Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/R2T_ng30VoZ0RpaZmu4TxIY2zjU.roa
File: R2T_ng30VoZ0RpaZmu4TxIY2zjU.roa (raw, json)
Hash identifier: +i/j+9dSiibi5QRleV2/a9DDgbR2aoVBs/WrUxfQlDM=
Subject key identifier: 47:64:FF:9E:0D:F4:56:86:74:46:96:99:9A:EE:13:C4:86:36:CE:35
Certificate issuer: /CN=094895a071a3add9df3ec84e64547afdca6b62a3
Certificate serial: 01856E41E077FCF982376D6EAE7AEB58F33A
Authority key identifier: 09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/R2T_ng30VoZ0RpaZmu4TxIY2zjU.roa
Signing time: Sun 01 Jan 2023 16:54:49 +0000
ROA not before: Sun 01 Jan 2023 16:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2013333
IP address blocks: 45.11.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e0:77:fc:f9:82:37:6d:6e:ae:7a:eb:58:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094895a071a3add9df3ec84e64547afdca6b62a3
Validity
Not Before: Jan 1 16:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4764ff9e0df45686744696999aee13c48636ce35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1f:33:75:e8:45:91:49:4e:91:03:93:4e:d8:
cb:ec:79:24:07:d8:f4:82:9e:9e:2c:80:a5:3d:ea:
6e:67:91:b3:13:b7:a4:c9:1f:f4:5f:50:6b:8b:08:
f1:eb:2f:90:c6:29:49:1b:d8:64:b0:a6:06:f4:b0:
5d:c6:31:95:28:89:14:92:96:d0:6e:fb:b7:06:97:
10:85:f1:6f:d1:54:3e:50:45:65:3f:a9:98:fa:e0:
4c:8b:7e:14:56:88:d3:b5:b9:cb:4e:e6:46:dd:23:
54:77:d4:83:25:fc:a8:f6:ae:2e:2d:bc:11:68:71:
e9:d5:dc:7a:08:ad:98:ef:27:af:38:7d:1a:c0:d6:
c8:f2:bd:94:8a:a0:67:02:54:ce:9e:e6:ad:fa:83:
59:2b:de:0d:5d:50:79:01:62:4e:95:e4:a0:09:a1:
49:1c:3a:3c:43:38:86:c6:2d:6f:a4:ca:af:f0:76:
ea:d5:11:61:5e:81:0f:2c:58:ab:29:9b:f5:15:a0:
1f:76:46:aa:ae:44:5d:47:ac:2c:38:f9:2e:c7:72:
38:60:30:62:7e:99:0b:3d:e7:b5:a0:a6:af:47:df:
c7:4d:8f:c7:ea:e9:83:c0:a4:4e:99:5f:d1:f1:e9:
00:e8:48:11:04:fc:4a:df:72:a2:a3:35:cf:76:4e:
d5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:FF:9E:0D:F4:56:86:74:46:96:99:9A:EE:13:C4:86:36:CE:35
X509v3 Authority Key Identifier:
keyid:09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/R2T_ng30VoZ0RpaZmu4TxIY2zjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b6:05:65:fe:2d:d2:14:2d:da:00:b1:4c:05:21:de:a3:25:
33:14:ae:0e:9e:9e:37:ca:f0:ae:97:e7:87:62:8c:b4:9e:fe:
24:47:cb:e0:8c:75:42:d0:52:41:ea:62:5d:d7:cf:4f:74:1f:
80:06:84:d6:0e:0f:e9:64:a2:c3:5e:e5:4e:59:c4:67:69:18:
df:3e:99:3d:a4:90:20:9a:a3:59:42:46:64:7c:6a:5b:a4:7c:
97:81:30:e0:b9:58:27:22:cf:5c:a6:2f:c5:e0:0e:d8:42:ed:
21:4d:6a:d8:b1:d6:4c:af:a7:48:3e:aa:54:dc:77:c9:ee:e6:
10:11:eb:da:4c:7b:f3:ac:9e:dd:5d:e7:96:be:39:0a:02:8b:
4f:4e:4b:94:8d:39:bd:31:70:5c:bc:99:9a:64:c3:50:f4:35:
61:da:9a:46:3c:31:a9:94:2a:44:56:c7:50:47:e9:b1:71:43:
11:1e:3f:24:c1:65:c0:94:56:60:49:e8:a6:f6:42:11:bf:94:
68:de:fe:c4:28:31:0b:a3:d2:ce:c8:5e:ce:ba:35:44:3a:22:
07:13:bb:28:30:b7:1c:8e:2e:a0:54:97:f1:35:4d:d7:5e:ff:
79:36:a4:25:8f:6d:79:8f:6a:f4:68:46:9c:03:5e:fa:41:67:
1c:f7:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:51 2023 by rpki-client on console-ams.rpki-client.org