Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Dxg0zzQIFQf9PtTOsOgSLGgef_4.roa
File: Dxg0zzQIFQf9PtTOsOgSLGgef_4.roa (raw, json)
Hash identifier: acKhkDOH9E3Sbojmo/SYGc7gX6EQ7vKCwhtXJYuScVg=
Subject key identifier: 0F:18:34:CF:34:08:15:07:FD:3E:D4:CE:B0:E8:12:2C:68:1E:7F:FE
Certificate issuer: /CN=624039399017fa093dc8d503799f6ca403f0bd05
Certificate serial: 01856D7865BA6158022B41D5F19BB63BF40C
Authority key identifier: 62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Dxg0zzQIFQf9PtTOsOgSLGgef_4.roa
Signing time: Sun 01 Jan 2023 13:14:44 +0000
ROA not before: Sun 01 Jan 2023 13:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 45.95.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:65:ba:61:58:02:2b:41:d5:f1:9b:b6:3b:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624039399017fa093dc8d503799f6ca403f0bd05
Validity
Not Before: Jan 1 13:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f1834cf34081507fd3ed4ceb0e8122c681e7ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:d8:7d:fa:a9:2f:a1:bb:88:b8:8c:39:a7:
91:9a:e7:fd:2a:68:be:5e:d5:d0:77:de:09:f4:94:
a7:8c:09:ed:b2:ae:ed:b4:07:83:e2:f9:d1:cb:ec:
66:31:7e:74:c4:d8:ad:dd:0d:02:0e:36:08:76:c6:
9a:1d:51:6c:03:a8:4c:1a:0e:40:b1:da:a4:1d:fe:
e0:d5:02:11:b8:08:0d:c6:34:8b:61:01:a2:29:bf:
cd:ac:24:d6:4e:b0:ce:0d:55:d9:31:1f:34:43:ef:
52:a0:a0:9b:1e:44:0a:bc:b3:3e:cd:1c:be:5a:92:
45:51:55:2c:0e:54:d6:73:7f:66:5d:7f:07:c0:a8:
bc:09:b8:f6:53:6b:59:9e:e1:51:6e:cb:c4:9b:3f:
b2:97:b6:24:c0:4d:8b:db:de:7d:49:74:d8:3e:28:
27:d2:a5:1b:63:9a:a1:77:1e:53:e1:ae:ce:79:ec:
28:dc:c0:b3:59:e8:01:92:4e:e9:b5:ed:3b:1d:a2:
c0:a9:f4:93:52:69:e1:22:52:c0:0d:c6:15:ba:a0:
0d:6d:b7:c6:e6:b9:29:e3:d9:6a:82:50:39:3b:7e:
b7:a8:f6:1b:ab:55:59:78:ea:8c:30:d0:66:4b:93:
ef:2e:5b:81:5f:cd:10:02:9f:93:7e:8c:86:c2:88:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:34:CF:34:08:15:07:FD:3E:D4:CE:B0:E8:12:2C:68:1E:7F:FE
X509v3 Authority Key Identifier:
keyid:62:40:39:39:90:17:FA:09:3D:C8:D5:03:79:9F:6C:A4:03:F0:BD:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkA5OZAX-gk9yNUDeZ9spAPwvQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/Dxg0zzQIFQf9PtTOsOgSLGgef_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/eb239a-33c8-4dbd-bc96-3259496e7c5f/1/YkA5OZAX-gk9yNUDeZ9spAPwvQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.214.0/24
Signature Algorithm: sha256WithRSAEncryption
30:04:56:f0:e0:ed:ba:79:c5:e1:54:1e:38:44:0d:59:82:78:
f9:2d:7f:d3:3d:72:21:af:30:7a:7d:37:fd:63:56:89:75:20:
1a:d0:fb:db:ad:aa:c0:e5:f0:8e:55:3e:b9:fd:d8:c5:6c:33:
a4:fc:37:3d:74:38:7b:ba:02:dc:ec:9c:c5:8d:ad:5f:47:ff:
9b:e4:18:f9:62:a9:20:ba:ab:bc:dd:05:86:8b:1a:00:70:9b:
4d:85:ba:39:89:76:ed:e4:7c:c2:9f:c2:5d:ca:3a:93:5d:b3:
99:e2:61:b3:33:d5:53:10:87:ce:26:13:9f:9c:83:77:0e:e9:
cc:05:07:14:ef:73:47:89:80:78:fc:19:fc:68:46:97:45:0b:
a2:9d:ae:6e:a5:5b:b7:55:52:e1:1a:f1:77:f7:61:36:15:3d:
21:32:b9:9a:63:0f:f8:0e:63:8c:85:b8:df:ce:89:53:f9:c1:
8e:58:76:0e:46:eb:b8:5f:f5:4c:d6:15:40:b7:f0:89:a2:e6:
7f:8b:9c:73:65:91:79:84:e4:31:a5:4e:d0:3f:fb:7c:44:0d:
9d:eb:46:24:fd:0d:10:5b:ce:c4:c2:75:1e:6a:e5:19:02:83:
cf:8a:90:82:32:fb:32:81:54:d6:be:a6:1f:62:25:80:5a:1b:
e4:90:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:43 2023 by rpki-client on console-fra.rpki-client.org