Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/a9F_b-9pUamtW0inASFdPycQu_c.roa
File: a9F_b-9pUamtW0inASFdPycQu_c.roa (raw, json)
Hash identifier: MlWfEbY0cie0EaSt+scdIchJPZPKGpU87BfFiJGmqMk=
Subject key identifier: 6B:D1:7F:6F:EF:69:51:A9:AD:5B:48:A7:01:21:5D:3F:27:10:BB:F7
Certificate issuer: /CN=4261a61434e019e7e40a8f3bd98719128bb23733
Certificate serial: 01856B6E8339D1BB25DC4929AE6BDE5A70A9
Authority key identifier: 42:61:A6:14:34:E0:19:E7:E4:0A:8F:3B:D9:87:19:12:8B:B2:37:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmGmFDTgGefkCo872YcZEouyNzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/a9F_b-9pUamtW0inASFdPycQu_c.roa
Signing time: Sun 01 Jan 2023 03:44:42 +0000
ROA not before: Sun 01 Jan 2023 03:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57523
IP address blocks: 45.93.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:83:39:d1:bb:25:dc:49:29:ae:6b:de:5a:70:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4261a61434e019e7e40a8f3bd98719128bb23733
Validity
Not Before: Jan 1 03:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bd17f6fef6951a9ad5b48a701215d3f2710bbf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:7c:42:61:55:ed:04:34:6a:38:68:6e:21:
41:8b:9f:f8:99:5e:5f:bf:fc:b9:fc:2e:9b:bf:e9:
96:f8:51:6d:fc:21:da:2e:7b:22:2f:18:bf:34:ee:
b1:81:4c:42:f4:6c:29:ed:1e:99:ce:07:53:15:14:
11:0f:09:19:03:5f:32:bf:91:23:c4:58:37:de:0e:
40:83:d4:f2:30:5b:3d:48:02:f9:e6:86:9c:9a:0f:
85:e9:40:ee:33:79:28:3f:62:e0:bf:fd:05:6f:e8:
3a:b1:99:08:51:92:5b:f6:84:ee:86:cd:7b:10:f4:
03:51:38:b4:ef:dc:ec:f1:c6:0a:66:04:30:da:f4:
3c:e9:b2:55:aa:6f:26:67:a5:70:1f:80:ea:89:7d:
e7:f6:9d:41:63:71:07:3c:d0:be:b8:9b:32:0c:a0:
9b:eb:ec:a2:f8:52:db:b5:54:59:f7:f4:4f:4c:f0:
9f:d9:48:45:94:15:36:e3:23:26:12:91:05:3d:8b:
64:bc:96:e6:d2:f1:78:d0:72:cc:09:c5:42:b6:71:
a5:6c:f2:af:3a:88:c6:7d:6d:a5:f4:79:f3:ca:6e:
b1:a7:3b:84:1d:15:01:ba:ed:e4:bd:84:bd:1c:49:
86:c5:a6:0b:c2:7a:45:bf:4d:c0:2b:93:a8:79:d8:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:7F:6F:EF:69:51:A9:AD:5B:48:A7:01:21:5D:3F:27:10:BB:F7
X509v3 Authority Key Identifier:
keyid:42:61:A6:14:34:E0:19:E7:E4:0A:8F:3B:D9:87:19:12:8B:B2:37:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmGmFDTgGefkCo872YcZEouyNzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/a9F_b-9pUamtW0inASFdPycQu_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0b1f25-80cf-4038-8d23-95e72dfda8bf/1/QmGmFDTgGefkCo872YcZEouyNzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c5:dc:83:7f:06:51:bc:17:88:4e:76:bc:0e:85:6e:83:a3:
34:76:6e:f1:58:bb:f0:fc:d1:c9:21:d0:56:47:ea:21:34:db:
c2:4c:c3:ea:e0:80:b5:63:fe:e0:af:fa:12:f0:c5:1f:a5:e2:
8d:59:b5:94:36:30:5f:25:39:b0:42:8a:3c:06:09:2d:d2:a6:
ae:48:af:81:4e:cb:68:85:ef:c2:b4:ae:80:e1:d8:6b:f4:84:
c8:a1:da:1d:23:b3:a3:c6:03:5a:ec:5f:c0:7a:24:bd:12:98:
61:35:b2:f9:5f:69:0a:08:5a:34:7b:37:6c:ae:97:15:65:28:
4c:90:5e:01:66:9b:2c:ee:a8:bb:46:3d:42:31:d6:8f:88:bc:
53:ef:fa:b9:45:48:32:2e:0e:fe:d2:fa:d7:3d:13:b3:7d:91:
0d:b6:90:4c:43:bc:3d:47:7f:ef:9c:b0:f0:87:8e:26:58:20:
a0:ef:b1:36:3d:70:87:47:a3:51:9a:92:4e:b0:f1:d9:3c:b5:
c7:6f:3e:38:6c:1d:7e:eb:e9:82:a0:a4:bd:6d:92:70:79:ad:
67:bf:02:ec:17:9a:93:78:af:37:8b:9a:86:28:dc:26:cd:cd:
44:17:53:20:66:ba:b1:ce:7e:8e:f3:26:e9:e1:b8:3a:51:d9:
e0:b8:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:05 2024 by rpki-client on console-fra.rpki-client.org