Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/FEt7NJlRWpALRR9FEqdWWpyrJ-s.roa
File: FEt7NJlRWpALRR9FEqdWWpyrJ-s.roa (raw, json)
Hash identifier: VYcqlohInLntU7zEb5/Fetvj0MwPqlCZ1hOyNJuSfGY=
Subject key identifier: 14:4B:7B:34:99:51:5A:90:0B:45:1F:45:12:A7:56:5A:9C:AB:27:EB
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 050EC8B2
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/FEt7NJlRWpALRR9FEqdWWpyrJ-s.roa
Signing time: Mon 16 May 2022 12:00:30 +0000
ROA not before: Mon 16 May 2022 12:00:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 45.88.11.0/24 maxlen: 24
45.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84854962 (0x50ec8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: May 16 12:00:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=144b7b3499515a900b451f4512a7565a9cab27eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:20:e6:c9:b4:23:9e:f4:74:5b:56:7d:fc:
cc:ac:5a:8c:cd:65:00:70:cc:7f:bd:9a:23:a8:25:
60:14:41:88:f1:c7:5a:42:7f:1b:75:62:05:b7:6b:
a8:cf:4b:41:a2:bf:d3:65:ec:c3:30:da:f6:77:50:
e7:64:77:03:29:73:01:3a:e3:4a:5b:2b:4d:5a:d1:
bb:8f:6c:4f:7d:fb:d4:70:22:6c:43:d8:a8:67:5c:
d2:74:f6:4f:34:5b:e2:28:d4:fb:71:48:2f:0d:4c:
db:dc:c8:09:53:2e:15:5d:04:e8:09:96:b0:47:5b:
46:d7:75:d5:9c:06:0e:5c:ee:f2:8e:85:c5:44:c2:
6a:e9:66:1e:bf:23:2e:b5:46:1b:02:f9:7a:7e:c0:
40:5f:d2:4f:c7:4c:1a:fc:f5:e0:e6:6a:b4:60:7d:
c7:6d:94:41:6a:1a:9f:a8:e0:5b:2b:69:c6:96:82:
98:0d:aa:5d:07:37:71:0b:23:58:f0:16:82:a0:26:
d1:9f:c7:e3:95:3c:f7:20:fa:25:77:ab:7a:33:43:
2e:fc:1b:bd:95:74:4e:61:a1:5d:14:7f:a6:bc:90:
85:0f:03:b9:5b:4b:92:a1:38:e4:46:ac:d0:96:e8:
60:96:57:b1:15:0a:45:9a:8e:3c:42:b5:59:33:1c:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4B:7B:34:99:51:5A:90:0B:45:1F:45:12:A7:56:5A:9C:AB:27:EB
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/FEt7NJlRWpALRR9FEqdWWpyrJ-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
69:71:31:a8:00:59:16:d4:bb:09:f0:4d:6a:74:36:58:8d:b5:
ff:59:31:22:53:1d:67:88:48:2f:04:7d:79:98:66:ec:ad:d4:
fa:06:ec:b8:64:59:d4:7b:ff:6a:e9:f8:1d:78:05:48:e9:9c:
94:51:13:03:d1:0b:0a:69:3b:3a:8a:cd:3c:06:17:96:86:dc:
b6:7f:70:82:4e:c0:b8:d3:b8:51:ef:a7:5d:f9:9b:57:f8:c3:
ec:a3:af:ac:ab:f5:c0:7e:21:ab:8e:d7:3d:da:bf:6d:ce:d2:
9c:f5:19:d6:7c:17:57:e2:45:f5:33:a9:aa:a3:7b:7c:20:f9:
bb:c3:74:ed:0f:6b:1a:d7:ee:7f:86:03:c2:01:d5:84:29:fb:
65:0d:24:64:b0:ad:06:09:aa:64:88:3b:93:ea:ba:ab:32:42:
35:a9:f1:66:19:65:21:ea:d6:78:4d:dd:c2:33:77:a4:c5:15:
86:69:23:c4:7e:38:f8:13:59:31:af:1f:3f:e5:a6:c9:6b:81:
7f:de:a9:c4:0a:bc:cc:6a:a1:7b:40:7d:82:01:f5:61:04:bf:
3e:e1:29:1b:55:4b:67:19:d7:af:24:86:1e:0d:5b:ba:42:44:
09:64:8c:fc:2f:88:4f:aa:c6:a5:cd:fa:e1:58:58:4a:5e:d0:
2f:52:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org