Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/ak06N8Y62kvYnNV62yDVIn5cbuc.roa
File: ak06N8Y62kvYnNV62yDVIn5cbuc.roa (raw, json)
Hash identifier: R6Laj7JJ6IcZm8qCpBAEqbju4BCiNDo7FMwYadIR7G4=
Subject key identifier: 6A:4D:3A:37:C6:3A:DA:4B:D8:9C:D5:7A:DB:20:D5:22:7E:5C:6E:E7
Certificate issuer: /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial: 0854A100
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/ak06N8Y62kvYnNV62yDVIn5cbuc.roa
Signing time: Sat 01 Jan 2022 12:02:09 +0000
ROA not before: Sat 01 Jan 2022 12:02:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.87.163.0/24 maxlen: 24
45.87.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139763968 (0x854a100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Validity
Not Before: Jan 1 12:02:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a4d3a37c63ada4bd89cd57adb20d5227e5c6ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:0e:5b:5f:93:c9:ee:65:05:67:b1:90:d2:
9d:df:c2:15:5a:dc:0e:5f:2d:39:b1:bd:5d:a5:98:
05:bf:73:fb:ed:cb:2c:0e:e4:dd:a5:62:2b:84:2b:
d6:4e:77:2b:99:f9:3d:5d:da:55:0c:47:3b:14:3b:
47:09:cc:af:9c:53:10:6c:c9:1c:bd:ef:3b:af:01:
cd:6e:27:0c:38:a3:75:25:0a:99:8e:77:41:a7:c6:
18:5f:7d:02:38:3a:ad:f0:fc:34:f7:9c:d7:71:a6:
c5:f9:74:a5:3f:55:7b:eb:67:fb:b9:05:c3:52:d4:
37:03:54:ba:be:f7:b6:d5:b2:03:f2:ba:38:75:3f:
01:ec:28:d5:bb:06:07:92:c9:ad:89:e6:44:b3:9e:
88:57:e5:42:98:77:e4:11:86:f9:4e:9c:0e:5f:b8:
16:4c:8e:14:ce:46:03:bf:72:2e:87:9e:6e:d5:87:
84:59:ce:c3:87:a8:b1:45:0d:7d:4e:d5:76:5e:67:
1a:b0:54:82:7a:4c:5b:c0:7a:7d:eb:cc:27:b6:a9:
0a:06:f9:19:ed:4a:a2:52:60:ee:ee:b4:9a:c5:49:
f3:6f:ab:19:2b:7a:57:cd:15:60:19:a0:86:9c:67:
84:41:0f:3f:5a:72:64:2c:da:0c:70:c0:80:a0:31:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4D:3A:37:C6:3A:DA:4B:D8:9C:D5:7A:DB:20:D5:22:7E:5C:6E:E7
X509v3 Authority Key Identifier:
keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/ak06N8Y62kvYnNV62yDVIn5cbuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.162.0/23
Signature Algorithm: sha256WithRSAEncryption
03:7f:ab:81:fd:10:ec:3b:e1:14:af:7f:a3:b6:e5:00:a9:18:
38:92:73:d2:f6:d8:e1:f3:90:63:85:66:5c:f5:d0:2f:69:10:
fa:eb:aa:a7:73:0e:16:1e:55:c4:ce:46:67:39:db:38:4d:16:
4d:28:93:9c:62:4d:3b:01:49:9c:32:0e:68:10:bf:e4:d5:9e:
59:b8:ae:e6:86:d4:e8:f5:2f:74:e9:81:a4:d6:14:f7:e6:f9:
8e:93:9b:82:3d:80:6f:43:34:83:de:94:67:1a:7d:bd:d9:11:
3f:73:c8:bf:66:ba:f4:8f:48:f4:9c:e7:68:b2:06:87:99:bd:
66:ff:16:76:64:42:5b:2c:3b:f0:52:38:4a:3a:67:07:ef:20:
b5:db:a4:d3:5e:e8:0e:39:c1:26:5e:b7:29:65:73:e9:ec:56:
b9:e5:02:0b:1f:8a:8c:e0:ea:53:17:da:60:3f:bd:f0:ae:38:
c7:82:3d:82:99:e6:39:33:6a:af:a8:75:78:84:ed:60:f3:60:
e9:66:5c:50:5b:7f:7b:41:c9:90:9d:13:9d:a5:5d:72:5d:6f:
fb:b2:34:a2:00:a6:cf:12:98:74:cf:e6:60:c5:53:7b:db:78:
f5:b7:23:c4:b2:88:5b:1d:79:1a:2b:cb:db:f1:3e:77:43:fe:
12:35:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:30 2023 by rpki-client on console-fra.rpki-client.org