Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/gViQ0WWX_ldfYK-RjGrgObSY21o.roa
File: gViQ0WWX_ldfYK-RjGrgObSY21o.roa (raw, json)
Hash identifier: C1DYpIo3/W6mqAwLnGnxDFHe4CxUexLvaFXB/GOpW1k=
Subject key identifier: 81:58:90:D1:65:97:FE:57:5F:60:AF:91:8C:6A:E0:39:B4:98:DB:5A
Certificate issuer: /CN=2686d7e106b130ba85788dac3734cb628b139c49
Certificate serial: 01856E266E318E0905D85ACB695203B4B628
Authority key identifier: 26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/gViQ0WWX_ldfYK-RjGrgObSY21o.roa
Signing time: Sun 01 Jan 2023 16:24:50 +0000
ROA not before: Sun 01 Jan 2023 16:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202125
IP address blocks: 45.13.10.0/24 maxlen: 24
45.13.9.0/24 maxlen: 24
45.13.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:6e:31:8e:09:05:d8:5a:cb:69:52:03:b4:b6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2686d7e106b130ba85788dac3734cb628b139c49
Validity
Not Before: Jan 1 16:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=815890d16597fe575f60af918c6ae039b498db5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:18:7b:59:28:ed:59:da:a3:d3:37:50:4b:c8:
77:24:cb:24:6b:87:af:19:cf:f4:d1:66:25:ab:41:
c6:fd:12:e8:90:cb:68:72:62:bb:e0:62:0f:70:68:
f1:77:d6:0d:b4:50:ea:05:54:9c:71:91:a9:f0:9e:
37:e1:fc:da:a2:f4:b5:71:39:62:60:42:b9:5c:87:
c4:ee:56:9b:3e:3c:4e:ca:c6:17:c0:68:3c:f3:c8:
64:10:c8:30:2b:a9:27:c5:d1:c7:30:a1:18:c2:91:
b0:1d:80:23:5d:4a:97:ee:85:1a:f9:99:5b:a6:89:
e6:1a:56:6c:82:1c:29:c0:df:4b:8c:2a:1c:4f:28:
d4:25:d6:b2:11:24:13:51:8b:ae:96:fb:57:55:fd:
4a:b5:51:bd:f0:9c:93:8b:5a:0d:10:e3:7e:67:1f:
64:75:a3:99:ba:e3:27:d6:a8:2c:f1:ec:21:65:b4:
33:b5:0f:21:63:b4:a6:cd:9b:b9:37:a0:05:b9:66:
3f:61:25:27:de:db:9a:90:44:0a:60:c7:70:f0:b8:
41:33:82:2b:05:ad:1e:6d:2e:12:6d:1d:c0:d1:e4:
82:93:67:17:73:9d:6a:a3:09:79:71:75:08:87:e6:
88:65:28:f1:f4:c6:e0:cf:56:33:74:8b:c5:2a:ca:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:90:D1:65:97:FE:57:5F:60:AF:91:8C:6A:E0:39:B4:98:DB:5A
X509v3 Authority Key Identifier:
keyid:26:86:D7:E1:06:B1:30:BA:85:78:8D:AC:37:34:CB:62:8B:13:9C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JobX4QaxMLqFeI2sNzTLYosTnEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/gViQ0WWX_ldfYK-RjGrgObSY21o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/017424-38c8-49c9-8b4c-2396a4fb57be/1/JobX4QaxMLqFeI2sNzTLYosTnEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.8.0-45.13.10.255
Signature Algorithm: sha256WithRSAEncryption
71:97:f5:3d:06:79:1b:43:7f:75:82:25:33:34:4d:eb:cf:55:
2d:f3:88:8f:18:9b:3a:62:66:80:21:c7:90:6f:f7:7d:02:fc:
bf:a6:7a:4d:7c:d1:75:1f:04:4c:6e:a6:44:27:b8:58:5e:6e:
51:ee:a5:76:c0:9e:c4:12:ba:d4:70:5f:b9:98:45:ce:0a:8a:
9b:8e:19:13:23:14:bb:50:1f:26:0b:c0:93:eb:dc:d8:c2:46:
35:76:95:bd:87:60:56:a4:ad:13:d4:2a:f9:e6:59:cc:b3:53:
8f:18:bb:ab:63:1d:6e:5f:ab:6d:90:eb:b3:d0:4e:3e:1d:a3:
b7:f5:d7:16:a8:2a:81:63:1e:4e:e5:a8:b6:1d:27:b0:d5:92:
a8:b1:9a:c0:33:4d:e8:ba:32:cd:ab:f6:b5:51:ad:c4:97:5a:
9e:bb:ab:00:42:41:e0:6e:10:46:7d:db:41:01:cd:64:a5:8c:
03:3d:32:b3:09:77:ee:22:ce:15:60:3f:b1:42:7b:b5:0c:2a:
9f:9c:cb:ac:18:ea:90:4b:83:ef:58:43:f5:7e:aa:e1:6e:1d:
7c:3a:3b:92:3d:6a:1a:14:69:4e:49:9f:d8:9c:5c:18:cc:08:
48:b6:1e:62:73:4c:a9:51:c0:1d:1c:2e:3c:f4:e4:48:13:10:
c5:e8:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org