Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4Nd1J8k-51KmSixTYyvlpYc52dM.roa
File: 4Nd1J8k-51KmSixTYyvlpYc52dM.roa (raw, json)
Hash identifier: RT5KHmIAUOhwjZKL3irmkEiMAYXfRzzBWtHahJmHKtY=
Subject key identifier: E0:D7:75:27:C9:3E:E7:52:A6:4A:2C:53:63:2B:E5:A5:87:39:D9:D3
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 01821B92D55385E29DFC38942FFB14B524F8
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4Nd1J8k-51KmSixTYyvlpYc52dM.roa
Signing time: Wed 20 Jul 2022 12:26:23 +0000
ROA not before: Wed 20 Jul 2022 12:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203098
IP address blocks: 185.90.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1b:92:d5:53:85:e2:9d:fc:38:94:2f:fb:14:b5:24:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Jul 20 12:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0d77527c93ee752a64a2c53632be5a58739d9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:bb:36:53:64:d1:57:98:e3:32:81:ab:17:
15:ca:d7:0d:8d:b5:e5:c1:e0:e1:41:04:93:25:88:
7f:04:03:91:2e:b9:6f:f8:83:00:4c:d0:30:0f:1a:
da:22:d8:cd:e7:17:14:6e:da:d6:1d:27:01:77:f0:
d2:01:55:71:a6:66:6e:59:d8:a0:7d:d0:6e:d7:fc:
15:2d:60:79:b5:eb:d9:f4:a2:7f:a2:6c:59:c8:44:
20:ea:96:e2:3c:01:eb:0d:fc:5d:6e:95:19:f0:d5:
31:de:5f:e1:c3:7a:66:72:82:81:f1:74:4b:a8:f3:
b8:2c:50:b0:a3:b0:81:c5:fb:fc:96:65:ff:50:77:
1e:dd:6a:e5:d6:c9:48:96:9c:d3:50:e6:9c:a1:a0:
f4:84:be:aa:65:0a:ae:43:c4:59:e6:e2:88:0b:53:
52:88:4b:7b:28:f1:3c:c9:c7:c5:3d:ca:7a:81:da:
97:63:d6:d3:d8:98:78:a8:e8:e5:27:ac:2e:d9:46:
5a:77:23:4c:fc:3e:aa:95:be:ba:12:5a:0d:61:3d:
e5:8a:f7:9e:8d:f4:36:d1:73:76:1f:d8:23:ed:40:
43:78:88:cb:3b:cc:9e:22:da:0f:39:92:f6:b0:7f:
43:04:29:3a:c9:f0:74:ce:67:c1:9d:cf:c8:95:67:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:75:27:C9:3E:E7:52:A6:4A:2C:53:63:2B:E5:A5:87:39:D9:D3
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/4Nd1J8k-51KmSixTYyvlpYc52dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.63.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b0:23:7b:7c:17:22:d3:f2:dd:5d:90:c3:f6:b9:37:36:eb:
eb:38:5d:0d:34:50:f8:01:3c:0a:a5:da:b6:72:b2:1e:72:ac:
c3:2b:2b:cc:05:82:4d:54:89:1f:8d:b0:8c:89:12:5c:69:12:
51:d1:07:6e:d1:5c:c7:5b:eb:a8:80:96:ef:6c:38:85:6f:69:
96:0a:b2:24:a7:83:69:45:27:8f:d0:15:e6:fb:97:a1:e2:46:
9b:51:30:04:8e:69:f1:13:01:3a:11:22:3f:69:21:ef:d0:5f:
3f:6f:01:8e:f0:6c:af:a6:90:8e:23:c6:d3:04:fd:bc:cc:be:
3f:b5:94:a0:51:00:19:3b:bb:e9:72:36:b2:4d:45:bd:6f:d2:
a4:ca:66:71:2b:0f:c2:df:6a:ca:08:38:94:f2:83:a9:2f:a3:
6e:b7:c4:c3:39:9c:9f:53:f7:dd:c1:33:f0:96:db:4b:18:01:
21:99:b8:f1:68:95:53:c6:8a:4d:ec:38:45:3d:11:f4:48:ab:
e6:18:ee:7c:5a:39:e7:99:5f:af:33:6f:fe:2d:df:b7:78:e6:
8d:24:d3:76:3a:bb:4f:e8:81:d9:aa:68:9f:d2:5f:7a:d1:cb:
19:40:a4:11:80:b9:16:d8:a8:92:0e:98:37:67:55:c9:b7:26:
e5:4d:d5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:16 2023 by rpki-client on console-ams.rpki-client.org