Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/kq6InCJJKDGXEybI9mOViOstyC8.roa
File: kq6InCJJKDGXEybI9mOViOstyC8.roa (raw, json)
Hash identifier: MA6G3QMUikDtblqC7idA+4VYrp7PQs2CjxwQJzw0n20=
Subject key identifier: 92:AE:88:9C:22:49:28:31:97:13:26:C8:F6:63:95:88:EB:2D:C8:2F
Certificate issuer: /CN=826f8bc1ec4e4dfc02eecc2de4a9edcc4697a3bd
Certificate serial: 01856C9CA080C19B4468B3AA6DE9EEE15E95
Authority key identifier: 82:6F:8B:C1:EC:4E:4D:FC:02:EE:CC:2D:E4:A9:ED:CC:46:97:A3:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gm-LwexOTfwC7swt5KntzEaXo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/kq6InCJJKDGXEybI9mOViOstyC8.roa
Signing time: Sun 01 Jan 2023 09:14:42 +0000
ROA not before: Sun 01 Jan 2023 09:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208162
IP address blocks: 45.149.236.0/22 maxlen: 22
2a0f:7e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:a0:80:c1:9b:44:68:b3:aa:6d:e9:ee:e1:5e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826f8bc1ec4e4dfc02eecc2de4a9edcc4697a3bd
Validity
Not Before: Jan 1 09:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92ae889c22492831971326c8f6639588eb2dc82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:37:c9:98:70:3f:68:55:48:0f:20:20:9e:
3a:f6:09:2e:49:07:39:69:94:cc:79:8b:7d:80:5b:
f4:66:8e:9d:22:1a:b3:13:cf:b7:2a:d5:ec:fd:e1:
52:cd:33:83:0e:47:36:e7:2b:9e:fe:04:56:d0:d7:
77:4b:88:71:db:b0:17:1f:a2:ae:13:87:9b:1d:d4:
25:78:41:f3:86:87:39:73:76:31:04:c2:cc:2e:eb:
35:42:84:fe:59:60:80:2d:4e:82:25:78:05:51:4e:
f3:25:c6:5a:6d:f5:68:6f:05:ec:a8:d2:21:f8:31:
d0:02:6c:cc:e4:63:81:57:e1:29:44:7b:0d:2c:2e:
20:b0:49:a6:e6:21:8f:0d:e0:69:0e:52:52:17:a9:
9c:85:b3:8c:d1:ed:de:44:93:17:dd:eb:bc:34:dd:
0e:55:4d:5c:02:23:bb:1a:16:4d:52:32:8d:4e:58:
5d:d8:64:b4:f4:f1:48:c8:ec:1b:54:c7:b2:df:8a:
f0:99:3a:c6:e7:f2:09:4e:9d:da:7c:12:11:f3:93:
36:be:b4:57:ef:03:d9:23:a9:5f:5f:ed:2c:c7:12:
b3:af:7b:d4:06:40:98:f8:2a:15:a5:a4:ee:ce:43:
97:ba:2f:bc:74:c2:da:50:4f:a2:8c:97:ab:89:6f:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:88:9C:22:49:28:31:97:13:26:C8:F6:63:95:88:EB:2D:C8:2F
X509v3 Authority Key Identifier:
keyid:82:6F:8B:C1:EC:4E:4D:FC:02:EE:CC:2D:E4:A9:ED:CC:46:97:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gm-LwexOTfwC7swt5KntzEaXo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/kq6InCJJKDGXEybI9mOViOstyC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/396e31-3b14-4e14-b2ec-1684b2f08e72/1/gm-LwexOTfwC7swt5KntzEaXo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.236.0/22
IPv6:
2a0f:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
0a:8c:20:d8:1f:fa:56:1d:e2:73:5c:6f:25:21:4f:70:82:59:
db:db:e2:93:d1:06:8a:06:83:a3:b2:c3:73:9a:72:64:6b:89:
09:3a:5f:8d:dc:5b:a3:d2:c2:26:93:98:74:72:42:41:4b:48:
fd:d9:a4:e4:3a:14:b4:0d:d9:21:0e:0b:07:d5:40:77:ef:69:
d8:ba:38:87:63:14:d0:5a:8f:a9:8e:55:e0:bd:f0:6e:fb:4d:
16:7f:b5:43:9d:80:cc:bd:05:66:c4:e3:b0:3f:3a:f0:d0:1a:
0e:6c:30:53:5d:db:1b:3a:c7:4a:8d:22:cf:97:ed:cd:d1:b7:
03:6d:5e:19:e7:36:37:70:99:b8:06:7b:66:c1:2c:cf:24:80:
f5:00:8b:1c:5b:68:a9:89:3a:54:69:98:92:d1:66:28:7e:73:
ed:69:5f:00:d7:95:47:40:3c:89:02:3b:4c:43:da:73:0d:1d:
2f:ee:62:e5:b5:b4:2a:e0:b8:3f:6d:98:df:4c:36:21:f1:b0:
13:ce:b3:ce:bc:4b:6c:70:8f:bf:3f:79:1f:d8:51:c5:4e:27:
87:e6:03:e7:94:47:cf:18:ee:d5:d9:7f:2e:e0:0e:7a:0a:86:
42:fa:7e:cc:5d:8c:21:08:c6:19:a1:40:f1:12:9f:8b:1a:ca:
37:7f:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org