Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/9GAEKmUzmt4nXqlkP8YaETR_yDo.roa
File: 9GAEKmUzmt4nXqlkP8YaETR_yDo.roa (raw, json)
Hash identifier: x9Ab/CJz6iEXJwAHAjf17nnYYNeu9EZ6WbfHYg0P8LE=
Subject key identifier: F4:60:04:2A:65:33:9A:DE:27:5E:A9:64:3F:C6:1A:11:34:7F:C8:3A
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 08D37C3E
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/9GAEKmUzmt4nXqlkP8YaETR_yDo.roa
Signing time: Sat 01 Jan 2022 07:55:51 +0000
ROA not before: Sat 01 Jan 2022 07:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.8.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148077630 (0x8d37c3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 1 07:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f460042a65339ade275ea9643fc61a11347fc83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:37:7e:d2:33:32:c2:32:a1:c0:e2:dd:f0:
93:74:66:7e:53:4a:4f:f2:f7:09:02:10:c6:b6:92:
07:92:24:e5:7e:6c:00:70:5b:22:72:c5:99:97:ba:
2f:67:b8:30:e9:66:8e:2b:2d:1b:46:e0:ac:fc:c3:
af:6c:64:2b:76:7c:6e:36:f6:0b:fc:c4:16:41:fc:
8d:03:34:84:bf:9d:b6:33:7c:0b:a8:4a:fb:f0:6a:
8d:bc:ce:a5:ba:b1:3e:4c:41:74:a4:d1:37:ab:08:
36:ca:30:9e:23:30:64:7b:70:76:bd:7e:89:3a:8e:
5e:26:d7:61:c6:2e:80:90:b1:eb:21:d9:ec:71:97:
bd:c8:9b:73:16:77:82:dc:0f:f7:4a:bd:bc:50:c2:
1d:11:bd:71:7c:e8:0d:d9:a9:18:bd:5e:aa:67:9a:
e3:f4:28:36:f4:f9:15:f6:6e:9b:30:ee:94:14:85:
b4:80:80:f9:79:63:40:b3:e9:22:5d:78:93:32:4d:
04:11:44:a5:d0:8b:6b:17:2a:48:14:0e:33:46:c8:
d9:31:b6:e3:8b:f3:2f:d7:d9:6d:ca:4f:e4:20:03:
b7:38:aa:5f:9f:fe:df:4f:75:fd:45:60:ca:1d:08:
fd:bb:71:96:ab:09:d4:93:5c:f9:28:7a:4e:ce:d1:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:60:04:2A:65:33:9A:DE:27:5E:A9:64:3F:C6:1A:11:34:7F:C8:3A
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/9GAEKmUzmt4nXqlkP8YaETR_yDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:1d:2a:26:12:10:bd:17:93:48:59:e6:83:d5:d0:da:e4:6e:
be:ab:a1:e1:05:32:ae:8e:ec:de:44:2d:df:38:3e:19:83:c3:
1c:74:49:74:ba:d7:1e:fc:2d:82:3f:ae:e2:cc:fb:65:e3:aa:
d2:28:c9:c0:dd:04:93:42:cc:25:5c:01:18:47:81:4e:bc:8d:
c1:23:82:23:4f:fa:e3:cb:72:24:12:62:ea:5c:fa:88:50:e1:
51:f8:c2:c1:70:71:18:eb:e9:7c:8c:2f:9a:91:34:55:c1:11:
2e:c3:18:2f:66:29:7f:85:f9:68:d9:9e:ba:12:04:f6:75:46:
a9:fa:00:c1:b6:a8:46:3f:3d:97:23:26:8c:e1:e0:9a:5b:02:
5a:65:9c:5b:a8:68:45:f7:47:0b:be:23:64:f0:ee:03:f7:e5:
1d:ed:a2:14:c9:4e:68:7f:34:ff:a0:b3:b2:ac:ac:e4:dd:a7:
d8:df:99:61:d1:b0:b0:c6:15:54:86:03:6c:e8:2d:62:a9:e9:
a3:07:17:d4:79:09:44:20:2c:5e:47:66:0f:ef:ae:c6:e6:0a:
b3:00:10:de:ef:e9:b9:7e:70:d9:2b:66:07:ae:c1:63:1f:f0:
c7:6e:49:69:b1:bc:2e:cd:32:b8:85:49:8c:03:36:59:17:90:
f1:79:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org