Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/8UKiV-OQ3KmublG236bs8AtOtoo.roa
File: 8UKiV-OQ3KmublG236bs8AtOtoo.roa (raw, json)
Hash identifier: mbFWfETVSazl0HOe5GBBTSaBTM811B8CF567kpgpXTU=
Subject key identifier: F1:42:A2:57:E3:90:DC:A9:AE:6E:51:B6:DF:A6:EC:F0:0B:4E:B6:8A
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C1A05A837B247304EF126A9156B8A
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/8UKiV-OQ3KmublG236bs8AtOtoo.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 45.65.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:1a:05:a8:37:b2:47:30:4e:f1:26:a9:15:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f142a257e390dca9ae6e51b6dfa6ecf00b4eb68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:76:a8:54:8a:80:fd:1b:1c:7c:dc:c7:aa:
74:06:6f:d2:e9:c4:cf:4e:a2:05:23:ff:a1:23:ad:
59:a6:50:ff:b7:c1:73:35:dc:44:4f:0c:71:d0:95:
91:35:06:06:52:6a:5a:38:2a:b4:41:7a:9c:13:c6:
b5:c5:18:b8:db:23:37:da:b4:13:2e:8a:5f:31:85:
e2:b9:99:58:ef:99:53:bf:ab:02:26:ba:ed:8d:ff:
9e:31:87:73:e0:7f:89:2a:2c:d4:f9:0e:14:bc:bf:
2f:1d:80:5f:e3:96:fc:dd:8e:ba:4c:94:95:9e:87:
4b:fb:90:88:8f:07:8b:07:45:37:56:89:fd:92:d1:
20:03:fb:2d:94:af:ee:43:e5:95:70:a5:f1:98:c5:
5c:ca:86:89:a9:36:48:8a:f1:07:58:91:89:c5:6c:
6b:67:82:bb:3a:84:9e:f3:6e:da:65:bb:fb:81:23:
d2:a1:9f:3d:ba:4c:51:0c:45:f8:64:b3:7a:54:1a:
40:8c:3e:d9:da:5e:b7:c6:3d:07:ac:cf:dd:f8:6a:
23:ad:a9:75:9c:a6:40:99:88:f9:eb:eb:db:6b:44:
42:35:fd:63:db:d6:2b:2d:44:97:15:bb:ab:f6:58:
69:57:e8:0e:3e:57:8c:51:30:b3:39:fe:8b:bb:8e:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:42:A2:57:E3:90:DC:A9:AE:6E:51:B6:DF:A6:EC:F0:0B:4E:B6:8A
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/8UKiV-OQ3KmublG236bs8AtOtoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:84:07:a4:4c:8e:0d:26:6a:c2:36:77:7f:96:67:15:ae:6a:
3f:bc:c7:31:c5:00:56:19:f9:49:c2:40:f2:ba:1b:b9:2d:d3:
52:8c:ac:8d:bc:11:98:95:10:61:78:8e:8d:79:28:46:bb:9a:
b2:30:9c:9a:77:84:35:cf:37:59:b4:35:bc:4f:e2:37:ef:14:
ed:b0:3c:a1:9f:b8:a6:a3:0f:aa:cd:b2:87:fc:1c:82:52:e0:
69:2b:b2:3c:39:88:e1:06:0a:92:d2:01:e8:5e:4b:15:ec:ba:
f4:f0:0e:48:a2:35:da:45:83:ab:20:61:28:c6:e0:b3:73:2e:
c3:f9:b1:1d:94:72:31:39:9b:3d:a5:66:e4:e9:d4:e1:be:f3:
d2:9f:4d:fd:18:62:b0:dd:53:52:85:7d:93:88:85:92:d0:9d:
8c:9b:44:ab:1b:88:fa:bc:98:a5:52:84:0c:bf:bf:a4:98:03:
ca:87:de:0f:ac:36:e5:ed:92:c0:a4:3e:27:ac:d2:ba:6b:20:
c6:bf:64:39:e6:6f:d5:a0:a5:fa:7f:8c:72:f4:12:63:59:84:
c2:2c:cd:85:6f:36:9c:25:ee:f8:5f:67:80:81:2c:99:67:7f:
13:ad:28:e3:4c:55:40:ef:26:37:a0:d1:af:5f:d5:b5:ee:95:
18:1d:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org