Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/OvRY5zdMyXVE8Kfz-icui97iYDI.roa
File: OvRY5zdMyXVE8Kfz-icui97iYDI.roa (raw, json)
Hash identifier: xlM3zmVEe1SYG5qM1/IL2X7311j/3GmtowP0MU0mjs4=
Subject key identifier: 3A:F4:58:E7:37:4C:C9:75:44:F0:A7:F3:FA:27:2E:8B:DE:E2:60:32
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C12B46124447BD47AB03C3F726F36
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/OvRY5zdMyXVE8Kfz-icui97iYDI.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:12:b4:61:24:44:7b:d4:7a:b0:3c:3f:72:6f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3af458e7374cc97544f0a7f3fa272e8bdee26032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:67:6d:45:68:2d:71:23:d6:6d:8c:80:7b:
7a:49:a7:41:e0:88:7e:1a:ab:c5:82:f4:63:1f:c9:
c7:b8:b1:99:1f:e5:9e:c6:74:da:a3:5d:d3:64:f5:
f1:26:23:0f:2e:05:cc:e3:91:77:cb:8e:17:f0:74:
6e:ee:b6:e3:e2:c4:55:df:6f:65:f3:b2:55:d6:9b:
64:26:bd:08:3b:b5:16:00:9f:e2:bb:fe:79:11:b2:
6f:e2:62:da:38:c7:6d:c3:10:64:29:f9:1c:5c:dd:
fd:ba:d3:35:46:5a:be:80:e5:8d:c3:c6:78:b2:92:
34:9d:c0:2c:31:ad:b3:03:22:6a:bd:96:fd:84:56:
b2:49:c9:64:33:40:0d:03:42:04:b4:f3:a2:78:1c:
cd:64:fd:cf:35:5c:7e:82:d0:7b:eb:53:f7:3c:c3:
65:7d:02:a4:49:21:87:01:12:1f:81:03:5f:b4:85:
f6:d5:95:c0:73:61:84:12:1e:39:5e:fd:a4:b6:cf:
c8:6a:0c:85:52:32:eb:09:70:ea:36:93:c6:18:04:
fe:68:24:d7:c9:a1:df:17:d4:3a:10:94:34:c7:fd:
ca:07:39:cb:0d:d4:57:7e:c6:cb:70:db:38:d6:15:
10:d8:92:66:cc:30:93:83:96:e8:a4:6e:cf:c2:bd:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F4:58:E7:37:4C:C9:75:44:F0:A7:F3:FA:27:2E:8B:DE:E2:60:32
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/OvRY5zdMyXVE8Kfz-icui97iYDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:fd:ad:4e:d8:bd:8d:d7:b2:9e:ed:97:a0:7a:25:07:b2:d1:
73:77:33:96:b1:21:56:a4:8f:0e:df:5f:c1:fc:01:57:b5:bf:
20:fe:df:0d:72:93:f4:f3:23:31:f2:4d:76:e0:b0:ea:78:38:
f8:0f:10:3f:10:d2:fd:8e:80:13:5d:63:21:bd:81:3d:d4:80:
36:f9:80:f5:64:b5:bc:24:6b:24:7d:45:ff:24:52:1e:b3:ba:
7f:0e:41:26:bc:f9:46:4f:00:9c:3e:ea:2c:a6:b0:07:7b:c9:
53:f2:3a:d7:b2:2a:bb:74:db:61:db:53:72:b4:b7:e8:57:ef:
f4:d4:46:23:22:bd:b7:e6:ce:c5:6c:7e:b1:51:5b:21:3e:0d:
54:1b:43:92:a2:81:c7:02:ac:88:41:dc:04:d1:8e:e4:e5:a1:
e6:f8:11:81:41:d1:7c:a8:44:21:74:b5:b4:e1:b8:b6:d2:50:
5d:e9:1e:07:a9:c9:46:bb:6e:74:95:48:ca:df:7a:48:16:19:
21:b2:6a:51:47:1b:e0:a5:0e:56:aa:f0:ff:d1:aa:3a:2a:93:
1a:df:a6:dc:17:e7:5d:84:fc:1a:12:a0:80:d1:82:b1:34:aa:
bc:8b:85:7f:10:85:16:3d:a5:b4:29:de:4c:34:1b:2c:3a:d5:
00:fb:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:08 2024 by rpki-client on console-ams.rpki-client.org