Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/P9Yf7aemgJXR-xP8nJPJqI0n-tY.roa
File: P9Yf7aemgJXR-xP8nJPJqI0n-tY.roa (raw, json)
Hash identifier: Iy0ewwLeIyibY28xOkMUV6NO0ioS17aMTYYwlkBlFWU=
Subject key identifier: 3F:D6:1F:ED:A7:A6:80:95:D1:FB:13:FC:9C:93:C9:A8:8D:27:FA:D6
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 09124A02
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/P9Yf7aemgJXR-xP8nJPJqI0n-tY.roa
Signing time: Sat 22 Jan 2022 00:30:33 +0000
ROA not before: Sat 22 Jan 2022 00:30:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.13.148.0/22 maxlen: 24
212.102.114.0/24 maxlen: 24
77.83.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152193538 (0x9124a02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 22 00:30:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3fd61feda7a68095d1fb13fc9c93c9a88d27fad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:1b:34:da:68:c0:03:8a:66:c4:48:f3:80:
7f:b3:7f:ce:c2:a0:fb:eb:38:ef:0f:57:fa:88:25:
b3:4a:1c:f5:aa:1f:54:8c:62:60:26:60:95:c4:c1:
c0:a4:70:ed:ec:2f:43:fe:98:b3:62:5c:62:4e:9f:
ed:7c:5c:c9:b1:5e:de:b7:13:88:bd:db:ba:45:f2:
4d:e3:e4:ea:4b:e7:9c:af:71:85:66:9e:b0:c9:ab:
d7:ae:83:71:5b:34:f5:c8:87:27:b9:0e:72:04:f6:
36:9b:f2:bb:83:c6:fb:ac:db:87:e4:5c:55:63:58:
92:99:d7:0b:49:9f:80:4c:b7:d7:03:80:33:7d:0a:
02:b7:ab:9b:b5:d5:bd:83:7d:31:de:93:eb:8c:d5:
8d:68:8a:94:0e:3f:ab:ad:8d:7a:28:8c:cd:fb:41:
9d:77:7a:4b:a2:cf:dc:2c:45:f3:06:e5:7f:ca:10:
e0:55:92:72:df:32:f9:6f:ee:8a:95:f1:8d:a7:19:
b9:4b:7e:46:2d:db:d0:ec:5b:ef:9d:c3:8d:a2:ba:
a4:dd:1d:9c:33:f2:b7:6e:bb:0e:aa:fd:0f:77:c1:
97:c8:0f:dd:29:d0:8d:4e:f8:0f:22:72:7e:79:a4:
37:2b:a6:aa:0f:1f:94:cf:63:d5:db:99:7b:ee:20:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:1F:ED:A7:A6:80:95:D1:FB:13:FC:9C:93:C9:A8:8D:27:FA:D6
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/P9Yf7aemgJXR-xP8nJPJqI0n-tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.148.0/22
77.83.252.0/22
212.102.114.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:13:7d:69:2c:5f:20:3d:57:14:64:5f:2a:9c:49:8a:31:6f:
bf:44:11:39:c8:35:bf:c8:60:53:28:ae:e0:85:9f:27:80:ee:
6c:5f:88:0d:50:27:66:7b:50:0f:07:dd:81:81:29:b5:9e:1f:
97:91:c9:76:36:0e:1f:52:0b:bc:e8:23:21:1a:35:26:4f:9e:
86:56:ea:71:57:10:fa:3c:a0:9f:43:d6:a2:6c:86:92:4e:13:
99:58:8e:3a:be:56:29:5c:a9:bb:28:d1:30:9f:37:99:a4:cc:
0e:de:22:87:68:b2:f3:8a:0c:e9:18:68:b7:8b:79:49:b1:f3:
c7:be:ef:1a:93:f8:c6:a2:9f:3d:b3:aa:6e:6f:38:5e:da:d9:
be:70:8e:fa:01:6b:48:eb:b9:e6:9a:4e:b2:46:df:58:5f:c0:
a1:2a:c1:44:7a:13:e8:2b:5d:61:95:14:34:d1:1c:f0:c8:a1:
b5:6a:aa:5d:9d:30:b1:a7:8b:0f:43:67:d9:93:91:d0:fe:dd:
9e:36:02:08:1a:4d:5a:04:22:d9:0f:e5:31:e5:74:2c:13:ce:
ff:1e:ba:56:a7:f9:79:4e:33:9d:c2:80:15:5b:eb:2f:14:1b:
55:c8:e4:f5:a9:44:32:e1:84:73:06:e2:ee:85:27:12:9c:fc:
52:0a:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org