Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Qjdya6CydLcwJCEhN_YPUsS6b7s.roa
File: Qjdya6CydLcwJCEhN_YPUsS6b7s.roa (raw, json)
Hash identifier: DZRT6gJLZNcGHqzFKuXVyMNq8ZF4JSuBFMRyxdLaYBc=
Subject key identifier: 42:37:72:6B:A0:B2:74:B7:30:24:21:21:37:F6:0F:52:C4:BA:6F:BB
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 0185714C182D7B5850421EC00BE0BE8CF0EC
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Qjdya6CydLcwJCEhN_YPUsS6b7s.roa
Signing time: Mon 02 Jan 2023 07:04:50 +0000
ROA not before: Mon 02 Jan 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.88.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:18:2d:7b:58:50:42:1e:c0:0b:e0:be:8c:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Jan 2 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4237726ba0b274b73024212137f60f52c4ba6fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:69:63:46:e8:e0:e9:6a:3b:48:18:86:8c:
68:1d:8a:32:4c:ce:d1:53:44:2f:3c:ae:ee:24:c0:
39:c8:13:5c:d9:c7:4e:63:ff:a1:d3:66:0e:5f:e7:
a6:b3:7d:0b:3a:c7:a1:ed:0b:5e:48:3d:53:fb:0f:
27:4c:f4:7c:0b:b2:f8:20:1e:9b:4f:4c:1a:b2:33:
57:54:bf:e6:d8:9b:b2:e1:0a:81:1c:cf:7a:7d:ff:
95:84:64:d2:86:f0:1b:9c:63:7f:68:58:48:d0:0a:
11:ce:40:c9:28:d4:05:a1:4a:ec:22:22:86:3b:08:
88:cc:fa:04:3b:75:a1:57:79:19:51:1a:00:93:22:
42:e0:c3:8b:ff:31:f1:02:07:ce:df:c7:74:d0:b9:
a8:27:11:cb:02:3a:98:c5:8d:c1:b1:8f:e8:71:8a:
79:b4:0d:8f:a6:98:cf:ce:09:5a:d0:22:1f:c8:45:
ed:c2:af:6c:31:39:76:58:e8:6c:57:61:88:38:b3:
68:2c:ab:34:eb:5d:9c:cd:03:38:7d:31:18:cd:e8:
76:c6:87:3d:9a:a4:de:34:01:53:8f:c4:6f:95:90:
90:e0:67:e7:40:f6:d4:0a:22:02:11:19:e3:ef:dd:
13:10:22:38:a2:f4:40:58:0d:86:51:06:6c:98:36:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:37:72:6B:A0:B2:74:B7:30:24:21:21:37:F6:0F:52:C4:BA:6F:BB
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/Qjdya6CydLcwJCEhN_YPUsS6b7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
06:67:a4:01:54:35:42:41:8b:6f:f1:8f:a6:2b:78:55:99:2f:
12:9b:2f:5c:61:75:ef:e6:ee:e6:18:8f:e1:8e:11:cd:6f:3b:
6a:ea:e5:6d:ea:62:98:38:db:91:17:48:26:4a:0c:e0:e7:58:
94:90:f6:82:03:56:25:3b:a8:99:5b:c8:92:90:c4:04:d0:08:
51:0f:d8:ab:01:6d:fc:72:a1:b0:8a:4e:20:79:8f:76:68:bb:
d6:0f:c1:c5:e9:50:2b:04:4e:ba:11:90:a8:1d:51:71:e4:1f:
42:79:56:cf:85:7f:4d:ad:43:ef:d2:36:57:55:d8:01:3d:56:
fc:0e:47:fe:3a:7c:9b:19:43:75:83:68:89:0a:45:a2:63:79:
28:0e:a6:27:8d:e2:9c:d1:ee:48:83:7b:17:b6:2e:07:db:f9:
87:e9:7d:3f:ac:ad:11:0a:12:ad:e0:b1:31:d8:40:c2:77:be:
2f:aa:ab:b0:4d:72:01:00:b8:78:57:5a:91:a7:fa:98:69:3d:
d1:d3:4c:f1:67:14:1a:19:57:8f:8e:40:44:7b:19:64:e5:70:
0d:ca:c2:18:b8:72:44:cd:af:ea:cb:0d:b8:ae:03:42:35:f4:
3f:0b:22:8d:2a:c5:33:32:15:02:f5:c0:f7:24:7e:3a:fa:e3:
9c:d1:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org