Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/xvdtBXP4F6yX1l3eu43WUQb2Q7M.roa
File: xvdtBXP4F6yX1l3eu43WUQb2Q7M.roa (raw, json)
Hash identifier: P5a5Yn8HJhZY3iB5T6tWfOQpeNund9fLTR1oSkEsbvY=
Subject key identifier: C6:F7:6D:05:73:F8:17:AC:97:D6:5D:DE:BB:8D:D6:51:06:F6:43:B3
Certificate issuer: /CN=d32f876231dcb5dfd7af4523120565d98006474a
Certificate serial: 0185DF009CB5AAAA1A34D131E17F913744F3
Authority key identifier: D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/xvdtBXP4F6yX1l3eu43WUQb2Q7M.roa
Signing time: Mon 23 Jan 2023 14:20:37 +0000
ROA not before: Mon 23 Jan 2023 14:20:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 45.143.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:00:9c:b5:aa:aa:1a:34:d1:31:e1:7f:91:37:44:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32f876231dcb5dfd7af4523120565d98006474a
Validity
Not Before: Jan 23 14:20:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f76d0573f817ac97d65ddebb8dd65106f643b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:d5:85:0b:e3:c6:a6:c8:2b:6e:ff:d7:d7:
ce:26:37:70:4b:40:df:da:f2:4e:16:9a:a8:aa:d0:
39:b4:0e:3f:08:70:85:84:9a:0b:64:bf:7b:8a:d5:
b1:dc:6c:0f:44:a4:8f:65:c8:29:8d:22:5a:be:8a:
31:2f:92:b1:11:e6:b3:32:e7:93:2b:7d:e7:63:6b:
79:6c:73:ae:56:7b:ef:f0:c3:66:09:23:ee:66:37:
be:d1:f3:56:b4:17:f3:25:73:ef:b4:75:8b:6b:86:
b9:ea:9c:54:28:9b:aa:fc:99:bd:17:fc:1c:4c:bc:
32:ca:77:2c:da:d3:30:64:ec:af:8a:45:20:5c:22:
04:79:fc:37:45:e5:5c:12:8b:f3:1b:07:15:bb:06:
03:ba:82:f7:33:40:76:97:23:d1:a4:af:10:dc:45:
9c:9d:9d:db:7c:71:c2:ec:c8:e5:bb:77:33:40:c2:
02:39:b8:4e:8e:d5:09:d6:03:7c:ec:ec:dd:d6:37:
39:73:09:f6:0d:aa:bd:9c:0a:7c:af:59:4a:52:16:
cb:79:01:f1:e5:1d:c9:cb:e9:72:26:fa:66:0f:08:
b7:43:16:97:4a:9d:cf:ce:d5:4d:dd:4c:24:e7:74:
e1:bf:5c:40:f9:09:91:e3:c1:8c:6f:c6:c0:1c:12:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:6D:05:73:F8:17:AC:97:D6:5D:DE:BB:8D:D6:51:06:F6:43:B3
X509v3 Authority Key Identifier:
keyid:D3:2F:87:62:31:DC:B5:DF:D7:AF:45:23:12:05:65:D9:80:06:47:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y-HYjHctd_Xr0UjEgVl2YAGR0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/xvdtBXP4F6yX1l3eu43WUQb2Q7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7d8cfd-8830-4fe3-bf75-bc64d3e62382/1/0y-HYjHctd_Xr0UjEgVl2YAGR0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.5.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:df:d8:34:84:78:63:00:dd:0b:dc:fc:9a:e9:cd:57:d8:43:
91:d9:bc:ac:af:b3:04:b9:f1:14:c3:64:1c:04:f8:1f:5a:23:
06:ef:b1:d0:c9:0a:15:71:46:e6:1c:86:d7:f9:36:1e:f5:a5:
d1:eb:54:e7:61:b9:c4:5f:93:d4:88:7d:31:50:08:bf:a7:61:
8b:b6:31:e0:29:0a:f9:69:47:a8:2a:7a:f0:da:89:12:84:16:
b7:d4:c9:ad:97:6d:7a:88:86:9b:57:9d:d5:b0:4e:16:1e:4b:
47:70:27:71:c8:2c:c1:dc:6c:6f:99:7c:c9:d5:bd:e5:1d:fd:
31:9f:ef:0b:fd:79:cc:c5:d5:9c:77:df:51:48:33:59:43:4f:
af:7d:a1:db:3d:34:4e:ac:6c:c9:9e:66:87:b6:2c:5a:e2:87:
4f:9c:3b:f1:fc:02:4f:37:a8:55:ab:7a:31:da:65:a4:02:d0:
cc:cf:01:f8:ec:68:ab:5b:ca:3d:c5:90:3f:2c:5a:df:13:d2:
c3:da:7a:52:24:0b:f2:06:c4:95:48:a0:37:e3:02:80:6f:ba:
84:7b:37:b5:8f:4f:1b:eb:60:1e:0d:de:ba:18:e7:0f:1c:22:
3a:0d:e0:53:c4:e2:39:c5:7f:78:2a:c7:16:33:89:92:4a:f2:
9e:1b:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:18 2023 by rpki-client on console-fra.rpki-client.org