Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/v_USie2Ecaa89FNy-LptlZjgtsA.roa
File: v_USie2Ecaa89FNy-LptlZjgtsA.roa (raw, json)
Hash identifier: PQn6HvDi+nOJEuImhW8pB88cqwZ03Cus3E1gsQAI7YA=
Subject key identifier: BF:F5:12:89:ED:84:71:A6:BC:F4:53:72:F8:BA:6D:95:98:E0:B6:C0
Certificate issuer: /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial: 01D4C4
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/v_USie2Ecaa89FNy-LptlZjgtsA.roa
Signing time: Wed 01 Jun 2022 10:22:20 +0000
ROA not before: Wed 01 Jun 2022 10:22:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24851
IP address blocks: 81.27.96.0/24 maxlen: 24
81.27.96.0/20 maxlen: 20
146.247.48.0/20 maxlen: 20
2a02:2bb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120004 (0x1d4c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Validity
Not Before: Jun 1 10:22:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bff51289ed8471a6bcf45372f8ba6d9598e0b6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:a5:1b:49:aa:13:c4:31:5a:41:65:75:65:
f3:55:05:15:ed:2c:d0:83:b3:4f:e5:5f:22:ef:9f:
43:c5:70:81:d6:bb:7b:d3:cc:a9:2a:46:f9:7f:7f:
ed:c1:9b:00:f1:45:39:45:00:84:09:85:00:8c:5e:
c7:1f:35:89:55:a1:29:a9:c9:00:53:53:c5:e1:a7:
13:8e:23:f5:a3:c1:fb:b6:dd:36:80:8e:05:69:ff:
69:f0:f7:39:99:89:78:5d:b0:73:3a:48:de:7e:c7:
49:b3:89:95:05:33:6a:8c:14:4d:20:33:86:2f:b9:
41:5b:96:3b:69:98:fd:4b:93:79:cd:b2:c3:6d:bb:
ee:d4:fa:c6:05:b2:98:47:82:2f:30:8d:f0:fb:da:
37:5b:2d:30:fb:bf:d0:82:03:f6:a4:e8:12:3f:00:
ff:12:72:06:89:06:26:34:0e:98:91:ca:8d:f3:8f:
b9:3a:42:41:f7:b8:e7:35:45:5e:49:81:e0:c7:f2:
c5:7d:2a:84:71:c1:3e:6d:b0:00:49:eb:fb:41:58:
ef:8a:37:59:37:27:52:0b:c0:e3:ab:5e:d5:d6:c5:
7c:bf:2f:01:82:60:57:2f:c3:1f:1e:b1:76:bd:f5:
48:ee:1d:9a:d2:30:28:ad:0c:40:dc:04:9c:70:98:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F5:12:89:ED:84:71:A6:BC:F4:53:72:F8:BA:6D:95:98:E0:B6:C0
X509v3 Authority Key Identifier:
keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/v_USie2Ecaa89FNy-LptlZjgtsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.96.0/20
146.247.48.0/20
IPv6:
2a02:2bb8::/32
Signature Algorithm: sha256WithRSAEncryption
ac:83:e7:df:8e:93:5b:df:ff:57:d3:82:e7:03:94:02:25:87:
3c:fd:32:44:c2:94:76:f1:ae:68:71:14:ee:0d:72:c7:6d:fd:
6e:bf:e1:ca:e1:da:97:69:84:19:ea:8e:0b:01:ca:79:1a:80:
bb:2b:ac:f8:f6:c8:7d:5e:79:8c:cf:86:0c:38:2d:ab:a5:e2:
5e:75:6a:51:84:22:42:30:32:5e:63:80:d2:80:23:49:d9:33:
d7:af:b5:ea:b4:ee:75:a2:9b:99:c8:65:bc:66:dd:12:21:5f:
fd:23:f3:56:a0:d2:2b:1e:03:5c:0e:92:be:c5:5d:3d:df:6c:
d9:ea:a3:c2:74:44:ba:99:0f:92:d2:12:8c:de:f6:28:8a:2f:
bc:3f:50:44:0b:0e:14:f5:62:fa:4f:cf:e1:39:15:67:b4:63:
30:84:44:c9:3c:34:50:8b:04:a8:08:ca:e2:23:82:1d:39:1f:
a0:0d:2e:1e:92:cf:1a:d1:d2:68:1f:cd:2d:33:67:0c:6d:4f:
ff:53:ad:68:af:ea:0b:1c:b7:56:40:9d:8c:8c:9d:8f:e6:3b:
15:3e:4e:42:cd:ab:87:02:bd:94:e6:f1:d3:cd:3f:8f:3a:78:
ef:a5:d6:77:3b:b2:7b:41:e2:f5:e1:e3:00:83:0d:0a:17:25:
90:e0:33:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:12 2023 by rpki-client on console-fra.rpki-client.org