Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/QKGeYqHBktDQQU_-7i7h4fPN7cQ.roa
File: QKGeYqHBktDQQU_-7i7h4fPN7cQ.roa (raw, json)
Hash identifier: yAzVSnNXGwVET4cPLy7scei00/Y/1QX97a3qK5nOefI=
Subject key identifier: 40:A1:9E:62:A1:C1:92:D0:D0:41:4F:FE:EE:2E:E1:E1:F3:CD:ED:C4
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 01856CEF47F9AF4A9538CDCFBEC96A2B0E71
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/QKGeYqHBktDQQU_-7i7h4fPN7cQ.roa
Signing time: Sun 01 Jan 2023 10:44:58 +0000
ROA not before: Sun 01 Jan 2023 10:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.145.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:47:f9:af:4a:95:38:cd:cf:be:c9:6a:2b:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jan 1 10:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40a19e62a1c192d0d0414ffeee2ee1e1f3cdedc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:b3:e4:57:a1:a9:f9:31:8c:27:80:70:be:
39:2c:9b:8b:5f:05:69:e9:68:9f:d5:2f:38:6d:03:
3e:73:52:0c:61:32:4a:4a:41:44:31:ab:d3:a6:a9:
ff:e2:47:e9:e4:ae:1c:00:49:7d:34:f2:c0:e1:85:
39:89:c6:0b:1b:d8:33:7d:c6:1e:6e:12:26:af:df:
ce:90:98:03:37:e8:78:36:27:7a:a4:f0:ff:6d:60:
45:a5:5c:5b:c3:08:a9:a9:af:5b:c3:a6:ee:2f:79:
17:f8:c4:0d:77:ee:a8:be:1c:2c:53:a0:e7:fe:cb:
ea:34:b7:91:4b:70:30:49:f0:c4:78:8f:78:53:ee:
98:59:df:74:63:eb:a6:28:1e:fd:64:d2:1c:c3:1b:
56:3c:db:88:84:9e:95:0a:24:74:f2:2e:ff:99:2a:
a2:1a:35:d6:a0:55:bd:81:33:5b:a0:ee:cc:21:13:
34:81:4d:76:1c:1d:43:59:b8:bc:40:57:f4:40:a0:
fb:5e:ea:ed:08:2e:5a:7c:a7:50:58:aa:6a:43:45:
03:08:45:09:d1:f3:75:31:16:2c:fd:d6:a0:ea:01:
2a:e0:83:12:10:05:ba:22:83:c4:86:6c:85:bb:45:
7a:bd:d9:e2:28:8d:14:91:1e:a6:55:7c:92:08:66:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A1:9E:62:A1:C1:92:D0:D0:41:4F:FE:EE:2E:E1:E1:F3:CD:ED:C4
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/QKGeYqHBktDQQU_-7i7h4fPN7cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.0.0/24
Signature Algorithm: sha256WithRSAEncryption
03:34:0c:c9:60:9c:07:3f:23:11:a2:50:71:ac:f5:d9:db:e9:
74:87:1f:cc:cb:21:c9:a0:21:52:4a:d2:f7:7e:ea:12:69:75:
6a:92:b7:a0:3d:21:34:37:83:ff:11:00:8c:1b:f3:b7:50:c4:
67:e3:aa:83:97:ca:b8:47:2a:4d:27:7c:0a:e8:e9:2c:a5:0a:
df:09:c4:eb:70:a0:26:6a:d6:52:a7:73:51:ca:71:c1:14:72:
12:cb:43:bb:c6:ea:71:92:3a:6e:58:41:26:76:13:88:b9:e0:
ee:6b:12:a9:e2:68:09:99:49:f0:b7:b5:c0:51:e5:2f:8d:e6:
b3:0f:47:24:02:9d:03:87:a0:7c:29:f4:1f:86:99:a1:99:a6:
3d:04:58:69:1f:c7:00:bc:e2:0e:dd:5f:90:4f:84:76:b8:b6:
05:f8:14:74:db:0c:82:e8:0e:4d:91:6f:35:f9:10:3f:20:d5:
8b:67:a0:7d:19:2b:76:27:5f:73:21:27:08:1d:68:4a:3d:ab:
e3:f4:1f:a0:01:e5:0b:ea:bc:8c:69:7a:f8:8b:7b:7d:19:a4:
b2:d9:4b:7a:57:ff:41:72:2c:ca:ff:59:bc:ce:97:75:16:3f:
06:e6:5c:20:22:e4:2e:86:59:b7:e2:a5:36:8c:41:b5:0e:99:
62:2d:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:24 2023 by rpki-client on console-ams.rpki-client.org