Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/YTG2vHdbDkp3JJsKphpxIrxKzFo.roa
File: YTG2vHdbDkp3JJsKphpxIrxKzFo.roa (raw, json)
Hash identifier: ZODNAoUvaZ7dBKwij5xeBVEerD8sWYPTLjTuEdHsCVE=
Subject key identifier: 61:31:B6:BC:77:5B:0E:4A:77:24:9B:0A:A6:1A:71:22:BC:4A:CC:5A
Certificate issuer: /CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
Certificate serial: 0182E9B3B9667933DAF9AD88754A280CB4DD
Authority key identifier: AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/YTG2vHdbDkp3JJsKphpxIrxKzFo.roa
Signing time: Mon 29 Aug 2022 13:04:05 +0000
ROA not before: Mon 29 Aug 2022 13:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.149.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e9:b3:b9:66:79:33:da:f9:ad:88:75:4a:28:0c:b4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4d602e30b9806c8479c87b2f5b4cd92d4784f2
Validity
Not Before: Aug 29 13:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6131b6bc775b0e4a77249b0aa61a7122bc4acc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8c:2c:53:6b:f9:a8:43:92:c9:a8:98:55:c7:
39:0e:38:a8:25:18:6d:de:fd:95:e8:d8:28:50:2a:
46:cf:59:45:15:83:63:17:b7:98:dc:21:ef:0b:c9:
e9:a5:1d:ea:2c:8f:43:fd:8b:17:9f:74:71:ea:7c:
dd:83:78:48:f0:78:68:8b:6a:95:dd:a9:70:1c:f0:
da:f2:4e:39:03:1e:6c:a2:3e:e8:bb:ec:7e:76:4e:
a6:ee:50:98:52:b9:cd:92:0d:40:a0:89:e9:bc:b9:
c0:6e:5e:8b:9d:9a:55:9b:c7:4d:fd:8d:eb:69:41:
33:4c:7e:c3:89:2e:3d:3e:5c:82:60:ea:66:fd:6d:
a9:0b:d6:7f:89:3f:99:46:5d:06:14:a8:95:87:fb:
70:1b:ea:a1:2b:99:2d:95:53:7b:bf:cf:50:ff:cd:
86:2a:4a:f1:24:97:ed:41:58:37:a4:df:5f:f6:ea:
c6:6a:f3:df:51:26:64:c0:53:84:93:45:fe:6e:63:
cb:bf:42:70:24:5c:ca:c0:98:5b:02:08:48:65:82:
31:44:d3:66:c0:19:87:c8:0d:9c:a9:75:96:f3:ae:
f5:6e:c4:ef:58:cc:d0:c4:12:4e:81:15:46:25:08:
ab:ca:ac:ff:65:7d:52:59:08:bc:b4:0d:df:2d:af:
2e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:31:B6:BC:77:5B:0E:4A:77:24:9B:0A:A6:1A:71:22:BC:4A:CC:5A
X509v3 Authority Key Identifier:
keyid:AC:4D:60:2E:30:B9:80:6C:84:79:C8:7B:2F:5B:4C:D9:2D:47:84:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE1gLjC5gGyEech7L1tM2S1HhPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/YTG2vHdbDkp3JJsKphpxIrxKzFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/17a10d-c8b8-459e-b70a-7530c3af4c26/1/rE1gLjC5gGyEech7L1tM2S1HhPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
Signature Algorithm: sha256WithRSAEncryption
41:08:de:2e:9f:0d:be:b3:7d:f7:62:c4:98:bf:e4:8a:e8:f4:
a1:6e:80:dc:fd:2c:24:e1:24:97:a4:e3:49:f3:93:c9:d2:22:
c3:93:1b:aa:51:99:a6:88:d4:e4:5c:c7:00:c9:c6:f4:b8:5c:
b0:fd:e0:5e:a9:8a:25:94:1e:86:a8:40:1e:d8:85:63:7e:c3:
92:f4:f7:85:fa:ec:ce:ec:da:6c:0e:3a:30:30:4a:6d:a8:f3:
25:0e:ff:c8:09:46:7b:12:6b:06:d9:b0:b6:9c:2a:d0:91:e7:
23:b8:72:f2:0a:8e:f1:9c:09:46:bd:28:56:43:54:00:d6:6e:
48:d4:31:96:a6:8d:62:7a:9e:0a:fe:e2:bb:f3:63:c7:b9:89:
43:af:35:34:c3:c1:be:c6:3f:e5:44:9c:d3:d2:b5:42:9c:63:
a9:a3:9d:e3:58:ae:c3:44:fe:07:f2:ba:74:81:4e:de:ac:b9:
38:d7:1b:5a:22:d2:cf:c4:73:ba:5a:17:89:96:77:ed:49:3b:
f7:ed:89:21:79:d2:67:7d:d3:65:5d:af:4f:70:06:1d:03:4b:
7d:90:c1:f4:8f:4a:7a:c0:05:b2:c4:86:26:3f:e7:51:a7:c4:
99:0d:7d:e2:cf:76:54:64:2a:c9:31:d2:2c:f7:40:35:14:4a:
b1:f3:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:50 2023 by rpki-client on console-fra.rpki-client.org