Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/eW8ZwWQrO21nGXl9j4oHRui164k.roa
File: eW8ZwWQrO21nGXl9j4oHRui164k.roa (raw, json)
Hash identifier: RhCJrxOGTGaLyalDbhJ/hL46A3NK1KBvOzXhPgJVqWg=
Subject key identifier: 79:6F:19:C1:64:2B:3B:6D:67:19:79:7D:8F:8A:07:46:E8:B5:EB:89
Certificate issuer: /CN=45dab507c08976cc29d177373de627a1ce86efae
Certificate serial: 0DA1FFD6
Authority key identifier: 45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/eW8ZwWQrO21nGXl9j4oHRui164k.roa
Signing time: Sat 01 Jan 2022 08:59:30 +0000
ROA not before: Sat 01 Jan 2022 08:59:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2723
IP address blocks: 213.198.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228720598 (0xda1ffd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45dab507c08976cc29d177373de627a1ce86efae
Validity
Not Before: Jan 1 08:59:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=796f19c1642b3b6d6719797d8f8a0746e8b5eb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:10:c0:5e:04:f3:e7:7e:57:0d:25:46:f1:
f3:79:c7:00:a6:ab:84:f6:aa:cb:2d:48:73:34:eb:
cc:6e:17:34:9b:a2:4e:a9:95:6d:0d:9e:9f:1b:52:
b4:97:aa:b9:ac:95:9e:03:89:4c:85:18:a7:78:07:
5e:ea:4f:c5:40:ee:1b:ad:10:21:8c:a7:04:89:41:
5a:fe:d8:59:e9:96:68:08:83:fb:f0:e1:41:9f:c3:
db:97:3f:45:d7:08:5c:38:03:b2:cb:ce:93:0c:ad:
4e:f1:41:ac:f8:9a:50:e9:d8:3f:7b:e7:a8:b6:f2:
bc:5a:fa:6c:9c:00:59:17:17:48:d0:46:fa:dd:71:
a0:97:93:12:69:43:cc:8e:f1:52:e8:51:30:3e:4c:
d7:9a:99:52:6a:e3:a1:e9:a1:9d:ad:eb:f8:2d:d4:
8f:df:9e:a7:1d:27:d4:b8:6b:60:b7:8f:8e:b3:fe:
02:c8:a8:85:f2:53:27:81:34:9c:0d:f1:44:a2:9b:
03:ab:69:f3:9e:82:39:4e:5c:69:3c:80:47:06:07:
59:fb:a7:30:bd:8f:81:f3:4a:cd:06:f5:30:d4:a4:
3d:40:5c:2d:76:c9:ed:e2:5a:e0:66:14:42:37:2b:
3f:c1:1d:28:57:b8:24:1b:b4:53:52:1e:60:da:b9:
aa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6F:19:C1:64:2B:3B:6D:67:19:79:7D:8F:8A:07:46:E8:B5:EB:89
X509v3 Authority Key Identifier:
keyid:45:DA:B5:07:C0:89:76:CC:29:D1:77:37:3D:E6:27:A1:CE:86:EF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rdq1B8CJdswp0Xc3PeYnoc6G764.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/eW8ZwWQrO21nGXl9j4oHRui164k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9aa500-f3bd-477b-9082-aa0b11564a32/1/Rdq1B8CJdswp0Xc3PeYnoc6G764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:61:f9:1a:f2:05:f5:18:08:91:de:96:c5:43:23:0a:e1:d7:
fa:ca:af:70:41:fb:0a:15:a6:38:a2:4b:08:18:07:40:9f:71:
2d:4a:02:bb:ec:5e:95:5a:50:2b:a2:9d:3a:5e:f9:dc:11:3a:
9e:ee:e3:36:c4:28:71:84:42:08:a1:1a:4c:36:b5:01:cd:bf:
9b:2b:2a:cb:00:23:84:5b:34:d7:a6:f6:8d:10:ed:0f:5a:96:
25:de:ad:40:c5:40:cb:9f:8a:23:42:2f:9b:6d:be:71:c6:27:
f9:54:38:ac:64:94:69:6b:e0:4a:f6:eb:e5:ed:6c:38:8f:3c:
39:56:5d:8c:b4:77:d7:0a:8a:bf:8b:c0:d3:41:45:aa:30:7f:
5d:fc:37:ce:f8:a9:80:6d:36:24:13:50:7c:60:aa:a7:6e:80:
7b:c1:85:c9:e7:83:6e:af:b7:2f:86:0f:8c:bd:71:40:10:b6:
6c:e0:9b:b9:0c:2a:c1:6d:66:b5:58:93:f0:32:94:4e:5e:2c:
2c:e9:e4:7f:19:e8:f3:5b:31:3a:ae:9b:8b:08:cc:5f:9e:13:
4f:2f:98:8f:b7:d0:3e:44:12:17:10:0f:09:c8:67:fa:0f:fc:
fe:98:f3:e1:b7:df:61:f4:11:9d:38:97:28:c7:95:97:2d:dd:
d4:23:ab:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:05 2023 by rpki-client on console-ams.rpki-client.org