Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/NZoxWZp00JkNvRYHRcJjhIBWZDs.roa
File: NZoxWZp00JkNvRYHRcJjhIBWZDs.roa (raw, json)
Hash identifier: 4SMD2LHxKmizJ5LcT01AVhG0YTbQtnOBhMBHopS2Z98=
Subject key identifier: 35:9A:31:59:9A:74:D0:99:0D:BD:16:07:45:C2:63:84:80:56:64:3B
Certificate issuer: /CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Certificate serial: 09771C6A
Authority key identifier: 76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/NZoxWZp00JkNvRYHRcJjhIBWZDs.roa
Signing time: Fri 20 May 2022 14:10:29 +0000
ROA not before: Fri 20 May 2022 14:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.8.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158801002 (0x9771c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76c2deff015fa3e8015b1d5fdbbfb779a2c8e617
Validity
Not Before: May 20 14:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=359a31599a74d0990dbd160745c263848056643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e5:e6:65:d5:8f:10:17:51:32:19:94:b3:81:
74:bf:d1:11:76:cb:73:74:a8:c8:02:52:3c:4c:6f:
3d:f2:4f:11:1d:44:2c:0f:ae:55:be:f0:b7:6a:0e:
29:96:52:6c:b7:c8:74:b3:8e:60:b9:21:1c:a5:c3:
17:4a:1e:9a:95:e0:a6:a3:15:6f:1b:f4:e7:3d:a0:
ee:5f:c6:3f:c9:0a:b5:be:5b:4e:22:68:b9:59:64:
88:1e:14:2d:3c:8c:60:d1:1b:a8:58:d2:b4:45:4e:
e1:a2:e7:a8:53:4a:ec:a4:d7:1a:81:a9:a9:28:9d:
58:78:35:48:7e:12:d0:80:9a:0a:f4:25:f7:49:ad:
a3:7b:46:36:cb:7c:ad:33:43:db:0a:4f:21:61:94:
55:fe:4b:4e:0e:5e:a4:60:c0:8d:75:05:48:55:0f:
3d:d2:e8:b9:3d:30:b8:f3:ff:32:78:93:8f:85:c3:
5d:a6:b4:d1:1d:cd:98:53:d7:dd:bf:05:92:9b:af:
61:b7:c0:39:16:12:9e:0e:8f:a5:74:1f:a7:a8:54:
4c:0d:9b:21:83:b8:68:ff:35:12:2c:3d:f3:ba:ac:
7d:8d:de:c3:f0:48:bf:1c:7d:7b:9e:a8:eb:d6:f1:
94:7c:5c:4e:ff:2a:d2:16:4c:0d:9d:21:2f:b0:34:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:31:59:9A:74:D0:99:0D:BD:16:07:45:C2:63:84:80:56:64:3B
X509v3 Authority Key Identifier:
keyid:76:C2:DE:FF:01:5F:A3:E8:01:5B:1D:5F:DB:BF:B7:79:A2:C8:E6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dsLe_wFfo-gBWx1f27-3eaLI5hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/NZoxWZp00JkNvRYHRcJjhIBWZDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a71c69-4ae5-4853-9da8-76ae701126f9/1/dsLe_wFfo-gBWx1f27-3eaLI5hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:02:73:16:bc:90:7a:a3:d8:92:86:f9:9e:a9:60:d1:6e:95:
e9:9c:30:eb:ae:95:88:a7:8b:4c:6d:96:1e:a7:61:b5:4d:bf:
e1:19:80:3e:84:e5:68:a9:8a:f7:59:86:1a:a1:64:09:45:9d:
dc:6a:03:8b:2f:a3:ae:37:33:38:d9:1d:9c:ae:dd:c2:8b:3a:
db:f7:1f:ee:6f:58:40:14:0d:f5:a6:8a:dd:f4:e2:1f:09:95:
94:29:72:83:9d:17:48:a4:47:9c:ac:4b:f2:01:2f:8b:9a:45:
e9:0d:ff:5f:e1:b0:02:b6:5c:d7:7e:13:47:98:ec:75:21:ae:
c0:3f:c1:75:60:97:c4:12:7f:89:a9:11:3f:ea:f2:81:39:60:
02:ab:c7:dc:be:8d:60:d7:85:c0:13:c4:bd:97:db:3d:3c:b6:
82:6f:dc:1e:29:f3:a4:81:f3:61:c8:5b:27:04:10:44:6d:c7:
91:e0:cc:f3:4f:ed:e8:5d:64:72:b7:54:da:7f:e0:98:8a:8b:
80:7c:bc:a1:e6:84:39:dd:bd:e5:c2:50:61:2e:85:e6:55:57:
ba:6f:c3:5f:09:a2:24:0b:f1:fe:34:22:aa:c3:7d:16:fd:dc:
fb:52:6b:e9:b7:e1:43:1c:ec:81:b7:23:f4:c3:2d:b5:05:42:
59:a4:f4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:42 2024 by rpki-client on console-ams.rpki-client.org