
f2:19:31:18:ef:cf:b9:e8:3c:eb:6a:0b:ab:5d:c7:2c:1d:65:
0c:70:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:55 2024 by rpki-client on console-ams.rpki-client.org