Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/OfCzNxGRr3cJJt5AiHZJXQeeVzg.roa
File: OfCzNxGRr3cJJt5AiHZJXQeeVzg.roa (raw, json)
Hash identifier: bCXAL8jpvjOPNfZc0UnYDh6j4KfapiL1VUhH4kqvDk0=
Subject key identifier: 39:F0:B3:37:11:91:AF:77:09:26:DE:40:88:76:49:5D:07:9E:57:38
Certificate issuer: /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial: 0993434F
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/OfCzNxGRr3cJJt5AiHZJXQeeVzg.roa
Signing time: Wed 01 Jun 2022 07:17:13 +0000
ROA not before: Wed 01 Jun 2022 07:17:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.8.94.0/24 maxlen: 24
45.8.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160645967 (0x993434f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Validity
Not Before: Jun 1 07:17:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39f0b3371191af770926de408876495d079e5738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:8d:5e:48:39:50:10:4b:01:25:58:2d:71:
40:ce:8b:b2:05:90:f5:5b:d1:0a:0c:67:28:97:9c:
64:c3:2e:11:7d:9b:a3:11:6b:ce:70:2f:f1:37:d9:
63:4b:d2:7c:9d:f3:60:cc:4a:69:7b:f9:ab:ef:d7:
a8:12:50:d4:f4:1f:22:60:77:72:63:7e:34:4c:bd:
8c:d3:a4:23:99:e8:e0:91:e0:ac:4e:ed:97:a8:47:
8c:f3:5a:3b:05:0b:d8:92:a6:72:1f:3e:91:4c:97:
37:f9:46:c9:58:24:fe:e0:77:2c:53:30:e0:06:77:
fd:f8:89:60:8a:8f:53:f5:d8:a9:0f:9e:42:9e:3a:
ee:5c:b8:f3:cf:19:da:65:c8:b0:7d:57:f1:54:ec:
1c:1b:c6:d0:d9:d2:1c:77:dc:6c:91:4a:57:59:f9:
02:86:a0:06:17:56:36:d0:8c:98:1b:64:c0:c5:03:
8c:c3:07:85:73:e8:94:8a:b9:5d:43:c5:54:21:c8:
5c:a1:4f:6e:a4:12:8f:21:f2:31:b2:20:bf:40:a6:
af:02:c7:a9:b6:54:7b:4c:b6:ed:89:3c:42:52:49:
b7:fc:75:24:aa:c7:96:87:41:2a:66:7e:01:d2:80:
ac:0a:ed:94:8f:0f:41:e1:52:fe:0d:8f:8c:af:ee:
18:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F0:B3:37:11:91:AF:77:09:26:DE:40:88:76:49:5D:07:9E:57:38
X509v3 Authority Key Identifier:
keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/OfCzNxGRr3cJJt5AiHZJXQeeVzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/23
Signature Algorithm: sha256WithRSAEncryption
85:2d:6c:80:70:ff:1c:cd:df:ab:fd:48:9a:86:e8:6f:89:e5:
cb:24:36:52:2c:70:30:2a:d0:1b:dd:e6:bb:7c:bf:ff:97:94:
71:be:83:ff:44:f3:c4:c1:47:17:79:7b:a7:34:cd:bc:b7:f9:
ec:df:dc:c7:4b:6d:31:bd:3a:0f:db:dc:cd:bc:78:77:e6:65:
77:cb:e4:26:15:9c:ff:83:95:49:c6:6f:4a:4a:0f:bd:95:7c:
a0:4f:7e:cb:4b:a5:b3:d6:92:7b:a5:c2:ed:c6:fd:6d:95:94:
e0:c1:fa:91:b8:51:30:d7:9e:92:e8:4d:85:46:a9:d3:db:5e:
b6:6a:3c:c2:1f:f1:44:c0:fb:0f:49:59:f2:29:1a:44:41:27:
bd:c5:11:f1:87:6f:c6:d3:f6:b0:40:9f:2c:45:16:5e:42:c6:
89:1e:10:b4:4d:d9:6c:d3:00:5c:3c:29:a7:49:ab:41:2b:ac:
9c:58:b9:77:88:2e:93:54:88:c5:e3:b8:db:1f:01:c2:fd:63:
91:f3:98:25:29:1b:1b:9a:4b:ce:c1:3c:b9:fb:b2:c8:bb:c1:
42:5b:88:a8:03:5b:a8:06:86:33:a6:58:17:e1:43:af:f6:96:
0e:4a:e4:a1:ca:2c:a7:02:fd:b8:78:fa:63:ee:04:ab:b4:5d:
92:ec:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org