Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/cn8vdK-wL2fqUsUZV9e1BP5NyKA.roa
File: cn8vdK-wL2fqUsUZV9e1BP5NyKA.roa (raw, json)
Hash identifier: CTNakHnJNSVH/B0yIdwRjj9yGbhFLkYIVoXdE4eNKrA=
Subject key identifier: 72:7F:2F:74:AF:B0:2F:67:EA:52:C5:19:57:D7:B5:04:FE:4D:C8:A0
Certificate issuer: /CN=13ecf10b887f085887de8b2db64917ee2e424545
Certificate serial: 05173266
Authority key identifier: 13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/cn8vdK-wL2fqUsUZV9e1BP5NyKA.roa
Signing time: Thu 19 May 2022 15:51:25 +0000
ROA not before: Thu 19 May 2022 15:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.88.8.0/24 maxlen: 24
45.95.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85406310 (0x5173266)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ecf10b887f085887de8b2db64917ee2e424545
Validity
Not Before: May 19 15:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=727f2f74afb02f67ea52c51957d7b504fe4dc8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:1a:4d:ab:c6:e1:a0:7a:d0:a6:14:5b:68:
51:d0:3f:78:ec:d0:7d:23:2b:36:a1:67:96:03:50:
71:74:bc:90:f0:80:d4:c6:b7:5b:8c:3e:af:0c:ee:
ab:f4:e4:7d:60:a5:34:b1:f3:26:46:7d:40:1b:45:
ea:15:3f:6a:0e:1c:f9:f4:eb:8b:92:32:18:33:2e:
af:89:29:67:af:ba:54:1e:3f:b9:88:3c:09:1e:ad:
8c:98:fc:78:ad:a5:6c:2f:4b:e7:48:ea:67:4e:47:
02:67:52:f0:d8:3a:25:14:14:c0:e0:97:39:ce:71:
ef:5c:6d:f3:1a:9b:76:6f:ad:48:1e:16:38:9f:45:
18:c4:cd:95:a6:79:71:45:ff:31:3b:bb:e4:0c:71:
e4:87:86:0d:44:af:ff:6b:7a:4b:96:e2:33:ab:52:
c9:96:c4:00:10:d2:36:bd:63:0b:95:09:d0:59:c4:
d9:e3:9f:6f:ab:5e:5e:d8:13:39:b4:ee:af:e5:2f:
bb:a6:e9:e7:06:20:66:b8:68:80:7d:4d:2b:7e:1f:
af:a7:17:e1:e8:02:ee:8c:02:00:4f:7f:41:a1:03:
11:3f:9d:f9:db:2d:eb:5b:7a:8c:f1:42:af:12:94:
91:f4:72:b6:54:b4:d3:0e:87:2f:35:f5:19:eb:8e:
42:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7F:2F:74:AF:B0:2F:67:EA:52:C5:19:57:D7:B5:04:FE:4D:C8:A0
X509v3 Authority Key Identifier:
keyid:13:EC:F1:0B:88:7F:08:58:87:DE:8B:2D:B6:49:17:EE:2E:42:45:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-zxC4h_CFiH3osttkkX7i5CRUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/cn8vdK-wL2fqUsUZV9e1BP5NyKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c45a9b-5096-4e75-9389-bd9b42f48dde/1/E-zxC4h_CFiH3osttkkX7i5CRUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.8.0/24
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fe:21:97:70:eb:64:e8:58:17:44:50:45:5f:71:65:f2:00:
a1:a6:0d:41:3f:d3:51:c3:07:38:8a:e3:c2:66:95:ba:c2:d8:
79:2d:d0:a5:c3:22:eb:ed:2f:e3:f8:be:21:db:b5:5a:a0:8f:
85:86:3b:bc:b4:a9:82:8b:3c:2e:29:01:d8:ff:3d:b6:03:22:
3e:00:4d:f7:43:1d:8a:d7:31:79:37:db:85:fe:ca:78:32:6e:
59:d6:c2:1e:72:43:c9:87:63:1d:2c:90:6d:73:67:bc:f2:a8:
c8:57:b4:ed:6b:89:15:b3:fc:34:17:29:99:fb:86:09:e9:38:
06:44:1e:5d:9a:1e:4f:12:0e:87:16:1f:c5:2b:ef:b4:06:77:
65:1a:85:3c:0b:51:c2:df:b8:cc:0c:5a:7e:95:0b:a5:70:1c:
1f:ff:0c:67:39:ed:45:70:5e:03:5e:b7:ab:94:c7:2a:d0:02:
2a:ee:4c:ce:c5:38:c3:f1:5c:0f:a4:fd:66:d5:2c:56:bd:af:
9a:16:d0:b8:08:1a:e4:40:2c:d2:e5:30:61:ac:dd:04:10:80:
c5:11:57:3e:da:89:90:36:30:d1:ad:28:a8:58:72:e6:b4:ec:
a8:41:47:41:b2:e1:37:79:c0:2c:d9:43:d5:bb:f5:2f:84:38:
1a:bf:e7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:21 2023 by rpki-client on console-ams.rpki-client.org