Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZDDS6vRxxKutQ7KHYeghY9ok2Us.roa
File: ZDDS6vRxxKutQ7KHYeghY9ok2Us.roa (raw, json)
Hash identifier: MvEIsCqr+f5+5Cso6SYZG1elDSLQ79kVWh2JC7h24cU=
Subject key identifier: 64:30:D2:EA:F4:71:C4:AB:AD:43:B2:87:61:E8:21:63:DA:24:D9:4B
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0183D251DAD1B3477B5C8F476EE918FA15E9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZDDS6vRxxKutQ7KHYeghY9ok2Us.roa
Signing time: Thu 13 Oct 2022 17:08:43 +0000
ROA not before: Thu 13 Oct 2022 17:08:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396982
IP address blocks: 45.137.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:51:da:d1:b3:47:7b:5c:8f:47:6e:e9:18:fa:15:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Oct 13 17:08:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6430d2eaf471c4abad43b28761e82163da24d94b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:b8:d6:e0:c9:2f:56:cf:53:fa:34:bd:8a:
af:f0:9f:b3:18:ae:b6:6f:cb:f2:ee:f1:6a:68:d4:
18:e0:60:4a:bc:0e:6c:38:02:07:88:86:cb:c9:00:
a4:4d:0f:e5:54:09:58:4e:a1:34:52:02:0c:fb:d0:
a0:52:c8:76:cf:65:2d:db:78:68:bd:41:62:89:5a:
c7:b5:6a:8f:38:69:3d:b0:b3:6a:10:3a:80:72:fb:
af:9c:ad:38:45:48:3d:f4:3c:a6:a1:a2:a3:45:77:
cd:df:d0:16:37:82:7c:75:72:18:54:12:cc:ee:79:
bd:fa:e1:f2:89:e4:3b:8e:20:35:26:29:16:ce:ef:
21:d3:6a:4c:93:84:17:d2:72:5e:0e:5a:98:9a:59:
0c:49:65:1f:6f:e5:3f:80:0f:f8:6a:86:a3:cf:f0:
48:7f:8b:ac:54:c4:23:28:fb:b4:0d:4a:fb:7f:06:
9d:19:e9:98:f7:e2:56:68:13:1f:77:8a:93:4d:8a:
29:69:b4:7f:bb:10:0a:64:af:37:65:b1:e1:9d:65:
c1:5e:40:12:85:ad:17:ee:e9:f5:55:62:e7:ea:8d:
0c:98:04:9b:1c:0f:bf:73:2a:c6:45:dc:4e:b7:b3:
37:a4:1b:3b:f8:bd:b4:16:e3:f2:27:8e:44:db:4d:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:D2:EA:F4:71:C4:AB:AD:43:B2:87:61:E8:21:63:DA:24:D9:4B
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/ZDDS6vRxxKutQ7KHYeghY9ok2Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.96.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3f:f5:97:71:62:c9:30:49:6c:84:8c:67:57:1a:bc:57:96:
f9:9a:8b:24:0a:5e:3d:cc:b4:24:0f:5e:78:f1:00:ee:96:79:
42:0e:66:a0:46:8e:2a:10:7d:1f:c9:12:27:f7:d9:c1:cb:69:
12:ee:bd:51:8f:71:ee:58:48:ed:02:70:b1:1c:a5:36:e6:ed:
20:51:9b:07:0e:ae:56:63:82:c2:c7:cc:1f:37:fa:93:07:af:
5f:05:23:8e:df:e5:ae:8b:1c:99:70:09:9a:84:36:91:f4:5e:
50:46:c3:3a:d0:f9:da:52:bc:c7:7e:54:c2:f8:e1:52:e4:26:
95:b1:55:16:f2:46:4e:cf:9c:40:a0:31:91:08:63:ef:40:1c:
ad:25:38:2a:ba:d5:4c:69:0f:2e:0c:b1:75:28:42:7f:40:b1:
46:f8:59:d0:ca:eb:af:ac:5d:7e:a1:2f:eb:3a:0c:a6:08:a7:
cd:47:61:a2:8a:74:c9:eb:fa:a4:e6:84:bf:80:58:ea:7f:dc:
63:e2:9c:79:fc:8e:7b:25:f9:69:a8:6c:df:b5:2b:21:2a:59:
18:28:fa:50:72:8d:43:5c:9b:b6:7b:4a:a2:b8:14:06:5d:25:
36:19:31:00:d6:e3:2a:1a:e6:b3:34:19:41:20:9a:15:7e:28:
f7:3f:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:31 2023 by rpki-client on console-fra.rpki-client.org