Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/D8OnNyzaMM1eVtmnDb-TkP72TU8.roa
File: D8OnNyzaMM1eVtmnDb-TkP72TU8.roa (raw, json)
Hash identifier: Hyv1UPeW06oWQJ66rGy/W0lyl5+1FdvExs6mPzNSR58=
Subject key identifier: 0F:C3:A7:37:2C:DA:30:CD:5E:56:D9:A7:0D:BF:93:90:FE:F6:4D:4F
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 018432B2F5D5F7AD9D86AC1394268ED14722
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/D8OnNyzaMM1eVtmnDb-TkP72TU8.roa
Signing time: Tue 01 Nov 2022 10:18:19 +0000
ROA not before: Tue 01 Nov 2022 10:18:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211432
IP address blocks: 45.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:b2:f5:d5:f7:ad:9d:86:ac:13:94:26:8e:d1:47:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Nov 1 10:18:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fc3a7372cda30cd5e56d9a70dbf9390fef64d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:5b:2a:ff:13:c6:61:9b:19:ff:dc:d6:b8:
01:a6:a2:61:5e:db:4b:25:39:0c:34:a0:0c:a8:34:
22:96:97:d6:66:d9:bf:33:56:07:f7:da:d4:59:1f:
fc:19:bc:43:fa:ba:ce:13:c6:32:91:0f:ef:88:04:
5a:45:c0:d6:fb:87:3c:ff:41:61:dd:f6:b5:b8:12:
3f:85:73:bb:48:03:12:cb:60:62:2b:06:59:7c:cc:
37:5b:7c:5d:74:e9:b2:73:50:7c:d6:01:fb:ef:64:
a6:50:75:63:9c:50:d2:22:e7:72:28:e7:08:c7:45:
04:51:9d:0b:28:e8:d2:07:63:95:6f:db:0e:4a:2f:
13:2b:2c:f7:82:c1:8f:91:a8:55:25:1d:a7:b2:f3:
b9:2f:77:2c:0a:7a:89:7b:40:9d:6b:1c:f8:07:20:
15:c9:80:5d:3f:4a:c5:84:67:7c:84:0f:eb:6b:71:
0b:5a:88:36:7c:b3:46:a7:5f:0a:6b:e0:44:53:73:
b4:53:82:fe:28:f6:78:79:ff:7a:66:de:24:99:10:
22:1c:4e:df:cc:e3:ba:66:6b:2d:30:b3:49:21:4f:
6d:f9:1f:94:9b:58:83:5b:48:26:b7:59:83:3c:2b:
1e:84:b6:29:85:fe:1f:84:e3:3a:71:f7:86:56:44:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C3:A7:37:2C:DA:30:CD:5E:56:D9:A7:0D:BF:93:90:FE:F6:4D:4F
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/D8OnNyzaMM1eVtmnDb-TkP72TU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
09:17:37:97:4b:87:5a:0e:2d:cf:a6:38:b9:a1:bb:4f:13:73:
da:84:1e:58:0d:13:1b:9e:e8:f2:55:de:37:66:0e:7a:a1:ec:
3c:1f:c2:aa:55:fe:b3:76:c8:e1:f0:95:c9:4f:62:ab:d8:4f:
b4:e9:7f:88:6d:4b:eb:a0:ca:fc:33:12:57:3b:fc:ee:48:88:
1f:17:ef:5c:31:b3:f9:5e:3c:f8:e6:ca:5a:f1:df:8f:c9:13:
bd:13:6f:cb:a2:67:9c:ba:ab:f5:71:fb:91:4d:ee:de:e1:37:
60:b0:f0:af:12:3b:b6:74:ad:80:a0:0e:3f:65:66:46:89:9b:
a8:d3:49:50:57:3c:e4:3a:ea:d4:e2:d6:8d:1d:ac:62:2c:8d:
c0:87:4a:f2:20:f7:8f:18:8c:da:73:ba:73:74:c2:9a:7e:54:
01:c8:e3:06:97:2d:2a:e6:65:16:70:14:02:51:e0:77:7f:f7:
fd:82:a5:67:7f:c0:c0:2f:6e:94:b0:86:62:2b:de:6f:78:51:
47:cb:b7:7e:6b:43:72:4b:a2:37:fc:86:02:cf:6e:83:87:f9:
76:b5:06:2e:06:80:fc:ce:d6:ac:c9:19:d1:38:6a:f2:63:16:
ae:d3:b4:9c:ed:21:18:5c:79:de:e9:f8:b3:4e:1f:0b:1e:05:
0e:d8:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org