Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/n4jzC2NDmdXGUVefMjhp4zgJml0.roa
File: n4jzC2NDmdXGUVefMjhp4zgJml0.roa (raw, json)
Hash identifier: gnNuozpSzJNQ2uUBZe17U4tNdIYvFYGh6+d7yhr6ZA0=
Subject key identifier: 9F:88:F3:0B:63:43:99:D5:C6:51:57:9F:32:38:69:E3:38:09:9A:5D
Certificate issuer: /CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Certificate serial: 0183A1BB8B1CDC9276AFA08068C9CF17CB72
Authority key identifier: 07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/n4jzC2NDmdXGUVefMjhp4zgJml0.roa
Signing time: Tue 04 Oct 2022 06:42:46 +0000
ROA not before: Tue 04 Oct 2022 06:42:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.91.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a1:bb:8b:1c:dc:92:76:af:a0:80:68:c9:cf:17:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0795d47b63a0fe19d3f001845bcfe201c8e60aa3
Validity
Not Before: Oct 4 06:42:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f88f30b634399d5c651579f323869e338099a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:1d:8e:8f:35:29:c6:eb:78:a5:54:60:1f:
1c:56:de:f7:33:2e:ea:5b:d3:38:43:ea:22:9e:58:
5f:e8:1d:61:d3:4c:c8:43:8c:10:bd:aa:0f:34:57:
7d:7f:74:a8:67:c3:65:3f:48:d4:0f:89:7e:39:bb:
2d:11:bf:52:cb:c1:b9:d7:dd:46:b9:72:df:2d:6b:
4c:30:d0:6b:8c:90:9b:77:cf:e7:57:c9:fc:90:0e:
3b:ab:fe:49:a2:b4:2e:fc:32:e8:31:4c:52:5e:a7:
e9:d2:95:4f:fa:d5:89:ad:7e:2c:90:14:ff:57:b7:
45:e6:5e:f3:ca:f5:70:ab:80:8c:c2:86:d0:4e:ba:
b5:3e:e3:4a:73:da:d1:36:bc:69:b1:c5:a9:bd:cf:
31:a1:79:43:cc:fe:4d:a4:77:26:15:de:ea:80:10:
97:e0:1f:cd:7d:0f:3a:af:f5:15:6a:9b:25:91:22:
23:62:da:32:35:91:6f:f1:6a:34:f8:38:5a:6c:45:
7e:69:6e:fd:11:a6:ae:39:ae:9b:f0:bc:fa:69:3d:
c5:cd:ff:3a:da:d2:53:2a:3d:ab:4b:7a:0a:78:60:
0b:23:b1:00:e4:dd:ef:53:d2:c4:5a:4c:6d:34:03:
d2:19:de:7e:65:65:77:fb:28:12:8a:b4:8a:6e:0e:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:F3:0B:63:43:99:D5:C6:51:57:9F:32:38:69:E3:38:09:9A:5D
X509v3 Authority Key Identifier:
keyid:07:95:D4:7B:63:A0:FE:19:D3:F0:01:84:5B:CF:E2:01:C8:E6:0A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5XUe2Og_hnT8AGEW8_iAcjmCqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/n4jzC2NDmdXGUVefMjhp4zgJml0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4409b8-a81e-429a-97a2-46c391508436/1/B5XUe2Og_hnT8AGEW8_iAcjmCqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ba:73:79:7c:48:f0:2c:bf:f9:b8:9f:24:f9:09:b1:be:a3:
89:f8:95:6d:52:b6:a5:b6:84:17:43:c5:19:3d:02:50:26:54:
e1:82:7e:3d:6a:a0:81:bc:49:06:87:ca:c3:c5:e8:cc:72:99:
61:52:d4:fe:c3:7f:ba:97:3e:1c:6a:7a:bb:c6:8a:e9:cb:a8:
02:78:e7:62:53:a4:ab:31:0c:ed:9d:f3:7c:45:4f:9b:7e:8f:
d7:aa:16:59:f1:a9:53:df:95:e1:bb:bd:78:03:71:69:7e:71:
af:f0:80:7a:11:3e:8e:07:04:2b:78:d1:38:8b:c1:3d:2b:e0:
5e:3a:04:48:4f:a5:a1:db:26:5f:df:ca:24:0f:4b:e2:ad:d8:
63:c0:1b:7c:ec:43:57:12:f6:be:91:92:17:78:77:e2:12:a4:
cf:60:ae:0e:8e:f1:ac:d4:ee:29:58:0e:6e:84:b8:3c:52:e1:
ba:c2:d4:56:d9:39:60:e1:5f:fc:27:2c:1f:11:a8:15:5e:05:
ab:32:1b:4b:09:17:b2:3b:7d:57:fc:55:06:af:2f:4a:95:96:
27:b2:f5:6f:7d:ef:04:36:7a:19:f9:21:b1:14:1f:ca:20:9d:
fd:3a:71:ff:20:aa:e7:b4:0f:b0:50:b6:c8:3f:67:91:46:48:
e5:cd:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-ams.rpki-client.org