Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/k26inh6v8CVih1dw_XLPGw95iVU.roa
File: k26inh6v8CVih1dw_XLPGw95iVU.roa (raw, json)
Hash identifier: IinywB6tndY+k1OvuNNhwGsfHuwrhTYwNazcb5kLW4Q=
Subject key identifier: 93:6E:A2:9E:1E:AF:F0:25:62:87:57:70:FD:72:CF:1B:0F:79:89:55
Certificate issuer: /CN=01f9a54df6796fd2d7a936f647759f7327965e13
Certificate serial: 02D64D67
Authority key identifier: 01:F9:A5:4D:F6:79:6F:D2:D7:A9:36:F6:47:75:9F:73:27:96:5E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfmlTfZ5b9LXqTb2R3WfcyeWXhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/k26inh6v8CVih1dw_XLPGw95iVU.roa
Signing time: Sat 01 Jan 2022 02:56:07 +0000
ROA not before: Sat 01 Jan 2022 02:56:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42263
IP address blocks: 45.140.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47598951 (0x2d64d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f9a54df6796fd2d7a936f647759f7327965e13
Validity
Not Before: Jan 1 02:56:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=936ea29e1eaff02562875770fd72cf1b0f798955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:c2:df:40:7b:82:a2:f4:c1:88:6c:d8:2e:
23:92:b1:d0:4a:5d:34:32:d7:19:9e:20:84:14:b7:
01:7e:f6:32:f8:e7:4e:59:81:0f:db:ef:6f:ea:0e:
4b:44:1e:bb:b6:b7:4e:25:fc:5e:7d:ad:08:f5:ea:
4d:03:e0:54:4c:ee:cf:1c:8c:8f:ec:1a:45:37:87:
39:2b:fe:e0:db:be:c9:62:14:99:44:50:50:68:fb:
79:0d:99:c3:4d:1e:21:3d:c7:e8:79:a5:c9:2c:ac:
d4:8b:fc:ba:6e:a9:95:0e:ba:92:de:10:4d:15:b8:
00:16:6c:11:74:23:71:12:97:56:42:20:c4:4e:ea:
02:64:83:73:6c:cb:5b:3d:f9:28:0f:55:d5:96:86:
84:0e:6c:a6:44:25:5a:4a:4a:7a:14:fb:90:18:5d:
ab:54:6f:1b:11:33:dc:63:d4:98:e1:5a:7e:01:80:
07:b3:2d:26:e3:2c:4e:c5:a8:c6:a7:6d:3f:e3:ea:
4f:70:cf:eb:bf:0f:c3:4c:58:25:f2:92:7a:50:95:
1d:55:55:de:51:f4:65:35:3a:43:b9:53:48:29:06:
4b:93:e1:d0:e8:15:88:89:b0:a7:3b:aa:b4:5d:5c:
38:7e:62:2b:8f:9b:eb:81:1e:f6:cb:2c:1f:b2:c0:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6E:A2:9E:1E:AF:F0:25:62:87:57:70:FD:72:CF:1B:0F:79:89:55
X509v3 Authority Key Identifier:
keyid:01:F9:A5:4D:F6:79:6F:D2:D7:A9:36:F6:47:75:9F:73:27:96:5E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfmlTfZ5b9LXqTb2R3WfcyeWXhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/k26inh6v8CVih1dw_XLPGw95iVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f94ad8-67dd-4d5b-b27e-81a628dc4382/1/AfmlTfZ5b9LXqTb2R3WfcyeWXhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.116.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ca:b5:f9:53:44:50:25:1f:22:f2:4b:34:59:77:7a:67:9a:
7d:5d:b0:24:4a:44:1b:23:d4:6d:4f:40:ed:98:5f:2f:ae:89:
ba:48:12:b9:81:24:a9:67:bb:fa:1b:98:67:61:f2:b4:99:31:
c9:19:4f:a8:b9:63:1d:d2:81:a6:00:df:b8:c3:5c:fc:aa:55:
72:fa:2a:e8:33:7c:99:f0:f5:94:e5:f3:2f:21:72:c0:9c:37:
ca:45:82:26:ec:7d:61:44:11:48:a0:f0:86:71:47:b4:97:bb:
83:99:ae:57:8a:27:11:00:b8:87:3e:7b:47:67:68:dd:89:7a:
39:5a:a1:5f:7d:5c:48:f2:0b:38:19:70:29:51:ed:98:2f:57:
90:cc:3f:5a:33:09:1b:f4:e5:73:52:c3:08:81:df:ec:08:8a:
0a:e6:ac:94:3b:35:dd:4a:c4:d4:49:63:86:bf:6c:c7:f1:06:
97:4a:e4:1a:c6:0a:36:c5:e0:36:32:09:eb:ba:e2:21:43:f6:
c8:81:77:dc:b8:e9:8c:7b:82:8c:15:ee:5b:a2:e1:74:9b:1e:
f0:a2:d3:98:cb:dc:78:1a:46:fc:1e:ac:33:3e:5c:c2:fd:9e:
db:b4:da:3b:8a:60:a9:a0:47:c5:c4:8a:4e:7e:c7:36:71:60:
e0:bc:1a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:58 2024 by rpki-client on console-fra.rpki-client.org