Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/3CSBYmlgcSgJlCDnwa1A9IDCU1k.roa
File: 3CSBYmlgcSgJlCDnwa1A9IDCU1k.roa (raw, json)
Hash identifier: x+d7OvmLNReKt8e7JgtvSslr3fE3oI8F2osuijhA0Jw=
Subject key identifier: DC:24:81:62:69:60:71:28:09:94:20:E7:C1:AD:40:F4:80:C2:53:59
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0183E56657C53F7096CDED1AB9509B97EB79
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/3CSBYmlgcSgJlCDnwa1A9IDCU1k.roa
Signing time: Mon 17 Oct 2022 10:03:53 +0000
ROA not before: Mon 17 Oct 2022 10:03:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210546
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:66:57:c5:3f:70:96:cd:ed:1a:b9:50:9b:97:eb:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Oct 17 10:03:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc24816269607128099420e7c1ad40f480c25359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:12:1a:d0:1f:ca:17:db:f7:af:1d:26:41:
b0:71:8d:ac:55:c9:28:47:8a:ba:23:ee:77:a4:0c:
05:81:9f:53:14:55:ce:81:67:19:fb:75:89:ed:1d:
f8:6e:33:4e:33:3e:b9:16:6d:0c:4a:02:69:96:66:
20:ac:50:0b:60:93:a0:18:45:7f:b7:4e:11:a7:8b:
52:ac:cc:4c:a4:02:55:f8:3d:d8:2d:fe:d0:f8:b4:
a4:71:60:48:d2:21:b7:e9:61:9e:b8:9c:f5:90:9d:
30:5d:1c:4d:64:f7:1a:23:9e:31:e1:e2:d5:f6:4a:
10:f0:7a:1f:40:98:c8:b7:ca:d8:a0:3d:d8:33:f1:
0a:d9:57:b0:a5:48:3a:0f:96:a6:d8:49:e9:20:39:
ce:6d:e0:ae:54:c2:c8:e7:78:8b:48:60:53:56:5d:
5b:29:b8:a0:ae:4b:ee:cf:f2:12:76:14:7c:b8:c2:
b6:93:be:3e:85:92:19:a1:ec:6f:ab:03:4a:26:8b:
f6:04:6e:7d:55:91:df:a3:51:be:89:44:a8:ee:bf:
e5:70:a3:02:53:fd:59:10:76:ba:b1:2f:4c:ae:96:
6f:db:c8:ef:f5:2d:1a:20:46:1e:48:76:ed:72:1a:
40:a0:e6:ae:bf:57:c0:3e:c9:d9:f5:15:17:b9:11:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:81:62:69:60:71:28:09:94:20:E7:C1:AD:40:F4:80:C2:53:59
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/3CSBYmlgcSgJlCDnwa1A9IDCU1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
93:98:12:76:ff:36:f1:1d:ba:e0:5b:1d:0c:36:9b:2a:c9:b5:
39:43:c5:ee:85:b5:a2:1b:ed:6d:3b:d7:0e:83:67:61:08:fa:
80:09:ec:94:17:10:aa:1a:ca:21:42:4f:14:6f:d2:0a:f6:46:
81:a9:31:42:4f:89:ed:36:87:44:c8:ed:60:57:af:4d:f5:45:
c6:1a:67:57:76:7f:4c:93:0c:5e:54:27:15:a4:6f:2f:d9:a5:
71:c5:08:1e:4c:34:b9:0b:f7:9c:ad:26:09:3c:07:2d:8a:03:
12:ce:42:1e:67:e7:42:10:d5:23:96:c0:1d:78:54:52:b1:01:
fe:80:d0:fc:e3:c5:b5:5c:d2:5c:96:91:e9:6c:c3:67:c9:2c:
2d:fb:2d:d7:35:98:f6:15:09:09:73:ce:47:d3:77:a0:f7:02:
5e:38:0d:73:02:c6:c2:81:a4:92:57:be:ab:4b:68:de:ed:16:
f6:ba:76:85:9c:7d:99:23:fa:b3:67:17:c1:fc:d6:a1:54:d4:
12:fe:93:98:0f:6b:52:aa:65:fe:84:32:c0:f1:cc:24:c5:17:
4d:17:b9:0d:e3:fc:a7:fc:9f:c8:95:d6:4e:05:6e:d4:e7:25:
07:8d:ff:05:68:66:b9:77:bc:cd:2b:33:e0:14:c9:1d:ca:f1:
af:48:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org