Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1-DNColI_2vV1UEmaibvzEFwPOZI.roa
File: 1-DNColI_2vV1UEmaibvzEFwPOZI.roa (raw, json)
Hash identifier: T9TrIaMZ9FrZJcIGWL6a3cbT0XkgK0Roz92BhJXIi/8=
Subject key identifier: F8:33:42:A2:52:3F:DA:F5:75:50:49:9A:89:BB:F3:10:5C:0F:39:92
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 04C631A6
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1-DNColI_2vV1UEmaibvzEFwPOZI.roa
Signing time: Thu 14 Apr 2022 11:16:31 +0000
ROA not before: Thu 14 Apr 2022 11:16:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.150.204.0/23 maxlen: 24
45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80097702 (0x4c631a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Apr 14 11:16:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f83342a2523fdaf57550499a89bbf3105c0f3992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:47:90:c9:ba:7a:8f:44:7c:c7:d5:de:36:17:
83:2c:99:9e:de:9b:c6:9b:c4:e4:d2:0f:1c:ec:d8:
3b:bf:70:7c:e0:a8:d9:3b:19:62:98:5b:d1:e9:7c:
31:15:4f:ae:85:82:1e:57:e2:2a:17:b8:49:22:bf:
11:5d:27:c7:a6:00:2b:d3:28:21:12:a3:96:5f:22:
a9:64:e0:95:d6:ac:8b:8e:3d:59:6c:c9:ce:31:32:
16:cf:fe:9e:df:84:32:35:81:40:2c:c5:6e:ab:0d:
4f:c8:44:ac:28:27:52:52:ba:7f:ba:6e:5a:a6:de:
da:17:17:0b:59:ac:46:4f:89:05:b2:3c:53:78:92:
97:09:be:74:95:2c:48:3c:d2:61:52:09:9d:ea:1c:
23:9b:91:45:b5:a2:3a:8b:ef:d4:0b:c3:e1:d3:08:
8c:a6:2b:8b:7d:e8:b2:0b:0e:b0:62:19:e8:6b:c6:
2d:df:37:c4:33:a4:1a:30:40:20:2c:a0:4c:c1:7e:
3e:6a:04:d7:45:13:b2:1d:23:d2:69:11:84:1e:2a:
ce:c7:05:1e:14:42:bc:f9:60:e4:54:e1:f2:da:a3:
74:8d:41:4a:64:a2:3f:3f:53:e8:74:da:2f:87:e8:
99:38:35:d4:ad:a5:87:a0:8e:ba:81:0e:40:14:3d:
7b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:42:A2:52:3F:DA:F5:75:50:49:9A:89:BB:F3:10:5C:0F:39:92
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/1-DNColI_2vV1UEmaibvzEFwPOZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
194.150.204.0/23
Signature Algorithm: sha256WithRSAEncryption
50:b8:59:04:a8:6c:03:05:1b:b9:84:28:45:2e:29:3b:79:2b:
39:6b:ff:d9:f0:8d:bb:1e:a6:80:c0:fb:7d:b1:97:cd:66:63:
dd:3b:a9:62:67:8b:10:9f:57:16:e3:01:95:b8:75:ff:17:57:
8e:cd:5a:6f:16:bf:cf:8d:0c:6a:c7:12:e8:de:88:13:d0:84:
6f:2e:45:d2:ce:fb:39:30:b6:ec:9d:d6:37:08:fd:92:4f:fc:
5b:c7:62:eb:3e:d8:4e:6b:28:32:50:3b:1d:7d:e8:da:91:ed:
71:21:48:28:da:c2:6a:f1:6d:7a:fa:62:f0:8c:7f:72:2b:4e:
e1:4d:b4:cf:67:a1:b0:df:cf:6d:4d:18:47:55:be:74:a3:9c:
41:f6:e7:80:52:a5:a5:46:01:ed:9c:e3:3f:60:74:fd:ad:7b:
ea:ed:3c:72:6a:28:9f:2f:22:c6:12:57:7b:bd:3f:6f:82:76:
79:86:30:d7:c0:55:b1:cb:e2:d1:bb:7b:7b:ad:e1:1b:ca:50:
bd:61:73:65:98:af:fd:a9:69:f4:2d:f7:45:15:8f:b4:8d:28:
ef:2c:7b:83:7f:be:b5:80:8b:fa:ba:c6:27:94:59:30:fa:52:
d8:4a:38:73:84:8a:a9:dd:7b:0d:de:c1:05:27:7e:25:1e:b5:
51:3c:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org