Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/XGibiVn7yUbeEYTzQvqf7VO5DJ0.roa
File: XGibiVn7yUbeEYTzQvqf7VO5DJ0.roa (raw, json)
Hash identifier: k2ZnXeC/lLEy7u3QFYqga4NuouL3wobvvtfhCCPWh+o=
Subject key identifier: 5C:68:9B:89:59:FB:C9:46:DE:11:84:F3:42:FA:9F:ED:53:B9:0C:9D
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 01843C08F3487438867FFE976D53B1B5DF71
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/XGibiVn7yUbeEYTzQvqf7VO5DJ0.roa
Signing time: Thu 03 Nov 2022 05:48:50 +0000
ROA not before: Thu 03 Nov 2022 05:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 45.88.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:08:f3:48:74:38:86:7f:fe:97:6d:53:b1:b5:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: Nov 3 05:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c689b8959fbc946de1184f342fa9fed53b90c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a8:91:7a:7b:83:ae:38:20:f8:98:29:07:1c:
7c:45:be:0f:f7:12:ac:99:f9:2b:13:2f:2d:fb:3a:
f7:93:cc:33:0e:c2:66:ba:92:4b:8d:24:27:d4:64:
7d:01:92:f0:b4:a9:39:3f:fc:bc:c1:0a:f7:a3:02:
1b:72:94:02:db:a8:79:ac:70:25:a1:5b:3e:82:0c:
42:a0:ea:85:a7:83:58:9d:95:88:b9:79:6f:b8:2e:
8b:0f:77:50:c6:02:13:3c:ae:ac:f7:7d:e0:e4:fb:
d5:af:a0:b0:a7:31:d7:08:cd:67:80:b3:5d:bb:db:
34:63:8b:92:06:5f:6f:9d:f2:e4:38:2a:bc:79:9c:
64:8d:c6:2d:13:aa:dd:16:c6:66:83:bf:1d:66:dd:
26:27:0c:51:7c:11:2a:9a:a9:71:be:c7:ff:f1:d6:
fd:01:44:61:66:8a:95:a6:24:c4:b6:95:25:6a:42:
de:95:df:c6:64:cc:50:ca:4b:e9:0c:63:4e:0b:c9:
18:c1:c9:5c:f7:1e:49:d5:c7:61:bd:76:a7:ca:c8:
e4:3f:17:7a:8e:bc:21:37:e6:d9:94:b1:96:1d:91:
70:10:4f:e0:db:a5:81:30:22:bd:0e:74:23:88:78:
76:b2:2b:88:f0:2d:15:cb:a6:d0:9d:65:c8:f1:ee:
19:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:68:9B:89:59:FB:C9:46:DE:11:84:F3:42:FA:9F:ED:53:B9:0C:9D
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/XGibiVn7yUbeEYTzQvqf7VO5DJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.11.0/24
Signature Algorithm: sha256WithRSAEncryption
27:75:56:b7:b7:dd:09:15:07:e2:73:36:f5:d5:d3:0e:80:56:
49:49:1f:78:f9:34:ec:ba:93:54:03:a9:4c:30:b3:da:3e:22:
10:0e:91:fe:15:69:89:b3:24:66:8a:b3:2f:81:89:1f:1b:ea:
4b:29:00:1a:eb:a0:a0:35:60:33:7d:8d:22:50:55:c8:a7:8c:
35:20:f3:aa:e9:d2:f6:6c:29:c5:ea:cb:f0:bc:52:03:9e:34:
ea:d5:ce:57:33:f7:45:dc:4c:29:b1:42:83:bf:46:ca:e7:de:
1f:bb:30:7e:1a:40:32:26:a8:84:9e:2a:7d:c8:bd:ce:6e:5c:
b8:c4:5a:35:84:54:87:77:8c:9b:19:a3:19:22:9d:72:b7:e3:
f4:bf:61:31:44:5f:46:53:60:98:c3:76:e3:c6:aa:51:13:16:
58:f9:3b:b2:79:a2:db:a5:9f:69:74:5a:41:98:7d:de:c6:58:
6a:e2:76:68:7c:12:46:35:c4:02:5a:67:96:67:98:7a:1d:91:
18:76:51:14:36:47:3a:a9:94:7d:9b:ac:76:75:2a:d0:c1:b0:
3b:01:f6:5b:9a:b5:6a:68:38:45:ff:0a:17:99:e7:14:32:04:
73:35:65:ad:9a:f8:48:75:e7:65:5a:17:29:dd:cb:4d:94:0f:
fe:0f:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:39 2023 by rpki-client on console-fra.rpki-client.org