Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/TtY09meT5KMUbJRfDDOdkDTjzsA.roa
File: TtY09meT5KMUbJRfDDOdkDTjzsA.roa (raw, json)
Hash identifier: HKncRSgoZH2bn3/FxG29xEcZpoFZORQ2CXVKAdNg6Fw=
Subject key identifier: 4E:D6:34:F6:67:93:E4:A3:14:6C:94:5F:0C:33:9D:90:34:E3:CE:C0
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01857142F3D85598EA3DA57AC403F36F1C74
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/TtY09meT5KMUbJRfDDOdkDTjzsA.roa
Signing time: Mon 02 Jan 2023 06:54:51 +0000
ROA not before: Mon 02 Jan 2023 06:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200415
IP address blocks: 45.8.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f3:d8:55:98:ea:3d:a5:7a:c4:03:f3:6f:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Jan 2 06:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed634f66793e4a3146c945f0c339d9034e3cec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:30:9e:21:3b:61:21:fd:59:2a:bc:6a:e1:01:
7e:75:77:6e:0e:3b:d8:db:5f:13:98:cd:1e:24:46:
81:f8:2c:7b:9d:c4:81:be:15:10:9f:91:e0:86:04:
d4:6d:7f:e4:a2:3b:2c:cc:72:1b:a8:f4:46:ed:fa:
e3:00:b1:5e:00:e3:80:de:1a:b7:90:a9:99:dc:c4:
c5:b5:52:77:f4:0a:b7:a9:b8:3f:ed:1b:7d:a1:de:
ad:60:d9:5c:37:eb:54:6e:1b:a9:9c:72:88:7f:19:
13:86:c1:58:db:9f:23:82:3b:0c:f3:4b:fd:02:4a:
1c:90:8d:60:c4:f0:bb:3e:34:53:cd:52:de:21:38:
28:9f:35:09:e8:4b:d1:be:d8:66:50:b5:cd:a1:13:
99:a5:00:a3:b6:fa:16:44:78:53:6f:4c:ed:eb:ad:
79:8c:55:96:0a:91:02:30:aa:c0:5a:03:bd:4c:5d:
6f:43:f2:58:82:b9:40:39:f9:bc:e1:9a:9c:a3:5e:
ff:d1:59:b0:57:ef:c0:3d:ae:b3:a4:a5:02:29:c2:
b4:8f:a2:8d:e0:c9:b2:55:9b:f3:e6:98:bd:b6:c2:
09:0c:07:01:88:f6:c9:ba:01:7c:03:8e:87:b3:59:
d9:4a:0f:d0:73:4e:a0:6b:a7:b7:91:1c:ce:a7:41:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:34:F6:67:93:E4:A3:14:6C:94:5F:0C:33:9D:90:34:E3:CE:C0
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/TtY09meT5KMUbJRfDDOdkDTjzsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.172.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:1f:bb:4e:a1:5e:6f:85:98:d2:fd:94:2e:68:fc:e6:84:4a:
b4:d4:16:73:9e:61:6e:80:99:26:9a:80:d1:59:32:9f:5d:eb:
9e:fd:2f:5a:9b:eb:12:82:24:0e:d3:82:c7:34:e9:be:57:7a:
25:d7:91:12:9c:d0:04:68:13:d9:bc:68:32:4d:14:30:8b:b3:
21:01:f3:56:72:fb:5b:1f:80:e9:7e:0c:23:5f:b6:c8:46:47:
b1:d1:5c:ae:b4:24:e8:66:05:5b:11:37:58:af:04:71:99:75:
d9:9e:e7:5b:e0:56:ee:a5:7d:eb:75:2f:b4:6b:62:b2:85:bd:
d5:b1:79:56:32:0a:d1:d1:ed:91:6e:68:b0:27:d1:26:9a:2a:
1c:65:05:7f:69:d6:aa:fe:dd:cf:7d:95:8c:ff:c1:3b:dc:fd:
0f:02:4f:75:c5:bf:72:a6:fc:30:fa:cf:ad:34:e9:38:27:b3:
43:df:0f:9a:c3:23:f0:e3:ad:53:12:1d:bf:0c:64:ce:41:85:
89:a7:0e:44:11:75:fe:9e:49:36:42:7a:96:a5:84:f3:e9:08:
75:0f:0f:9e:d9:15:62:38:53:33:09:58:19:52:7d:e4:fe:41:
9a:9f:6f:af:f5:a6:18:99:d5:0e:0a:ad:19:84:9a:63:79:28:
cb:a9:71:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:15 2023 by rpki-client on console-ams.rpki-client.org