Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/D1gKtYKzhtpYmzZmc8RE9PTsrqc.roa
File: D1gKtYKzhtpYmzZmc8RE9PTsrqc.roa (raw, json)
Hash identifier: PrCo9Z8hQxPexbPBkCdjIk4VgeXDIU5Nu90SgodYqy4=
Subject key identifier: 0F:58:0A:B5:82:B3:86:DA:58:9B:36:66:73:C4:44:F4:F4:EC:AE:A7
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0185596753526C3C0B032F1497D2B936AF5C
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/D1gKtYKzhtpYmzZmc8RE9PTsrqc.roa
Signing time: Wed 28 Dec 2022 15:43:41 +0000
ROA not before: Wed 28 Dec 2022 15:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 193.39.10.0/24 maxlen: 24
45.12.81.0/24 maxlen: 24
45.87.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:67:53:52:6c:3c:0b:03:2f:14:97:d2:b9:36:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Dec 28 15:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f580ab582b386da589b366673c444f4f4ecaea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:dd:18:ad:2b:62:48:36:94:65:3f:39:a4:
57:14:a3:ba:f3:24:66:6a:0d:91:0f:58:85:26:78:
e5:ad:b2:c3:97:69:05:c6:bc:45:4d:65:ee:fc:93:
d7:cb:70:f1:80:a2:03:03:df:8c:7c:94:66:dd:c5:
cb:10:2d:a7:5d:36:2e:55:9a:e9:0a:c3:06:b8:12:
f7:58:ed:c0:9b:72:c4:67:2d:0c:4e:27:c3:ce:a8:
1e:52:b9:84:03:de:e1:76:f6:68:ce:3c:ce:df:38:
ef:60:3b:0a:b5:37:96:d5:61:a4:3c:f6:47:67:ad:
75:90:0a:b1:72:08:5f:2e:08:c5:b9:3b:62:6a:2f:
53:68:50:c5:0d:16:9b:5b:d9:37:f9:1e:ed:26:4f:
01:85:e1:bc:9b:be:02:bd:d4:13:ca:29:10:0f:67:
62:9d:23:93:24:62:ae:83:67:67:40:2a:3f:07:00:
c3:2d:ef:98:b2:30:b8:4f:f3:e7:cd:6e:83:85:e7:
c2:d6:70:8a:d3:6a:0d:91:c1:19:4a:95:fd:84:6a:
ff:d0:18:a5:f8:58:35:52:24:24:d7:e4:5d:bb:74:
8d:55:5f:40:09:5c:d4:94:79:df:15:24:dd:ed:73:
b5:66:bf:80:83:c8:ec:c0:c0:44:c8:f7:a0:ea:6f:
61:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:58:0A:B5:82:B3:86:DA:58:9B:36:66:73:C4:44:F4:F4:EC:AE:A7
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/D1gKtYKzhtpYmzZmc8RE9PTsrqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
45.87.173.0/24
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:11:57:0c:e7:8b:91:05:26:b3:53:3c:3e:6e:24:05:ce:f8:
79:f9:44:95:d7:f5:59:2c:00:a9:13:01:c9:47:74:4c:6b:08:
4f:83:6b:de:39:67:3f:3b:d1:de:eb:a2:4e:fb:9e:0e:3e:52:
5d:e8:f5:34:43:47:38:cf:03:32:17:37:b4:c1:3d:57:55:da:
1d:de:be:db:56:f1:d7:f1:78:af:76:a3:32:ea:bb:51:b3:23:
4a:2d:74:5c:f2:35:16:fc:d9:19:89:0d:e3:2e:45:a1:f9:a6:
98:f1:0d:67:b4:d9:7a:dc:14:3a:7b:35:fb:81:f2:38:bc:2a:
f8:43:d1:39:0a:d8:32:e0:4e:57:c4:d2:d7:85:99:2a:12:ef:
61:06:14:7e:91:0c:c1:d1:93:a5:2d:bd:54:75:b6:4a:4b:e3:
d2:9c:5b:2c:08:b2:ae:ed:fe:61:40:1a:19:c2:86:6e:cc:de:
7a:24:af:31:68:e9:95:c1:12:9b:7a:f1:24:8b:2b:87:19:16:
3c:9f:ec:cb:be:22:d9:43:fe:3a:85:0d:22:9a:65:67:95:a7:
fa:22:1a:e9:99:ee:1d:3d:d9:e4:ef:f7:05:66:fa:7b:31:32:
28:55:f8:f3:4f:b5:c3:fa:82:90:77:6c:82:ba:15:4c:e0:9f:
75:2d:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org