Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/O9KZp4iCJOCgGFxv6C9FxPot9QQ.roa
File: O9KZp4iCJOCgGFxv6C9FxPot9QQ.roa (raw, json)
Hash identifier: bM3Ecos0Ihr0TBRWih7Igp6h/m/E3FdJZsJNPEW5bPs=
Subject key identifier: 3B:D2:99:A7:88:82:24:E0:A0:18:5C:6F:E8:2F:45:C4:FA:2D:F5:04
Certificate issuer: /CN=1048dd12120601282143285eba666b13b434798e
Certificate serial: 02BA32
Authority key identifier: 10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/O9KZp4iCJOCgGFxv6C9FxPot9QQ.roa
Signing time: Sat 15 Jan 2022 14:14:19 +0000
ROA not before: Sat 15 Jan 2022 14:14:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.134.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178738 (0x2ba32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1048dd12120601282143285eba666b13b434798e
Validity
Not Before: Jan 15 14:14:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3bd299a7888224e0a0185c6fe82f45c4fa2df504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:e9:52:42:6a:e5:65:c3:4a:5f:3c:2a:27:
3c:8d:6c:44:9c:fe:a5:12:cf:eb:d4:6d:5a:de:9d:
a8:04:75:c3:a6:fa:ca:28:8f:9e:05:c3:89:be:28:
cf:41:ee:a6:4e:2d:64:da:90:05:ce:8e:47:29:db:
1c:90:20:9d:ef:9d:bd:93:32:03:c3:b2:ab:61:81:
03:d8:5e:78:9d:bd:c8:0c:6f:96:c0:96:5a:94:4a:
d3:9e:d9:65:16:cc:06:aa:b0:b8:e5:56:02:88:03:
c0:8b:cc:13:8b:09:3d:70:e9:bc:7f:f4:c0:fd:3a:
28:95:77:22:6c:b9:13:15:57:53:b0:a4:7f:df:27:
48:45:38:df:58:bb:c9:5c:04:41:cb:2b:02:21:38:
9d:c4:61:06:0b:35:0b:44:5f:19:59:d1:56:86:f7:
46:b8:06:a2:0d:5d:9c:60:62:8e:50:65:2c:94:96:
04:03:0d:4c:44:43:c1:81:87:0f:6e:eb:61:ec:d3:
30:ae:a5:40:5d:f7:93:f4:33:7a:a9:6a:77:e8:4c:
12:45:21:9f:0a:f6:55:76:2b:f6:91:24:4d:0d:74:
ed:fe:53:f5:01:ef:94:a7:f5:2a:19:c4:e5:ee:2c:
1a:98:26:2d:33:b4:1f:fe:93:60:22:c3:37:25:65:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D2:99:A7:88:82:24:E0:A0:18:5C:6F:E8:2F:45:C4:FA:2D:F5:04
X509v3 Authority Key Identifier:
keyid:10:48:DD:12:12:06:01:28:21:43:28:5E:BA:66:6B:13:B4:34:79:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEjdEhIGASghQyheumZrE7Q0eY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/O9KZp4iCJOCgGFxv6C9FxPot9QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/780d09-f0ce-4925-bd68-05ac9fb5c4dc/1/EEjdEhIGASghQyheumZrE7Q0eY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b2:c7:a6:ea:3c:56:75:a1:55:ad:b8:a5:3f:20:44:fd:37:
66:31:81:0b:6d:6a:31:6b:dd:be:cc:05:aa:ea:96:56:1b:8f:
4f:58:24:11:ab:3b:02:47:c2:64:a7:52:48:56:da:2e:5b:72:
5d:df:17:b8:19:17:e5:6b:91:c0:1c:45:7f:40:a6:39:24:c7:
09:4d:2a:a5:2c:5a:9b:1e:08:ae:38:45:56:fa:c3:86:6a:23:
fc:ae:66:18:a9:cc:db:03:2b:99:d3:68:f4:39:9f:1f:8d:12:
ad:f3:43:c9:5c:1e:40:81:ad:e8:26:99:6c:35:71:34:9b:4d:
49:63:90:27:ec:54:1d:08:17:de:f0:6d:be:88:d5:a8:d3:3f:
d4:25:65:37:61:27:5c:10:55:74:17:e7:27:03:e0:9a:ca:71:
f5:3c:b5:0b:29:ee:9e:01:2a:24:42:bf:c6:6b:9e:6a:2a:1d:
7c:a2:3e:2c:91:05:be:3a:ba:5d:13:2b:2a:8a:48:35:57:05:
01:91:19:05:12:8c:75:a8:74:76:9d:7d:33:be:86:b7:f9:16:
33:79:0e:07:ef:d8:24:94:ee:04:7e:d4:07:8b:f0:1a:0b:e5:
44:f2:8c:07:2b:c8:9f:56:c7:09:78:3e:46:ea:e3:bc:21:a9:
dc:29:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:18 2023 by rpki-client on console-ams.rpki-client.org