Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bDScIvTibAgLLNxdyCwZgRKOEbY.roa
File: bDScIvTibAgLLNxdyCwZgRKOEbY.roa (raw, json)
Hash identifier: AUSRBeCiP4iqqO1bQNZQad9c8mSdOck4S+i2gOAC6Qg=
Subject key identifier: 6C:34:9C:22:F4:E2:6C:08:0B:2C:DC:5D:C8:2C:19:81:12:8E:11:B6
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0183E9739D9A3802DBEA61569E435BBEEEBA
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bDScIvTibAgLLNxdyCwZgRKOEbY.roa
Signing time: Tue 18 Oct 2022 04:56:51 +0000
ROA not before: Tue 18 Oct 2022 04:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.66.229.0/24 maxlen: 24
45.66.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:73:9d:9a:38:02:db:ea:61:56:9e:43:5b:be:ee:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Oct 18 04:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c349c22f4e26c080b2cdc5dc82c1981128e11b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:32:bf:d1:2f:53:f4:58:01:75:b8:ff:52:
6b:f7:0f:8f:04:46:01:b9:3d:eb:8d:fd:62:95:f6:
95:fd:98:4c:69:cc:43:b0:cb:c7:a5:23:6e:a6:70:
f9:e4:32:b2:5c:51:9c:d4:2f:2e:88:a5:b6:55:2a:
6e:b5:9f:7e:3d:b8:82:0d:8f:cf:0c:32:49:99:74:
29:30:be:09:45:c8:7d:93:16:cf:9e:17:46:71:d3:
92:3a:df:ce:69:4b:37:8c:8b:0d:8a:21:4b:c0:3d:
95:49:05:86:b5:7c:e4:88:fe:0c:c4:3b:dc:4a:f0:
0e:1e:d7:13:58:a0:39:bf:e8:93:02:d3:f0:f9:49:
02:b2:1a:c6:79:84:2d:79:0e:a2:c2:44:97:63:f7:
c2:b4:d3:a7:a1:4e:70:ef:2e:43:8c:2e:5b:10:af:
57:f9:92:23:b8:64:2b:5b:e9:25:ce:51:f9:7c:e2:
86:f8:89:e9:60:d3:d4:e8:78:4f:f7:b0:67:72:9f:
59:de:83:1a:bf:eb:3b:3a:68:07:09:0e:8c:d1:61:
c1:f6:09:0b:85:e6:96:a0:94:82:7e:de:60:4b:eb:
49:fd:f1:b7:ac:2d:13:e7:60:4e:e3:48:44:63:8e:
09:11:8f:bc:16:3b:9a:5e:59:60:77:20:d1:a5:f1:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:9C:22:F4:E2:6C:08:0B:2C:DC:5D:C8:2C:19:81:12:8E:11:B6
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bDScIvTibAgLLNxdyCwZgRKOEbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.229.0-45.66.230.255
Signature Algorithm: sha256WithRSAEncryption
98:bf:0d:97:00:3b:e8:f0:57:24:64:c9:10:65:09:59:31:4d:
6f:18:08:c6:1e:ae:cf:5d:fe:66:08:de:0c:c1:c8:5f:7a:66:
f1:e9:bb:3a:7d:5c:8c:8c:9d:0a:a4:c1:a7:49:71:5f:23:eb:
88:fe:48:65:6e:63:ad:32:29:af:a9:39:d2:ee:d3:f1:aa:bc:
3c:7e:8a:be:42:b5:8f:44:9e:48:05:a1:3d:75:77:a0:12:ae:
b3:6d:8b:d8:7e:48:5d:fd:fa:3f:c2:44:3c:28:0b:0a:e6:85:
c6:84:ba:ab:25:87:ce:91:04:f2:c1:9f:f6:7a:5c:7c:d5:82:
db:ba:d9:a4:f4:1f:24:a2:af:ba:57:25:5c:69:34:af:c7:50:
95:9b:fd:fa:56:b1:e9:2c:11:a0:8b:97:85:81:23:95:9e:71:
f9:32:e1:85:00:37:51:b3:18:18:2a:87:d1:e5:81:73:bc:c0:
a4:69:1e:0c:5f:5c:e5:22:17:3f:7a:b5:25:ff:83:d2:9d:50:
ef:fc:df:06:e2:e7:2b:9e:c2:a3:24:73:31:72:80:a5:d1:3c:
2f:20:07:f3:41:de:7f:52:69:e4:aa:69:01:0f:91:6e:6e:26:
2f:74:c4:51:7e:f1:63:e7:07:e9:3f:10:74:dd:d1:84:43:99:
a9:e4:e0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org