Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/nl_C5T9d019jcbJ2QZO0z58N9uY.roa
File: nl_C5T9d019jcbJ2QZO0z58N9uY.roa (raw, json)
Hash identifier: 2GMAYZBB8Ju633jDtrtMrYtDv1GBo3pHRPp9vA2RFCw=
Subject key identifier: 9E:5F:C2:E5:3F:5D:D3:5F:63:71:B2:76:41:93:B4:CF:9F:0D:F6:E6
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 01823BD4E0CE5B1413AAAE41C4B1E4D17F12
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/nl_C5T9d019jcbJ2QZO0z58N9uY.roa
Signing time: Tue 26 Jul 2022 18:46:23 +0000
ROA not before: Tue 26 Jul 2022 18:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 45.145.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:d4:e0:ce:5b:14:13:aa:ae:41:c4:b1:e4:d1:7f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Jul 26 18:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9e5fc2e53f5dd35f6371b2764193b4cf9f0df6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:07:c9:2c:94:f7:b1:6f:31:a5:29:42:5c:
df:d8:6d:39:7b:76:3c:c8:0a:c3:1b:51:d1:0e:de:
26:d2:4b:cc:da:b3:cc:75:89:50:d4:73:ec:ab:99:
9f:fa:e3:a1:68:04:9d:b6:f4:52:51:d4:c2:9f:9d:
6c:4e:bb:24:5f:7a:ad:90:5e:32:01:be:68:9a:d7:
d8:ac:52:64:1a:07:7c:b8:49:17:d1:2f:ba:b2:9f:
39:a0:53:77:98:8f:15:fc:39:92:40:e0:36:01:64:
e2:91:7a:62:c8:36:a9:50:c6:8d:20:4f:5f:ed:d9:
2a:64:f9:9b:34:32:22:de:52:a8:4d:f4:c8:c3:8c:
8e:21:78:e5:a4:23:b3:8c:6a:8b:8f:e5:17:cf:61:
63:cb:8f:ce:53:6a:43:73:59:4e:52:c0:50:ba:36:
99:0e:41:eb:43:2d:30:e8:19:e3:16:27:2a:a2:69:
45:5d:1e:af:15:63:3a:b8:f6:5b:e4:21:c7:b1:ca:
4e:52:a7:89:fd:aa:b5:57:c8:90:1b:db:2f:23:a1:
2b:70:b6:be:97:57:05:ce:2a:ff:b9:75:b2:3a:5b:
b1:a2:a2:1d:f1:22:87:33:b5:9d:7e:6a:a1:3a:6f:
02:78:69:5e:ac:a4:90:a0:12:9d:6d:84:23:b6:8a:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:C2:E5:3F:5D:D3:5F:63:71:B2:76:41:93:B4:CF:9F:0D:F6:E6
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/nl_C5T9d019jcbJ2QZO0z58N9uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.0.0/24
Signature Algorithm: sha256WithRSAEncryption
77:06:5c:8f:27:06:dc:1e:5b:88:51:19:75:5e:83:20:b6:08:
50:7a:d5:b1:bc:f3:fd:4f:5c:f5:bd:3c:49:5b:b6:3b:ec:b2:
a2:98:6b:e8:c7:73:59:5f:0c:bc:98:35:91:89:3a:34:cc:a6:
dd:0c:81:f5:75:92:cc:a7:de:5d:80:87:d1:41:00:86:37:85:
26:db:7a:e9:8a:0a:74:d7:e3:2c:8f:8e:ef:ef:ac:7b:99:ce:
e4:82:34:81:39:1e:40:30:fd:31:82:ac:56:97:9b:ba:d1:bd:
b3:2a:2c:26:95:a8:9e:93:0c:cd:f7:ac:c6:7a:bf:fa:30:b8:
56:22:c1:cc:b0:56:81:d7:29:60:6b:68:2c:00:a0:51:f9:6a:
2e:8f:17:69:11:32:47:d4:aa:ed:cc:d9:06:c3:8e:96:36:3c:
dc:47:41:f8:76:07:3c:42:7b:ea:65:48:ca:cd:21:ce:d0:f1:
68:92:b0:08:94:aa:0f:dc:ee:5e:36:19:6d:05:ba:e5:2e:43:
b3:4f:44:46:96:b7:fc:32:65:04:1f:56:7d:79:cf:5d:36:ce:
b7:94:ef:e5:ef:40:5f:b5:e5:77:51:9c:dd:df:95:98:7d:e1:
fe:4f:09:5f:bf:fa:35:2c:13:72:fe:9d:9d:06:fb:dd:08:10:
f6:b4:63:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:31 2023 by rpki-client on console-fra.rpki-client.org