Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/Yz6gLUO0n2Y3ogJJiSLZdMRfcF0.roa
File: Yz6gLUO0n2Y3ogJJiSLZdMRfcF0.roa (raw, json)
Hash identifier: U1c0U1nZ8tEmSRMO3PMx/ESW7n+lBvZ2qm44Y+GjC7Y=
Subject key identifier: 63:3E:A0:2D:43:B4:9F:66:37:A2:02:49:89:22:D9:74:C4:5F:70:5D
Certificate issuer: /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial: 095F0BBC
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/Yz6gLUO0n2Y3ogJJiSLZdMRfcF0.roa
Signing time: Wed 11 May 2022 07:58:10 +0000
ROA not before: Wed 11 May 2022 07:58:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157223868 (0x95f0bbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Validity
Not Before: May 11 07:58:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=633ea02d43b49f6637a202498922d974c45f705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:09:c0:46:88:75:04:74:b0:3a:4d:37:99:
6f:4d:00:41:86:81:c7:b1:44:f5:42:91:3c:24:bb:
c5:3d:46:6d:cd:dd:85:8f:13:d9:5d:f9:ee:ee:ed:
55:b4:01:7d:ae:26:b1:a7:8b:42:70:6a:e2:c3:ea:
67:b3:cf:16:d1:e3:73:ca:1a:f4:64:29:a9:c1:2e:
ce:a1:1c:73:b9:79:a5:5d:af:a1:bf:69:8b:8e:20:
56:bf:dc:f3:02:5a:1b:b7:55:a7:0f:02:04:e9:20:
e6:a0:a9:52:4d:cd:8c:fe:20:ec:48:5b:3d:a9:08:
66:c5:07:3b:ac:22:a1:72:1e:92:a5:08:39:90:78:
63:ae:de:24:5e:1c:76:39:13:c2:4c:1a:b1:5d:a6:
ef:1d:58:ed:a3:13:85:60:86:6e:88:22:ec:7d:4c:
9b:d0:b2:4f:47:9f:41:4c:f1:be:ad:e6:c0:a8:65:
2e:bc:fa:ba:46:fe:d0:7a:26:1b:02:d0:46:0c:7c:
0e:b1:a4:2c:73:d9:8b:eb:5e:9a:b8:7b:9d:e0:2d:
97:8e:de:eb:c8:64:4b:c7:c2:eb:23:a1:35:5d:68:
35:4c:83:16:74:d1:f6:b4:93:64:6e:96:18:d1:5d:
ff:1e:50:a4:c8:cc:56:ba:de:d0:34:4e:63:f4:73:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3E:A0:2D:43:B4:9F:66:37:A2:02:49:89:22:D9:74:C4:5F:70:5D
X509v3 Authority Key Identifier:
keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/Yz6gLUO0n2Y3ogJJiSLZdMRfcF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:37:65:20:7f:5a:52:ec:d8:0a:40:04:49:4f:cd:72:b9:69:
a7:24:bf:63:4a:08:f6:fd:96:06:ab:81:11:9d:4a:36:fb:a9:
f2:97:6a:b7:9e:8a:56:72:09:88:15:2b:13:41:f3:59:9c:9b:
4e:e7:94:bd:96:1b:89:cc:c6:d1:29:43:4e:8f:0d:b1:c8:9f:
77:4a:b4:f1:1c:27:22:77:79:c4:ff:ab:87:b3:b0:d9:fd:c4:
4b:bb:d6:4b:11:51:d9:02:9d:4b:7c:dc:25:11:0c:d0:4b:ef:
2f:4b:fb:74:05:e3:51:8f:91:63:88:90:14:b5:df:1c:ab:13:
24:84:01:f5:9d:78:59:a5:22:8a:0c:65:5a:5e:d7:5a:72:d3:
b8:6a:b9:61:82:cd:39:08:06:09:13:98:fe:a9:03:9a:af:9f:
27:98:52:c6:d9:48:a8:7f:fd:6d:00:c2:a2:8e:d7:09:12:e6:
ac:86:cc:bf:6b:90:75:5e:d0:eb:60:93:47:d1:a2:82:41:78:
7d:a5:ba:45:05:79:c1:66:a8:c1:c3:f9:14:7f:8e:55:ca:2d:
ca:8c:77:2a:d6:27:22:bb:66:8d:3c:ac:04:03:3b:c7:5b:4d:
43:9b:51:3f:7f:b0:51:08:67:34:fc:92:f9:d8:eb:26:d7:7f:
ce:d1:16:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:42 2024 by rpki-client on console-ams.rpki-client.org