Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/g14rL_ZNixPPwuZ0jMk-mwlIMs8.roa
File: g14rL_ZNixPPwuZ0jMk-mwlIMs8.roa (raw, json)
Hash identifier: QlkuB5L7JqILMNh/4DbAVh4q27iO4KmAQgRHd4VBIBs=
Subject key identifier: 83:5E:2B:2F:F6:4D:8B:13:CF:C2:E6:74:8C:C9:3E:9B:09:48:32:CF
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 01890271C3E54D4F0F844A3277F99C68FE23
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/g14rL_ZNixPPwuZ0jMk-mwlIMs8.roa
Signing time: Wed 28 Jun 2023 14:39:17 +0000
ROA not before: Wed 28 Jun 2023 14:39:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 45.132.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:71:c3:e5:4d:4f:0f:84:4a:32:77:f9:9c:68:fe:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jun 28 14:39:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=835e2b2ff64d8b13cfc2e6748cc93e9b094832cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:31:c7:9c:0e:43:71:15:bc:b6:82:b3:93:f1:
b4:03:d1:23:c6:b6:f0:2f:c9:17:16:3f:90:c4:7c:
d2:26:6a:9d:73:de:50:2d:43:b2:f9:76:88:3d:94:
e8:04:52:64:cf:3f:fb:81:b5:96:66:15:10:5d:f7:
70:a3:4b:fd:06:44:f3:21:da:86:21:33:3a:f9:9d:
2a:e5:f6:5c:d1:f5:37:3b:6f:84:09:e0:77:64:e3:
56:48:4a:fd:0f:54:82:5a:8e:35:5f:91:d9:ec:54:
43:fb:ba:c1:27:bc:b3:c5:db:a4:21:c4:b2:3f:00:
6b:1d:72:3b:9e:bd:fa:9c:ab:09:c3:c4:2a:d1:88:
23:3b:1c:98:33:f1:93:63:c2:c2:42:6a:2a:44:45:
81:f4:50:47:04:d5:57:eb:8d:56:4c:3c:ce:8c:18:
34:37:96:5e:c9:f1:95:e6:ed:ab:6b:0c:27:34:87:
7e:e1:b5:49:c0:44:47:c6:62:7b:cf:3e:3b:30:7a:
4e:55:ad:ad:c5:cc:c5:46:1c:79:f2:c3:b5:dc:5e:
7d:5a:61:1a:b5:44:86:2b:a4:80:6c:ff:1b:62:e2:
5e:74:49:12:d4:6c:11:f4:82:98:8f:ba:ec:4b:1e:
31:b8:75:b9:ed:2d:92:5f:1f:18:8f:c2:e7:fd:09:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:2B:2F:F6:4D:8B:13:CF:C2:E6:74:8C:C9:3E:9B:09:48:32:CF
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/g14rL_ZNixPPwuZ0jMk-mwlIMs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0c:23:fc:4c:80:46:3e:ca:65:82:90:56:70:d4:58:20:03:
3e:84:c6:a7:76:de:cd:94:57:b0:00:d4:5f:74:a2:79:3a:3f:
3c:bb:69:20:a6:db:47:81:f5:20:e6:44:db:65:25:04:a9:a5:
e3:5b:38:26:f4:2c:68:a5:04:68:85:2f:8c:b5:70:bc:40:7c:
64:b4:8e:12:f9:e4:3b:df:88:54:22:cd:7c:bd:56:2f:01:5e:
cb:bc:92:2b:53:d8:ad:dd:a3:40:82:c6:f2:fd:85:09:33:1f:
cc:79:ce:a4:6a:54:69:1c:6b:06:c5:87:c5:ce:3a:03:19:2b:
27:53:8e:1e:ff:28:e9:17:ec:da:71:82:04:6e:9f:43:dd:39:
c9:49:38:26:2e:88:0f:84:f2:b7:d0:c4:4f:ea:3b:44:cc:95:
dc:b8:1e:05:e1:1e:53:4f:80:d0:a8:7c:e9:54:eb:12:53:ec:
43:b9:76:19:52:45:4e:28:8a:43:f5:2c:b9:6b:77:26:46:72:
63:6a:1f:ce:a6:fd:b7:7f:c9:37:be:c5:65:57:d1:21:ab:28:
ce:8b:ac:e3:7d:d2:3b:01:42:5c:af:4e:90:ce:32:62:f1:2b:
e7:4c:90:79:c2:cb:64:da:f6:2b:97:62:4b:bb:2d:be:c5:d3:
2b:42:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 12:57:08 2023 by rpki-client on console-ams.rpki-client.org