Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/LRL42QfCBTXJc4CK8nEYQkRTrUA.roa
File: LRL42QfCBTXJc4CK8nEYQkRTrUA.roa (raw, json)
Hash identifier: v2WTxENh4jmg+hcPumEjNXqUO8h98MTUfV1en7iuPOw=
Subject key identifier: 2D:12:F8:D9:07:C2:05:35:C9:73:80:8A:F2:71:18:42:44:53:AD:40
Certificate issuer: /CN=e07de3144a09fd5f50559c493f86e2e8bd3c679e
Certificate serial: 07B99F9D
Authority key identifier: E0:7D:E3:14:4A:09:FD:5F:50:55:9C:49:3F:86:E2:E8:BD:3C:67:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H3jFEoJ_V9QVZxJP4bi6L08Z54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/LRL42QfCBTXJc4CK8nEYQkRTrUA.roa
Signing time: Sat 01 Jan 2022 07:04:19 +0000
ROA not before: Sat 01 Jan 2022 07:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44285
IP address blocks: 45.9.253.0/24 maxlen: 24
45.9.252.0/24 maxlen: 24
45.9.252.0/22 maxlen: 22
45.9.252.0/23 maxlen: 23
45.9.254.0/24 maxlen: 24
45.9.254.0/23 maxlen: 23
45.9.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129605533 (0x7b99f9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07de3144a09fd5f50559c493f86e2e8bd3c679e
Validity
Not Before: Jan 1 07:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d12f8d907c20535c973808af27118424453ad40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:10:68:35:d3:05:29:3b:8d:86:ac:36:28:46:
5c:dd:c2:c3:6f:f9:79:2f:fe:77:30:d4:c6:77:03:
9b:d8:84:b2:7a:db:cf:fb:61:07:31:89:59:06:95:
fd:2f:c6:ed:12:56:32:41:74:5e:0e:ba:f5:ca:a3:
a8:92:4e:fb:64:6a:8a:39:df:c1:01:e9:db:73:84:
36:92:1f:0a:62:53:b0:43:74:57:f3:ca:8e:7f:5b:
cc:9a:2b:b7:48:fd:f1:30:4f:49:6f:63:a5:0d:d1:
e7:5c:56:b3:f0:7f:df:95:55:f6:f5:6e:c4:f3:c1:
30:c8:b1:d8:40:f9:31:be:2c:fc:81:61:43:cb:5f:
35:45:7a:8b:bb:87:76:63:51:f6:a1:46:45:4b:08:
66:a3:7a:c3:9b:08:4b:67:f8:a2:23:a0:5b:c2:e5:
72:f4:2f:19:7d:7e:4a:08:d8:14:88:83:28:76:5f:
d3:e2:d4:26:ec:70:f9:85:f6:75:57:5c:06:15:e3:
e5:f5:6f:fb:3f:f0:fe:17:fd:6d:1b:75:6f:2e:d7:
67:d2:9f:3f:51:e0:28:8c:0a:bb:7a:23:01:99:69:
26:98:b0:f7:2a:c7:0a:a4:41:e4:f4:ae:30:af:23:
16:16:33:77:11:5e:ec:3e:85:93:56:51:de:80:0a:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:12:F8:D9:07:C2:05:35:C9:73:80:8A:F2:71:18:42:44:53:AD:40
X509v3 Authority Key Identifier:
keyid:E0:7D:E3:14:4A:09:FD:5F:50:55:9C:49:3F:86:E2:E8:BD:3C:67:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H3jFEoJ_V9QVZxJP4bi6L08Z54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/LRL42QfCBTXJc4CK8nEYQkRTrUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f1bdb2-6061-4a52-ad55-51a739a65fce/1/4H3jFEoJ_V9QVZxJP4bi6L08Z54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.252.0/22
Signature Algorithm: sha256WithRSAEncryption
68:6e:67:a9:00:7d:d1:7f:75:49:b5:c1:a1:52:a5:4e:2a:bd:
ee:ff:f2:6d:3c:fe:c2:04:0e:33:7f:d0:79:74:52:1c:38:61:
89:71:1d:94:8e:b6:24:62:ca:ce:9c:55:e4:92:c1:cd:df:7b:
40:c1:5e:f2:b1:c3:e3:03:5f:a1:25:90:64:2a:70:dd:2b:af:
36:4c:70:17:de:29:78:9b:39:a3:d7:3c:09:8c:5b:af:c9:03:
a7:b8:fa:9f:f8:63:5e:04:d4:8f:58:81:c5:40:d3:48:ac:1b:
39:dc:ef:d7:4f:bc:83:77:98:eb:d1:de:b8:7f:e3:41:a8:02:
f4:57:a8:3a:ea:01:11:d8:82:9a:0f:5a:bb:bb:b4:b9:9c:2a:
6d:d7:14:b3:41:e9:a4:e1:28:71:df:b6:4e:aa:40:b8:a3:e5:
36:81:f4:77:4d:ab:f6:44:ad:a0:3e:c3:6c:b7:aa:e1:64:87:
92:85:f1:0d:57:18:50:3a:f1:82:11:0a:d7:69:44:3f:ce:af:
38:f2:02:a1:7c:ec:39:04:f4:7f:09:7a:e3:3e:34:67:c4:2d:
64:27:9d:f9:09:a6:24:11:fd:84:91:70:5d:82:88:b9:a4:21:
d7:db:2c:11:9e:c0:da:21:50:19:3d:be:36:30:3c:5c:e8:76:
eb:56:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:03 2023 by rpki-client on console-fra.rpki-client.org