Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/3QhPrB86KL2nttRZcmb6rp2D7Bw.roa
File: 3QhPrB86KL2nttRZcmb6rp2D7Bw.roa (raw, json)
Hash identifier: zTO3TV7h9aEibH7CJ8TPRG39sLNijU+BBaqov2uwJg4=
Subject key identifier: DD:08:4F:AC:1F:3A:28:BD:A7:B6:D4:59:72:66:FA:AE:9D:83:EC:1C
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0184E3F2751E4BC1AC5A8A47E90924FED8D6
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/3QhPrB86KL2nttRZcmb6rp2D7Bw.roa
Signing time: Mon 05 Dec 2022 20:20:28 +0000
ROA not before: Mon 05 Dec 2022 20:20:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211415
IP address blocks: 45.88.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:f2:75:1e:4b:c1:ac:5a:8a:47:e9:09:24:fe:d8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Dec 5 20:20:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd084fac1f3a28bda7b6d4597266faae9d83ec1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2c:62:a3:06:28:a5:45:39:ad:8e:30:bb:21:
95:28:e3:a9:7f:c9:d3:58:3a:f5:78:34:a3:63:44:
51:8b:79:5a:53:48:91:ff:2e:93:eb:83:00:c5:45:
39:5f:57:41:05:18:20:83:6d:7a:1d:6a:1b:e5:94:
20:dd:f3:aa:0e:69:01:24:13:83:cd:78:76:93:73:
10:f6:1c:bf:55:0f:ab:e9:03:2a:ef:a7:c5:df:00:
69:50:41:8e:ae:61:81:4b:d6:9c:bb:61:e8:b8:50:
fc:14:d4:bc:5d:20:ab:07:e8:d1:6f:c6:16:e6:bc:
36:fe:95:b1:c8:cf:b3:98:70:ec:6b:a9:c6:95:6b:
f7:2a:e9:fe:00:29:a7:87:a1:5e:7a:59:b3:75:ea:
5b:4a:bd:1f:85:91:99:3b:98:64:42:04:c8:ed:66:
2d:cb:66:b7:db:a2:5d:b8:c2:86:52:ad:0f:0c:46:
84:5e:c0:30:a7:70:cb:7d:55:e6:53:c6:6f:b4:d8:
5b:9d:a8:d0:3b:1d:14:43:31:1d:94:0e:83:55:3c:
f1:55:6c:df:83:21:a0:9c:3c:26:7f:1b:fa:41:ef:
21:a7:2e:64:68:c4:c6:60:3c:80:83:ac:5d:d0:12:
7d:09:78:2f:5a:00:73:ca:bb:52:02:ed:a7:3c:04:
46:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:4F:AC:1F:3A:28:BD:A7:B6:D4:59:72:66:FA:AE:9D:83:EC:1C
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/3QhPrB86KL2nttRZcmb6rp2D7Bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
44:48:6a:f7:6f:d5:ee:40:cc:28:b1:cd:e1:9f:75:a7:0b:2a:
10:3e:c3:05:de:bb:1b:c3:a0:8e:4a:dd:1a:19:16:58:7e:d8:
cb:64:44:db:6a:44:57:6c:74:ca:9c:1c:64:22:e2:e3:70:a4:
e2:d1:41:4c:0a:d4:c6:f3:e3:ac:32:0a:51:20:b3:65:0a:df:
7f:a8:82:06:87:8f:10:13:f8:4c:b9:a3:55:3b:c1:d2:bd:15:
93:f7:12:7e:2f:c3:d8:53:e0:c2:dd:35:2b:31:69:42:e0:49:
3d:ad:28:c6:a0:19:0f:ad:c0:3d:a3:be:13:1f:e1:67:2b:fa:
07:42:20:02:7e:2a:db:5a:ec:40:e4:05:19:9d:31:18:e6:6c:
1f:c4:c4:fc:cd:8c:40:fa:4f:15:86:90:83:82:6f:5c:81:a3:
2c:55:48:04:e7:76:0b:8c:1c:cc:29:83:b2:42:a5:7b:39:84:
58:86:87:15:ce:79:bb:1c:cc:48:ca:c2:ab:10:6c:01:50:15:
ec:3c:70:8b:33:5a:db:69:7c:52:d1:4e:cd:ca:72:ae:10:08:
f4:9d:f9:ce:f4:ff:bc:0c:98:44:d1:fe:1a:c5:e4:c4:25:a9:
8d:d6:30:cf:02:38:8a:a9:db:cb:2a:68:4b:40:b8:70:e1:6b:
fc:87:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org