Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/NJFsZci2K8qwNRjiUA6_Jm_8txE.roa
File: NJFsZci2K8qwNRjiUA6_Jm_8txE.roa (raw, json)
Hash identifier: V4U0egQ4aqALo7FsetJKnmkIh1j/UOsVK7LZp736roI=
Subject key identifier: 34:91:6C:65:C8:B6:2B:CA:B0:35:18:E2:50:0E:BF:26:6F:FC:B7:11
Certificate issuer: /CN=4261a61434e019e7e40a8f3bd98719128bb23733
Certificate serial: 018CC348936A90F7405DE071D9B4A6A661E9
Authority key identifier: 42:61:A6:14:34:E0:19:E7:E4:0A:8F:3B:D9:87:19:12:8B:B2:37:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmGmFDTgGefkCo872YcZEouyNzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/NJFsZci2K8qwNRjiUA6_Jm_8txE.roa
Signing time: Mon 01 Jan 2024 04:29:22 +0000
ROA not before: Mon 01 Jan 2024 04:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57523
IP address blocks: 45.93.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:93:6a:90:f7:40:5d:e0:71:d9:b4:a6:a6:61:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4261a61434e019e7e40a8f3bd98719128bb23733
Validity
Not Before: Jan 1 04:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34916c65c8b62bcab03518e2500ebf266ffcb711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e1:de:69:6e:50:02:4c:4b:30:f7:22:d5:93:
ad:48:d1:c9:ca:a4:c9:13:9f:ad:df:02:c5:4d:b5:
1f:a3:2c:11:75:a2:48:d0:47:99:e5:57:16:00:a2:
96:66:07:63:e2:0b:c0:cc:ef:d4:0c:9d:f6:e9:06:
ce:93:0a:2b:c5:47:c8:82:b0:b2:5b:cd:4e:a0:ab:
9a:19:1d:5c:66:0a:01:f7:b5:2c:89:b6:ee:4c:17:
c5:69:ae:c3:ab:47:70:d5:de:be:6a:65:49:0a:d5:
7d:c6:9b:3d:57:71:2d:0c:25:f4:84:b7:ef:f7:4f:
5b:e8:2f:12:3d:7f:21:ed:c2:99:6e:9a:b0:4d:e2:
c5:76:4c:a0:89:b9:9c:e2:12:ee:ae:a2:49:65:fd:
d8:ff:d7:3a:d0:7e:a5:f3:a0:06:61:cc:07:c8:bc:
7e:13:b5:b7:1e:86:96:81:73:86:fe:21:c4:32:bd:
f0:6e:ca:5d:f1:76:22:cb:4c:6f:28:20:9e:ab:d6:
a6:d2:4b:4d:cd:61:d2:e0:d6:b9:5d:13:21:e9:7d:
16:0b:d0:46:d7:44:d6:c9:f4:40:4c:f3:f8:d9:a2:
e3:ea:4b:67:c5:80:99:aa:a2:72:dd:c7:68:9b:85:
78:38:6d:3b:98:4a:c7:70:12:f3:6f:46:2d:c8:10:
53:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:91:6C:65:C8:B6:2B:CA:B0:35:18:E2:50:0E:BF:26:6F:FC:B7:11
X509v3 Authority Key Identifier:
keyid:42:61:A6:14:34:E0:19:E7:E4:0A:8F:3B:D9:87:19:12:8B:B2:37:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmGmFDTgGefkCo872YcZEouyNzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/NJFsZci2K8qwNRjiUA6_Jm_8txE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/QmGmFDTgGefkCo872YcZEouyNzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:08:c4:cc:a1:52:42:3f:00:b5:1c:9e:42:b2:ae:79:81:68:
a4:80:f1:f9:18:dc:cc:8d:b4:ed:3b:9e:08:84:37:05:67:81:
f2:45:ae:2c:de:c6:27:7e:cd:c9:6b:9f:b8:ac:f6:0e:db:05:
6c:98:4b:db:8e:43:e7:bc:5d:91:a9:26:c7:82:fe:c5:dd:44:
51:3e:27:f0:8a:7e:02:4d:53:03:0d:0b:86:d2:cb:51:39:db:
e2:07:9e:de:87:19:52:71:bf:ae:d1:65:f7:23:f5:0a:1e:5a:
18:8c:b3:1a:f3:b3:5a:64:1b:74:e2:64:b5:04:d4:3d:86:1d:
c3:87:d9:5b:5c:ac:d8:ca:6b:ce:61:7f:09:40:3d:fa:de:42:
a7:8d:8c:5d:d7:43:23:c7:2b:95:f7:a8:ac:98:07:33:c0:d4:
b8:08:67:62:e2:b1:62:7a:7c:2c:27:6e:1c:2c:87:f9:96:c4:
f3:76:84:03:9e:93:c6:0b:51:1b:28:0d:79:12:b1:8c:b6:3f:
11:3c:4d:33:29:4d:da:00:41:42:c8:6b:95:39:5f:dc:8b:5b:
ad:2c:ab:94:66:8d:04:4c:ac:f8:b1:bf:f6:19:0b:a5:a3:37:
a4:0b:ea:98:45:5a:3a:95:2e:6b:0b:c6:a2:30:50:d4:d8:8b:
87:6a:c5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:50 2024 by rpki-client on console-ams.rpki-client.org