Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/KB9il0BhTBx7dEjn3eXmxkzd7nM.roa
File: KB9il0BhTBx7dEjn3eXmxkzd7nM.roa (raw, json)
Hash identifier: khELEFsA1J8BygS8LbeByxnnEkUyEv1UZdHrJh5to/o=
Subject key identifier: 28:1F:62:97:40:61:4C:1C:7B:74:48:E7:DD:E5:E6:C6:4C:DD:EE:73
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 01838D16B4123A9C6F677E6F03E695692CC5
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/KB9il0BhTBx7dEjn3eXmxkzd7nM.roa
Signing time: Fri 30 Sep 2022 06:30:18 +0000
ROA not before: Fri 30 Sep 2022 06:30:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 45.95.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:16:b4:12:3a:9c:6f:67:7e:6f:03:e6:95:69:2c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Sep 30 06:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=281f629740614c1c7b7448e7dde5e6c64cddee73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:03:80:a0:ae:11:8e:25:ac:e8:0a:2f:a7:
61:8f:db:42:51:d8:82:ce:3a:ee:17:fd:63:47:bb:
90:f5:e8:13:f0:ac:2b:88:0f:8f:4b:ab:57:39:c6:
8b:b3:f2:1f:75:3b:a3:56:3a:95:8e:e3:5e:ba:0a:
64:18:22:04:21:6a:0e:dd:ae:6a:df:fc:0b:02:43:
97:92:ed:05:97:f2:5c:1e:39:df:01:dc:59:03:08:
0d:a0:e4:13:b6:d1:fa:56:be:06:9f:07:36:db:ec:
eb:52:cd:e4:7c:6c:c8:31:c1:26:46:10:5b:d2:78:
12:02:93:84:02:1e:c2:03:53:fd:1d:63:a8:c9:7b:
98:1e:7b:94:fd:1e:1b:23:30:5b:cf:ce:0c:d8:3b:
8d:49:d7:48:46:89:a9:8a:7a:f5:a0:4b:a8:a9:a6:
2b:bb:16:03:f5:78:39:9f:c0:a7:9f:79:ec:a8:7d:
32:08:17:4f:47:85:78:b3:05:4b:fb:77:57:20:7b:
6d:62:01:9a:70:60:00:2a:83:36:6b:a9:ac:69:3f:
d6:c8:0c:f2:ca:66:3a:bc:8a:b6:8d:2b:46:55:a6:
f0:2d:29:f1:67:98:91:a0:45:fd:22:ab:1c:80:92:
39:e4:0f:85:55:d9:47:08:7a:12:e0:89:53:03:3c:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1F:62:97:40:61:4C:1C:7B:74:48:E7:DD:E5:E6:C6:4C:DD:EE:73
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/KB9il0BhTBx7dEjn3eXmxkzd7nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.64.0/24
Signature Algorithm: sha256WithRSAEncryption
05:93:da:23:5f:7d:03:9e:39:fc:0a:eb:e3:97:fa:69:97:3d:
01:0e:42:9a:86:e4:20:d5:34:ab:98:f0:2e:9a:ad:91:24:5a:
01:c2:46:15:3f:ef:35:69:12:7c:3b:90:a0:d6:e2:03:76:63:
88:16:d0:91:0c:b6:59:03:57:ca:88:a6:58:a0:92:9a:80:e2:
7b:4a:08:f1:0f:8b:f5:54:b9:a5:77:c3:82:f1:26:02:18:ef:
d8:59:e5:99:cf:88:97:4c:5d:a1:50:48:66:b9:25:7d:77:6d:
50:d5:30:67:23:23:a6:58:a5:2a:60:35:74:70:5c:7c:88:a4:
b0:aa:cc:2f:66:0d:70:38:09:bf:0f:4e:0a:9a:bb:9c:d4:7d:
2f:48:76:3b:b8:ce:89:18:e1:aa:ef:96:3b:19:b9:61:eb:18:
f3:0c:14:97:d2:8d:f6:bf:31:f8:84:76:3c:b0:2f:a1:c5:0e:
7b:5e:48:12:fc:86:72:7a:83:07:36:74:84:7e:f3:da:ac:be:
24:23:0e:6a:dc:11:8b:c3:c7:02:96:3c:52:e0:91:1d:36:3f:
31:94:eb:5e:5e:d3:1d:38:2f:bc:23:9c:2a:53:ea:ce:df:82:
b8:37:d5:e5:c3:29:55:4d:d0:ec:af:54:cb:2a:02:8a:fd:df:
25:7e:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org