Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/vKdXTwlty6GPU0CRCIzX2LfUDeA.roa
File: vKdXTwlty6GPU0CRCIzX2LfUDeA.roa (raw, json)
Hash identifier: wFPEWHVCdfBdVOz/+P6+gZVSbYMsSPlSCy2EULPL/y8=
Subject key identifier: BC:A7:57:4F:09:6D:CB:A1:8F:53:40:91:08:8C:D7:D8:B7:D4:0D:E0
Certificate issuer: /CN=62fa765a393369c96d8d836f23f76e67489c7dde
Certificate serial: 01825F314EEB785C7E8B9358F2D0F66601CC
Authority key identifier: 62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/vKdXTwlty6GPU0CRCIzX2LfUDeA.roa
Signing time: Tue 02 Aug 2022 15:34:03 +0000
ROA not before: Tue 02 Aug 2022 15:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 45.66.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:31:4e:eb:78:5c:7e:8b:93:58:f2:d0:f6:66:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fa765a393369c96d8d836f23f76e67489c7dde
Validity
Not Before: Aug 2 15:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bca7574f096dcba18f534091088cd7d8b7d40de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:4f:20:83:cd:b9:f0:26:4d:35:3a:f5:4c:
29:2a:0f:ea:7b:a8:c1:08:1c:a9:c2:76:89:14:8d:
08:79:5a:b4:8a:47:d5:7f:47:56:36:21:16:03:87:
ec:59:5d:1b:84:17:43:93:38:bc:e9:33:d7:ae:db:
64:80:9c:46:66:35:ab:25:1f:00:53:37:63:9e:bd:
8d:0b:1c:0a:31:0b:97:d0:18:34:9c:b1:ce:bf:c0:
fa:a1:23:15:26:4d:16:38:12:cc:6d:a2:3e:59:79:
67:8e:d2:88:9e:b6:38:62:73:79:3f:a1:a1:6f:2e:
fe:e6:72:0e:fe:ed:3d:0f:98:68:2f:68:74:07:78:
cb:a3:17:93:95:83:52:b2:88:95:62:10:15:82:8e:
5b:65:67:31:d7:86:3c:7b:0a:cd:74:7c:84:7c:89:
2a:bd:9a:68:44:30:48:d7:1b:54:ad:1a:e7:f1:67:
5a:93:91:f6:10:88:60:5f:f7:50:ee:28:32:b5:84:
da:31:4b:72:f8:b9:7b:a7:7e:fe:8f:6b:19:d0:78:
e6:d5:36:b9:29:d4:7e:67:16:60:93:e3:32:35:ee:
ad:ef:1b:9e:05:74:5a:d4:8b:53:7a:5a:b2:90:af:
fd:ab:73:d6:69:14:de:fe:c1:68:02:ff:61:09:0f:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:57:4F:09:6D:CB:A1:8F:53:40:91:08:8C:D7:D8:B7:D4:0D:E0
X509v3 Authority Key Identifier:
keyid:62:FA:76:5A:39:33:69:C9:6D:8D:83:6F:23:F7:6E:67:48:9C:7D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yvp2WjkzacltjYNvI_duZ0icfd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/vKdXTwlty6GPU0CRCIzX2LfUDeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/adff80-b207-4fbd-bf5e-07dd1b4c55d9/1/Yvp2WjkzacltjYNvI_duZ0icfd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.149.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f0:de:ce:16:60:2e:f7:0a:84:a6:63:95:bd:d2:d3:52:7c:
70:81:5b:0a:fd:75:ba:e8:5e:0a:00:8d:32:56:91:bd:83:39:
d2:3d:4c:d1:0a:9d:24:54:9a:45:3b:9f:75:9b:87:ae:61:a3:
72:6a:a7:28:0a:e9:c7:f5:f8:20:4a:60:c5:1f:d7:dd:86:f9:
59:2e:81:f7:ae:ac:64:e3:dc:59:c2:cd:d1:86:41:ba:aa:d1:
fb:be:d2:f2:a9:89:e6:00:10:04:56:7f:2f:d9:cf:09:91:b8:
66:53:da:f6:e8:4c:45:3a:ed:64:d1:66:49:55:b3:13:80:0a:
58:51:a1:5f:89:92:f0:6f:60:9b:da:e0:8f:df:12:40:42:46:
6c:20:1c:cf:b4:05:33:b2:06:3e:ab:a4:73:23:b3:e9:27:10:
be:2c:41:45:1b:8d:50:ae:14:e0:e9:6a:c7:c3:3f:cc:79:25:
5f:c5:19:e6:96:72:8d:bd:10:29:5d:5a:de:e5:ac:c6:3e:9b:
c6:32:c4:32:ba:96:2e:cc:be:e4:de:3e:9c:3e:32:b5:7c:26:
55:cc:c1:e0:df:90:ba:25:21:20:00:03:fd:e2:54:fa:ae:62:
c3:4b:ea:2b:ce:70:f3:04:c0:8f:c8:42:39:40:de:da:fa:3a:
f0:46:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org