Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/pVYTLNWqfZvNavHqpazLJ4ouK_U.roa
File: pVYTLNWqfZvNavHqpazLJ4ouK_U.roa (raw, json)
Hash identifier: uL+jE48tuaRVe1mwI0hOxK6q7FMKLn6rDouMO1/Im/s=
Subject key identifier: A5:56:13:2C:D5:AA:7D:9B:CD:6A:F1:EA:A5:AC:CB:27:8A:2E:2B:F5
Certificate issuer: /CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Certificate serial: 01856BDC7D11F78FAC0B3E4BF0023CA2F148
Authority key identifier: FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/pVYTLNWqfZvNavHqpazLJ4ouK_U.roa
Signing time: Sun 01 Jan 2023 05:44:49 +0000
ROA not before: Sun 01 Jan 2023 05:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47693
IP address blocks: 185.41.228.0/22 maxlen: 22
2a01:56a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:7d:11:f7:8f:ac:0b:3e:4b:f0:02:3c:a2:f1:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab67434afc59618046828a135e7e7d0c7ed8c9a
Validity
Not Before: Jan 1 05:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a556132cd5aa7d9bcd6af1eaa5accb278a2e2bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:47:be:42:fb:7b:1d:8a:9b:7a:5e:cd:2c:
c2:cc:bb:39:9f:8d:c2:dc:5a:30:a7:7e:42:0e:26:
5a:80:05:36:19:bb:2e:bf:0b:e0:69:dd:98:2e:fe:
2a:94:1c:d1:38:c9:d9:48:9c:82:d2:d7:7a:72:a3:
b7:86:91:d0:49:1d:3b:eb:37:ea:63:45:bf:6a:99:
14:ca:f4:37:92:84:90:f4:17:d8:35:14:2b:b7:31:
cc:53:d7:f9:60:7a:87:15:df:0e:f9:a0:d2:95:9d:
a9:5e:74:75:18:a4:9c:00:bd:25:c5:20:98:ea:fc:
dd:f3:dc:71:93:b9:c8:16:25:f5:c8:1a:ef:04:80:
c7:19:4c:82:f7:b4:30:3c:30:6a:b3:58:fb:72:7a:
39:39:95:9d:81:d8:d6:80:76:31:ca:c5:7e:4e:a1:
33:6b:3a:55:04:f7:b2:a2:06:48:56:56:57:8d:75:
23:ee:7c:6a:38:72:7a:db:f4:e0:ee:47:f4:5a:e6:
dd:03:d5:8d:cb:58:7e:39:6a:c9:d0:6b:48:58:f9:
31:a6:2b:6d:71:3d:9a:03:b9:b8:57:d5:f0:91:1a:
58:ba:54:cd:2f:55:91:57:0b:44:c5:24:68:28:50:
33:10:e4:da:58:18:c6:99:f8:1b:e9:14:8b:28:ad:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:13:2C:D5:AA:7D:9B:CD:6A:F1:EA:A5:AC:CB:27:8A:2E:2B:F5
X509v3 Authority Key Identifier:
keyid:FA:B6:74:34:AF:C5:96:18:04:68:28:A1:35:E7:E7:D0:C7:ED:8C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZ0NK_FlhgEaCihNefn0MftjJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/pVYTLNWqfZvNavHqpazLJ4ouK_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/004b27-9e70-4466-8a32-a330c7640682/1/1-rZ0NK_FlhgEaCihNefn0MftjJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.228.0/22
IPv6:
2a01:56a0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:e2:da:12:72:05:23:d8:53:71:93:28:7a:78:41:05:44:77:
64:8e:42:42:06:69:97:e7:68:c5:aa:eb:65:6b:17:11:ba:78:
fd:78:9a:41:cd:72:3a:32:b6:d2:56:88:bd:11:f6:75:b9:56:
07:c3:29:4f:7d:3e:15:dd:b5:b5:d6:53:d5:d9:8a:0a:5b:31:
77:79:5b:92:1d:c7:14:c6:17:76:71:4b:b0:f5:44:0d:ff:64:
9d:a9:f5:5c:eb:16:85:d6:e6:9f:b7:5c:74:51:b0:21:90:09:
5f:e7:1e:bc:1e:78:8b:e4:88:cc:7a:df:44:1b:c5:78:9a:85:
48:7a:bd:03:38:44:e6:e2:82:8f:48:51:22:47:da:75:20:1b:
a5:02:10:11:31:34:1c:3a:1c:f6:c6:4d:92:ec:f5:26:ba:61:
42:d9:53:10:4c:6e:3d:70:78:68:04:2f:a5:ef:b4:21:be:5e:
f2:0a:64:f0:71:36:d6:de:7b:94:64:b6:8c:3e:82:34:62:fd:
ba:86:fc:d0:25:86:36:b9:2e:b6:88:62:c5:59:7b:fd:b3:46:
86:8a:d2:55:ec:d9:aa:88:f0:c3:b2:16:d2:e3:22:60:29:88:
af:da:66:8d:fa:c6:3e:ba:3a:05:6c:55:01:fb:b9:61:d7:70:
2f:aa:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:55 2024 by rpki-client on console-fra.rpki-client.org