Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Cfk1v1KStI7urHd5H74qm9kVjXA.roa
File: Cfk1v1KStI7urHd5H74qm9kVjXA.roa (raw, json)
Hash identifier: RR/MFfSeUsHJUHCLlHgBCHv8nTedB7SLvgq2kcnRexw=
Subject key identifier: 09:F9:35:BF:52:92:B4:8E:EE:AC:77:79:1F:BE:2A:9B:D9:15:8D:70
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C17046DBFBBA9B3FD83B9C3C98151
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Cfk1v1KStI7urHd5H74qm9kVjXA.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:17:04:6d:bf:bb:a9:b3:fd:83:b9:c3:c9:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09f935bf5292b48eeeac77791fbe2a9bd9158d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:10:db:8c:d7:f5:8e:ec:db:b5:e2:a5:f5:
6b:5a:ab:5d:1e:14:a8:df:c9:dc:7c:23:58:8b:5f:
62:56:92:d7:1c:ac:a7:11:e3:d5:2e:90:d5:1f:15:
d5:e0:5a:bf:3b:fc:bb:0a:53:1a:2e:e9:ce:83:2d:
bb:45:ac:b5:eb:e8:03:d9:32:e7:ec:16:92:86:a9:
ad:70:09:0d:34:d8:11:f1:92:6a:02:2e:15:41:fa:
d4:98:ab:1c:1a:81:af:45:e3:bd:73:ac:21:b6:7d:
d5:d6:25:23:d8:e9:0c:10:34:82:24:b5:d9:e5:b5:
23:39:86:c2:56:8b:8e:e1:04:ea:10:02:a1:da:9a:
71:00:e9:55:0c:70:41:b2:04:99:e7:52:0d:87:bf:
7f:2d:cc:41:7d:22:25:e9:59:72:62:ae:39:8e:89:
9a:6c:83:32:43:4c:76:88:cd:1a:cf:72:61:8d:5b:
59:f0:30:5f:93:84:f7:b9:fb:27:a6:f4:5b:43:13:
83:e7:1d:52:d0:0f:c5:3e:65:8b:62:57:64:52:72:
d9:bd:9c:df:12:f3:e6:59:0f:3c:56:2d:07:20:66:
60:10:03:2b:d8:51:50:60:bf:08:a0:b5:b8:8f:a2:
ec:3f:b6:19:f4:50:8a:8f:3d:df:da:de:38:fb:85:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:35:BF:52:92:B4:8E:EE:AC:77:79:1F:BE:2A:9B:D9:15:8D:70
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Cfk1v1KStI7urHd5H74qm9kVjXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
22:6e:38:7e:cf:20:94:52:22:5f:81:eb:0b:82:2e:44:42:ad:
06:13:95:c9:15:07:0c:46:5b:01:5a:01:81:97:3a:e9:11:dd:
88:11:5c:48:28:a7:cb:64:cc:62:f2:a5:eb:d6:18:d1:05:f9:
04:ef:08:ec:34:67:22:77:aa:8d:8a:8e:cb:72:9e:71:73:7a:
51:ce:41:8d:37:c5:a0:00:ba:34:0e:fe:c6:30:1b:84:99:41:
dc:ed:ea:32:72:28:0c:9c:2e:dd:e9:2c:11:cc:51:9f:7e:d6:
a5:35:c8:ef:01:36:fc:69:ca:d0:92:32:88:95:24:23:a5:0b:
65:5d:9d:3d:26:81:41:ad:f9:dd:56:64:8a:85:ee:74:50:16:
9f:25:fa:bd:fc:ac:a4:68:1d:35:2f:14:78:b5:b3:00:15:35:
f6:12:9d:53:cf:a5:9c:7a:d6:27:d7:8e:1e:d4:38:a7:ef:c6:
3e:b4:88:47:4c:e8:47:6f:8a:31:cc:f8:ff:ee:f8:19:02:84:
86:58:f7:a4:3f:87:d7:fc:3f:a3:3f:45:9f:f4:9d:bd:4a:f0:
f5:37:90:b1:bb:d9:eb:90:2d:86:a9:cb:06:7d:b2:ef:77:1c:
9c:94:19:4f:b4:7a:25:a2:60:c8:11:f1:a1:fe:6a:01:63:4d:
15:03:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org