Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/SkHqJh_qKk_WJFZKDdV1_DznJus.roa
File: SkHqJh_qKk_WJFZKDdV1_DznJus.roa (raw, json)
Hash identifier: XNs55HNTaemZ2+vqL+R+x9Z04VyNLtv82isCBwumadg=
Subject key identifier: 4A:41:EA:26:1F:EA:2A:4F:D6:24:56:4A:0D:D5:75:FC:3C:E7:26:EB
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0184A939519CE365E0B5849B9C4954417620
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/SkHqJh_qKk_WJFZKDdV1_DznJus.roa
Signing time: Thu 24 Nov 2022 10:40:16 +0000
ROA not before: Thu 24 Nov 2022 10:40:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16276
IP address blocks: 45.66.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:39:51:9c:e3:65:e0:b5:84:9b:9c:49:54:41:76:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Nov 24 10:40:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a41ea261fea2a4fd624564a0dd575fc3ce726eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:49:06:92:67:86:8e:36:3a:fd:6f:d8:8a:9c:
3d:a1:5b:df:72:84:da:b0:df:5a:bb:2e:bb:9e:53:
74:bc:7f:a6:4e:42:1d:51:20:f9:8f:09:74:8b:d4:
68:0d:df:cd:1a:a8:9f:04:b5:a6:cc:0c:06:bb:fc:
cf:67:b9:1a:9b:a7:4a:1a:24:03:87:46:26:f4:d8:
e5:af:8f:6f:2a:2d:ea:ef:d9:6c:2d:99:80:b9:83:
be:e8:fc:d2:5a:18:d3:a3:d7:bb:2e:ae:e6:a8:f5:
d2:11:a7:c4:84:f0:d2:44:6e:14:78:35:57:34:1c:
14:af:f9:7a:bb:f6:91:60:2c:10:3a:fc:9d:6e:66:
96:4e:6d:ce:2e:d8:c0:03:e8:5b:57:49:fd:11:ea:
af:5b:6e:3c:6f:40:a9:9a:45:2f:87:cc:51:fa:ad:
31:5e:6b:09:76:9d:85:f8:32:40:65:de:e3:5d:0e:
7b:9d:8f:f3:46:6e:01:bb:e0:04:8a:53:24:e5:91:
f2:fa:10:c5:f3:12:6f:cf:03:6f:a0:26:e3:62:f1:
32:f2:ee:d8:81:d8:39:2d:de:74:de:62:fa:88:0f:
11:3c:8f:94:26:39:27:b6:78:06:5e:7e:b3:2f:2e:
67:0b:33:f3:d7:ce:73:b3:10:5c:81:1b:38:51:bf:
1c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:EA:26:1F:EA:2A:4F:D6:24:56:4A:0D:D5:75:FC:3C:E7:26:EB
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/SkHqJh_qKk_WJFZKDdV1_DznJus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.230.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6e:35:09:cb:be:2c:b5:dc:ed:ef:7c:f5:a5:29:16:21:b5:
4d:b9:f2:ce:b9:cf:45:5b:ab:21:cc:90:7a:b7:4f:9f:b5:d2:
63:fe:cd:1a:f5:48:82:66:11:3c:f4:d6:10:a0:db:f4:17:b6:
61:b7:78:91:da:54:bc:21:42:7b:06:77:e1:be:0c:89:44:9d:
e1:4a:19:7c:67:ee:c3:b2:0e:3c:50:45:7f:46:06:77:6b:f4:
fa:ca:ec:19:bc:91:c2:be:ec:ef:a2:1b:d3:c8:2a:aa:d1:8b:
d8:40:5c:1f:a1:b9:a3:08:85:ef:88:db:39:df:ca:cd:7b:dc:
a6:ad:2d:97:e3:57:46:74:c8:83:83:42:a3:72:8b:24:98:04:
e5:27:3a:40:44:fd:e6:22:9a:ce:4a:90:55:f6:83:10:20:16:
85:15:f3:81:bb:af:17:61:ac:4d:6d:43:15:87:bc:22:73:be:
28:ed:c1:2d:e9:d6:cc:ba:43:3f:59:dd:25:04:bc:48:98:7d:
a0:a0:72:93:5b:be:5f:07:38:20:0f:14:4a:d5:98:80:91:2c:
8a:f5:91:de:e2:e6:72:60:55:8f:53:df:da:c7:8f:40:7c:1f:
eb:ae:12:ba:43:a2:3b:b0:f1:cf:4e:06:b1:ac:46:d7:db:65:
bb:8e:b1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org