Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/bEz4dNevneCk-XZbHXHY2BkeTjI.roa
File: bEz4dNevneCk-XZbHXHY2BkeTjI.roa (raw, json)
Hash identifier: 5Cpv05sfNZNYO0ywK9iDJJhZWNm6SKrDpAlN28WluNk=
Subject key identifier: 6C:4C:F8:74:D7:AF:9D:E0:A4:F9:76:5B:1D:71:D8:D8:19:1E:4E:32
Certificate issuer: /CN=094895a071a3add9df3ec84e64547afdca6b62a3
Certificate serial: 08A8C23C
Authority key identifier: 09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/bEz4dNevneCk-XZbHXHY2BkeTjI.roa
Signing time: Sat 01 Jan 2022 06:06:41 +0000
ROA not before: Sat 01 Jan 2022 06:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2013333
IP address blocks: 45.11.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145277500 (0x8a8c23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094895a071a3add9df3ec84e64547afdca6b62a3
Validity
Not Before: Jan 1 06:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c4cf874d7af9de0a4f9765b1d71d8d8191e4e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:9b:29:eb:2f:62:78:d7:fc:c9:e4:10:42:
0c:41:9b:8d:01:f8:40:ed:ea:5f:78:02:44:9c:57:
89:d4:b5:31:a6:c6:45:6b:ba:60:a7:4e:73:96:5b:
c4:60:84:4d:a5:5c:6b:28:5d:4f:78:02:24:e6:25:
b4:f9:43:90:fb:ad:c9:ed:cc:0a:e5:3a:24:ab:7d:
de:bc:15:fd:b7:50:22:2b:f8:a0:59:65:0c:b1:ba:
67:41:dc:49:80:8a:d2:40:23:f7:75:30:06:96:5f:
c4:49:02:ad:73:d9:fa:fa:c4:f6:86:c4:cc:6e:20:
21:5f:19:98:e1:84:9e:54:21:1e:b1:f4:4b:ee:cc:
be:6a:60:db:cd:8d:60:15:00:d6:8f:61:9f:08:5f:
0a:ab:1b:e8:38:a1:c3:45:60:5d:f1:bc:18:ed:13:
72:bb:fe:02:fe:a0:69:85:72:83:87:fe:78:d7:de:
2c:d3:f8:07:2f:5f:73:49:ab:86:66:bc:9d:e5:4f:
7c:a1:87:bd:51:3c:6a:4d:ba:df:93:5f:eb:83:e1:
fa:77:b6:07:b4:1b:52:b6:82:86:ef:1c:c5:41:1c:
e6:45:6e:90:f5:23:11:f9:d5:0f:3e:a9:ae:65:3a:
2e:85:aa:cd:95:4e:2f:a0:c5:5b:6b:75:d1:24:d0:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4C:F8:74:D7:AF:9D:E0:A4:F9:76:5B:1D:71:D8:D8:19:1E:4E:32
X509v3 Authority Key Identifier:
keyid:09:48:95:A0:71:A3:AD:D9:DF:3E:C8:4E:64:54:7A:FD:CA:6B:62:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUiVoHGjrdnfPshOZFR6_cprYqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/bEz4dNevneCk-XZbHXHY2BkeTjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5cf307-650a-4384-a6b4-545d3068c666/1/CUiVoHGjrdnfPshOZFR6_cprYqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.116.0/22
Signature Algorithm: sha256WithRSAEncryption
68:e7:d0:d1:26:2f:b7:35:f9:ca:a9:30:34:94:d1:02:7e:e5:
9e:77:a3:02:92:e1:7a:bd:e8:90:34:f2:df:c8:7b:e0:62:d0:
4b:8c:fe:55:11:dc:65:3a:8e:a9:9d:70:47:df:9e:ad:48:fc:
1b:87:b1:38:87:ab:ac:3a:a2:fd:ee:91:7b:ad:dd:e5:31:0c:
9e:5b:d7:17:f6:bd:9a:e4:49:af:77:f0:fe:16:59:c6:4b:95:
20:e2:cd:38:37:0c:10:19:06:52:96:97:37:31:45:fc:fa:2e:
71:3d:77:e4:95:59:55:6e:36:49:75:70:27:33:21:ff:2d:cf:
a6:ad:5c:a2:bc:7a:d1:54:3f:e6:83:e0:88:66:de:68:58:25:
6d:97:db:95:9d:3e:98:7d:1c:34:b8:d7:65:b7:4a:81:73:1c:
22:78:3b:08:c3:10:f1:36:38:bf:c1:62:99:e8:38:af:67:27:
e9:3c:18:a5:2e:f7:85:84:33:33:cf:03:37:81:85:7f:49:46:
6d:de:47:df:ff:50:0a:63:11:7f:4c:34:74:7b:7c:c2:7f:d8:
b7:7d:a7:e5:bd:4c:0b:c9:9d:63:a1:d3:3d:3c:01:76:b7:41:
d0:da:f8:94:92:24:64:7c:49:15:6b:ef:50:22:7f:33:3f:4c:
46:7c:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:58 2023 by rpki-client on console-fra.rpki-client.org