Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa
File: 4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa (raw, json)
Hash identifier: 2LnOlCV/co2uJ/sqXaTh3N8vf4OKQaF+mC8oZcNpnDk=
Subject key identifier: E1:9C:98:63:B4:64:D3:59:EE:35:02:11:F1:53:0B:10:F3:D6:A9:FC
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C138309706530E30AAB35DA53A236
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa
Signing time: Mon 02 Jan 2023 07:04:49 +0000
ROA not before: Mon 02 Jan 2023 07:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42093
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:13:83:09:70:65:30:e3:0a:ab:35:da:53:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19c9863b464d359ee350211f1530b10f3d6a9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:35:c6:59:4b:5a:ee:de:c9:ed:24:c3:16:
61:cf:dd:9a:31:75:73:b9:dc:98:59:d6:db:df:fc:
a6:9d:f0:f2:4b:19:fb:dc:6f:e2:6c:91:53:9e:3a:
1d:1a:cf:cb:9a:6d:44:58:08:f2:a8:37:d4:3b:4a:
8a:98:5d:76:26:02:1c:8d:ab:df:cd:93:41:fb:df:
89:ae:35:cc:ed:4e:c0:8f:2a:77:23:5e:a3:3e:13:
7e:0f:a4:7f:47:99:4f:e9:f4:90:5b:fb:50:c4:38:
a9:ed:08:8a:70:d5:0f:41:68:25:15:c3:2d:e5:80:
fc:9e:67:07:c6:4e:2d:4e:eb:f2:57:0e:78:42:77:
86:a7:ec:cb:eb:71:ea:2b:37:aa:46:88:e4:96:fd:
98:53:17:0a:94:64:67:d1:49:24:c2:ff:90:e9:d5:
cc:03:5f:7c:0f:b2:11:f7:8a:58:a2:db:76:f4:e5:
0b:f3:fb:2b:b4:b7:0a:6c:23:7c:b9:86:7f:41:8a:
c4:c2:f9:f2:13:8a:d3:03:17:4a:f9:0f:09:8b:ae:
8f:f4:34:da:af:8d:a6:c6:43:9b:13:fd:d2:5a:bb:
dd:dc:b8:b1:fc:95:26:16:4e:68:73:eb:23:bf:4f:
da:f4:47:5c:68:ff:05:1b:17:f0:1b:07:9d:9d:16:
74:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:98:63:B4:64:D3:59:EE:35:02:11:F1:53:0B:10:F3:D6:A9:FC
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/4ZyYY7Rk01nuNQIR8VMLEPPWqfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
37:47:af:ff:b9:1f:2b:ca:a8:49:b1:d9:9a:b9:3b:6b:65:45:
48:d9:22:4c:93:f4:1e:ad:27:55:fc:62:a7:54:60:ec:25:02:
1d:57:21:c7:05:1f:65:81:41:00:49:a9:1a:12:a6:e6:6c:39:
ad:5c:34:ac:45:a8:62:b5:ae:e3:ea:ab:7f:66:a0:23:76:78:
c0:da:cf:9f:d8:99:79:b1:34:42:67:44:bb:f1:a6:5b:ab:cb:
d1:ed:92:c9:27:45:2f:89:08:c7:e2:77:e5:fc:94:be:8b:1e:
88:96:ca:2b:6c:cb:c1:33:3c:e1:0d:21:ee:e0:7b:88:dd:00:
99:c6:9a:a6:44:f7:91:f3:79:d1:10:3c:a1:77:89:f4:37:f2:
34:50:02:00:f7:28:7c:43:6e:51:71:69:4f:f9:8b:82:23:e1:
e1:09:08:9e:44:5d:9a:83:bc:de:35:38:0f:f2:ee:ad:6a:9e:
9b:be:39:67:3e:f8:d5:e3:50:f6:2b:cb:bd:75:0d:d1:1a:e2:
37:16:f4:39:26:cb:d7:42:43:f0:7b:db:44:c6:c4:94:90:ba:
05:c6:7a:0f:3b:09:60:cd:bb:81:bd:61:12:4d:48:ad:60:97:
5c:61:5a:d7:87:29:01:7a:e1:57:14:19:f4:0e:9a:5f:75:a1:
58:70:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org