Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/g1scs_CTAQBoCTTTVLl0kqmI_ds.roa
File: g1scs_CTAQBoCTTTVLl0kqmI_ds.roa (raw, json)
Hash identifier: qdGNIW8nlvGzVTbOOVMgRYtVuwOpxbnnmqKSnSfLHgc=
Subject key identifier: 83:5B:1C:B3:F0:93:01:00:68:09:34:D3:54:B9:74:92:A9:88:FD:DB
Certificate issuer: /CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Certificate serial: 0184373F0CF74BDFE0FE9FC064E75D5A71E1
Authority key identifier: 6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/g1scs_CTAQBoCTTTVLl0kqmI_ds.roa
Signing time: Wed 02 Nov 2022 07:29:49 +0000
ROA not before: Wed 02 Nov 2022 07:29:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 45.66.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:3f:0c:f7:4b:df:e0:fe:9f:c0:64:e7:5d:5a:71:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5d7c4d54e4cd5cdda878c7bb7c61964a30244f
Validity
Not Before: Nov 2 07:29:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=835b1cb3f0930100680934d354b97492a988fddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:82:3b:e7:12:c0:17:41:d3:ec:34:49:92:
a3:fc:1c:dc:c9:44:22:d6:77:40:5a:76:02:ba:06:
a7:cc:b4:59:1d:5c:bc:1f:cb:76:8a:4b:c2:db:47:
cb:1d:e2:f4:a0:12:dd:a0:b7:c6:06:11:ed:a7:a6:
95:4b:43:72:3e:12:df:6a:32:85:04:31:f7:23:f7:
e2:e6:42:27:fa:be:71:78:88:fc:c8:a4:40:82:41:
31:5f:29:f6:5e:b4:e8:0c:32:04:f5:fd:01:ca:08:
30:2f:74:56:6f:c5:30:a7:bc:9c:c1:58:ca:a6:2b:
ae:d0:46:21:77:a4:86:14:75:8f:2f:1c:e1:a1:97:
d2:f6:da:66:80:04:d5:89:62:40:6c:7a:43:86:91:
4f:50:9c:06:af:19:82:66:b4:dc:54:f0:8b:18:6f:
08:fb:d5:5e:71:6f:4e:f0:ff:03:69:36:fb:cd:74:
b4:b3:73:26:67:08:49:3c:13:79:fc:1e:7b:77:55:
b1:e8:37:ed:c1:c8:9a:dc:23:15:76:02:4d:2c:cf:
96:21:16:5b:2d:76:d2:15:14:c5:b9:fb:df:84:7a:
fc:9b:78:4d:ab:5e:8a:5d:7e:64:1b:ae:9e:0d:61:
31:89:68:64:31:09:67:ac:90:b1:27:81:44:34:68:
8a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:1C:B3:F0:93:01:00:68:09:34:D3:54:B9:74:92:A9:88:FD:DB
X509v3 Authority Key Identifier:
keyid:6D:5D:7C:4D:54:E4:CD:5C:DD:A8:78:C7:BB:7C:61:96:4A:30:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV18TVTkzVzdqHjHu3xhlkowJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/g1scs_CTAQBoCTTTVLl0kqmI_ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b69ea-5d9a-49e1-bab2-52ffd4099973/1/bV18TVTkzVzdqHjHu3xhlkowJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4d:a5:f9:4b:e7:fd:8e:a0:25:7f:0e:89:f0:8b:23:cd:6d:
da:89:6b:2a:f2:03:55:e0:68:4e:84:97:72:d5:9e:d0:a2:09:
43:ae:08:aa:f4:d1:08:6c:54:50:da:44:5d:3d:98:6e:c3:ab:
fc:23:59:11:e3:82:49:db:47:30:4e:c5:a9:65:1a:5f:b5:dc:
db:8e:23:01:bf:fe:6a:ec:69:65:60:a0:9b:28:34:4c:09:4d:
70:ed:9a:44:16:2f:84:95:4f:84:bd:b0:83:f5:78:e0:75:7e:
4c:5b:66:6e:1b:1a:89:be:e5:36:9f:a9:41:75:cf:86:fa:95:
f8:2c:56:06:0e:33:e8:82:91:e1:08:0c:7f:49:3b:e2:c5:64:
75:5f:f5:05:f3:2b:4b:ad:bd:b6:e7:4f:27:69:b7:29:1e:a3:
82:5a:f0:3e:18:b2:79:ec:a8:88:8c:b5:b3:ad:24:4b:bf:2b:
7b:b5:d1:62:f1:89:be:6f:28:fe:92:6a:63:40:9b:f6:b3:45:
41:01:5f:a6:71:3e:57:3f:11:91:40:d5:f8:0f:17:3d:7d:f5:
07:e6:0b:cc:a0:19:ca:0e:36:c9:0a:ff:6d:cc:2f:fa:e0:92:
62:6b:43:12:9f:a2:6e:07:01:a3:07:18:dd:08:9a:64:71:32:
0b:42:a7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:52 2023 by rpki-client on console-ams.rpki-client.org