Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/fdToT4PKk9dQQdXDsYLCb8Fs2mU.roa
File: fdToT4PKk9dQQdXDsYLCb8Fs2mU.roa (raw, json)
Hash identifier: j8kNk+b/Kuda0jIUt+Ixjc7AEOmPbIXvVonQkrid/wc=
Subject key identifier: 7D:D4:E8:4F:83:CA:93:D7:50:41:D5:C3:B1:82:C2:6F:C1:6C:DA:65
Certificate issuer: /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial: 01833C788948FB203ADF7628F04B1B9BD5C6
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/fdToT4PKk9dQQdXDsYLCb8Fs2mU.roa
Signing time: Wed 14 Sep 2022 14:47:55 +0000
ROA not before: Wed 14 Sep 2022 14:47:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3c:78:89:48:fb:20:3a:df:76:28:f0:4b:1b:9b:d5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Validity
Not Before: Sep 14 14:47:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dd4e84f83ca93d75041d5c3b182c26fc16cda65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:67:e7:ec:5c:9b:b3:fc:0a:16:a7:b2:f1:
3c:16:48:11:be:83:18:b0:cf:21:90:16:3a:d6:57:
7c:79:fe:9e:1d:89:af:75:2a:b6:59:be:24:f6:07:
cb:1c:d0:f9:a0:ad:62:f8:3b:b9:27:fc:27:0d:c1:
72:05:a0:a1:d4:29:2d:5a:6c:51:86:f0:9e:05:cb:
9b:88:03:7a:df:aa:41:59:b5:96:20:10:72:c6:a2:
e9:f8:84:72:6c:ba:20:5c:f4:73:8b:2f:f2:0e:76:
aa:7e:29:0d:2e:14:0b:8b:66:3c:60:f7:05:6c:b9:
0b:5b:40:08:04:00:7d:6a:99:50:6b:f3:fd:05:82:
d1:08:3e:f3:7f:29:3d:a7:b1:65:f4:e3:b7:50:4b:
16:5e:d7:c1:5e:70:87:05:7e:a3:c2:b6:a2:9a:c6:
7e:46:4c:40:2c:35:0f:57:e9:92:73:1d:be:9a:93:
89:fc:09:58:fb:b8:17:a8:4c:98:05:1b:a8:91:38:
82:fe:8a:94:e4:8d:e0:6e:bf:ce:47:cd:d6:98:3b:
a7:4b:7f:ae:76:df:39:06:b3:8e:b2:45:04:b0:00:
f6:9c:47:1b:69:17:94:1e:3d:07:a4:3e:c4:66:76:
9d:6b:7d:c7:ce:e7:e2:bc:4d:3b:b8:3b:15:6a:c8:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D4:E8:4F:83:CA:93:D7:50:41:D5:C3:B1:82:C2:6F:C1:6C:DA:65
X509v3 Authority Key Identifier:
keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/fdToT4PKk9dQQdXDsYLCb8Fs2mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
47:70:14:e0:a9:7d:af:51:8a:f3:3f:be:50:7d:05:ac:33:93:
da:4b:3a:ad:30:17:87:a0:bc:5d:98:15:12:97:bc:66:17:8e:
d4:c1:5a:bf:52:cb:96:ea:d9:a2:87:bb:b3:00:5e:c0:30:d3:
a2:af:ca:54:15:7c:5c:8b:f6:cf:e3:ae:c1:7f:1a:7d:14:92:
38:03:f5:77:1f:82:e5:8d:e8:b7:af:8a:fc:f3:38:52:07:68:
2b:4b:6e:a8:9c:66:26:1f:7b:4b:4c:2c:48:6f:b2:8e:fb:71:
4c:b8:b2:90:9e:2b:9e:f4:e5:58:34:01:82:78:04:50:ff:32:
52:7b:b6:21:40:e0:36:02:45:70:46:1d:82:ec:3a:58:04:ca:
88:22:f4:51:8b:cc:05:0b:18:8b:87:e6:9b:fb:41:ef:64:d8:
d3:13:50:b0:f5:c2:11:40:42:d1:1f:3c:39:cd:ab:95:3c:25:
ff:34:31:20:0b:04:d7:91:be:f5:fe:1e:6a:de:84:2e:e1:3e:
8b:96:a8:2c:ef:48:d7:80:83:e5:98:31:e3:9d:d1:e4:6f:a5:
41:cc:f0:42:20:bb:c2:1d:db:02:6e:c4:54:20:ec:d5:d4:31:
32:a6:33:24:94:80:55:fa:19:59:4c:9a:a6:d2:c6:b4:1a:6d:
d1:c3:cb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:54 2024 by rpki-client on console-fra.rpki-client.org