Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/0o3mS-LiqYBdTL6ex7Sw43c5CZM.roa
File: 0o3mS-LiqYBdTL6ex7Sw43c5CZM.roa (raw, json)
Hash identifier: SjAc35jS9wW/uKvn74wuFiMpUfy5fj0Kww8FQOdEmDo=
Subject key identifier: D2:8D:E6:4B:E2:E2:A9:80:5D:4C:BE:9E:C7:B4:B0:E3:77:39:09:93
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 0187A5516496C80E898C59FC6EB054E27628
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/0o3mS-LiqYBdTL6ex7Sw43c5CZM.roa
Signing time: Fri 21 Apr 2023 19:36:27 +0000
ROA not before: Fri 21 Apr 2023 19:36:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212147
IP address blocks: 45.93.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a5:51:64:96:c8:0e:89:8c:59:fc:6e:b0:54:e2:76:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Apr 21 19:36:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d28de64be2e2a9805d4cbe9ec7b4b0e377390993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:d3:13:65:d7:6a:bb:b5:88:56:15:5a:03:
62:b2:a7:72:9d:47:33:7c:65:2a:05:29:4a:5c:e7:
70:3d:f0:d1:50:62:3a:15:e4:b5:df:ab:12:a2:82:
87:09:fc:fd:5c:1c:70:f6:a1:54:56:7c:6b:26:07:
6b:2b:1e:3f:07:ad:fd:2f:a0:ac:2a:1e:39:12:fc:
ac:49:ff:e8:82:4a:5f:07:63:98:73:dc:0c:3f:72:
e0:e3:84:97:87:04:2d:dc:01:d0:f5:dd:01:d2:63:
ca:4f:dd:9b:9e:d1:4e:59:0d:6a:84:1e:35:d5:36:
ff:95:69:95:4e:6e:db:af:72:70:3c:02:74:ca:5e:
15:55:43:ea:7d:64:f5:7a:30:bf:fb:88:ef:71:7b:
84:d8:0b:9e:8b:ec:62:6b:2c:2c:6b:9f:8a:7c:2e:
44:f2:38:9d:ad:f3:99:aa:dd:af:8b:41:be:f1:34:
3b:b6:07:1d:61:e0:73:19:a0:36:15:75:2e:ab:20:
f6:c5:c6:dc:ae:52:c1:6c:8c:12:f5:28:4a:c5:cf:
d8:73:1f:18:f6:66:ee:53:73:31:ab:54:f2:0c:2a:
4e:1a:f1:d3:d5:0c:e5:2b:74:37:86:fc:1e:1b:97:
6d:15:1a:1d:dd:77:59:9e:0b:4c:c7:a1:98:99:56:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8D:E6:4B:E2:E2:A9:80:5D:4C:BE:9E:C7:B4:B0:E3:77:39:09:93
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/0o3mS-LiqYBdTL6ex7Sw43c5CZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.13.0/24
Signature Algorithm: sha256WithRSAEncryption
76:77:87:d8:4d:17:21:9b:77:3c:5d:4a:ad:28:b2:aa:97:99:
9f:49:ce:59:99:ab:a7:b2:a7:8a:d8:aa:89:be:fb:de:78:a7:
71:a1:d6:6b:49:8e:c5:76:6b:9b:b2:5a:a0:bd:b9:44:20:51:
a4:b9:1f:05:50:5a:45:80:14:56:56:ae:5b:03:a4:0a:5f:98:
10:13:e8:00:fa:1e:6f:a1:05:05:5e:fa:1e:20:a6:60:73:39:
90:b3:05:2c:a2:ff:17:91:34:b3:74:17:ec:5f:fd:82:8a:50:
b4:c9:bd:45:d3:b7:6c:6a:e7:5f:61:37:e3:88:66:52:2a:87:
f4:04:7a:9c:9a:3a:da:91:3d:db:a3:49:80:1e:62:46:bc:c1:
89:e7:10:dd:99:fe:06:23:17:22:f7:74:b0:a3:00:5b:ca:8b:
69:ce:50:fe:04:8a:8c:37:1d:76:4c:1c:fe:66:8b:d0:45:02:
51:83:b8:b3:8c:7b:9d:a5:f2:08:94:62:75:7f:86:1e:8a:69:
39:45:1f:b3:82:9d:23:b5:98:50:41:d1:83:ce:a1:84:98:8f:
26:aa:18:d1:59:9b:16:6b:73:79:62:9f:fc:3c:4c:cd:14:2f:
20:4d:30:8a:33:8d:b0:fe:5c:ec:7e:59:02:be:c3:b0:a5:60:
93:c5:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org