Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/cKDR_LYgnm8zl3BXTaOOI8EGtbc.roa
File: cKDR_LYgnm8zl3BXTaOOI8EGtbc.roa (raw, json)
Hash identifier: qVXeOmSmbEXkeAKf2vSmZsyAmstVXvb8grlR9fKb4hY=
Subject key identifier: 70:A0:D1:FC:B6:20:9E:6F:33:97:70:57:4D:A3:8E:23:C1:06:B5:B7
Certificate issuer: /CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Certificate serial: 077771B4
Authority key identifier: 48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/cKDR_LYgnm8zl3BXTaOOI8EGtbc.roa
Signing time: Sat 01 Jan 2022 07:56:00 +0000
ROA not before: Sat 01 Jan 2022 07:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60440
IP address blocks: 5.133.80.0/22 maxlen: 24
2a09:6a00::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125268404 (0x77771b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481481cc00d7f63f97c1336d32b8905c1500fc22
Validity
Not Before: Jan 1 07:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70a0d1fcb6209e6f339770574da38e23c106b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:81:1b:82:ed:a8:f0:be:b8:23:ad:27:82:
08:a3:44:d0:84:4a:dd:17:2c:d9:97:18:44:dc:b4:
9d:7c:1a:d0:bd:2d:19:60:9c:ba:29:99:a4:21:d5:
33:79:04:ab:89:24:b1:46:10:7b:fa:3b:d0:cf:12:
8f:89:8f:92:79:19:3c:c4:19:a1:67:3a:de:9c:23:
85:9d:d2:85:b6:9c:e5:9f:a0:bb:25:39:b7:ed:d5:
f1:4e:4f:78:22:02:37:2e:55:5d:b0:e2:8d:25:d2:
29:46:9b:33:16:2f:71:9e:75:6d:ee:cc:00:41:25:
3d:d6:45:d0:8d:07:41:33:eb:8d:79:96:68:02:d5:
8e:46:a6:82:62:8a:13:b0:1e:94:27:d3:a4:d7:28:
11:f0:89:d2:f3:79:3c:c0:fe:0b:f1:d4:ad:fb:59:
6d:f2:37:4f:87:b6:89:bc:f6:a1:4b:5b:b8:8d:68:
44:d6:57:01:66:41:5f:d9:43:67:62:1f:0f:57:a4:
6d:d3:e6:6b:95:eb:0c:84:91:54:40:ba:07:25:4d:
45:97:f9:5b:23:98:54:7d:e4:7d:15:f2:8c:08:23:
49:91:60:85:00:50:a7:5e:4c:06:60:41:bd:d6:57:
1c:4a:ff:62:a1:20:b7:68:7b:61:da:2b:ff:cc:82:
bd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:D1:FC:B6:20:9E:6F:33:97:70:57:4D:A3:8E:23:C1:06:B5:B7
X509v3 Authority Key Identifier:
keyid:48:14:81:CC:00:D7:F6:3F:97:C1:33:6D:32:B8:90:5C:15:00:FC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBSBzADX9j-XwTNtMriQXBUA_CI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/cKDR_LYgnm8zl3BXTaOOI8EGtbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/cd9f3b-2a30-4ac1-aa86-433cd63d108b/1/SBSBzADX9j-XwTNtMriQXBUA_CI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.80.0/22
IPv6:
2a09:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
c4:cd:3d:f9:2d:ad:ca:4d:af:93:a9:4e:50:60:49:4f:e4:f1:
b3:0b:f0:1e:cb:f5:77:11:e9:cb:45:ef:8b:0e:b1:7a:08:35:
1b:e5:0c:9f:bc:43:53:68:c4:bb:92:03:37:1a:7d:47:88:db:
41:10:d5:81:16:7b:f8:c1:eb:7c:75:80:65:16:d0:db:8b:14:
5f:92:c8:6c:75:d8:ba:a2:9d:59:28:b1:c2:9e:aa:90:2d:ea:
57:2a:ae:cb:54:51:33:d8:5f:76:47:db:06:bc:2c:ac:85:77:
8b:1f:0f:d3:06:48:e8:a4:6f:4f:9f:db:da:53:ce:e4:b0:98:
29:d1:66:f4:a2:9a:f8:0c:08:4a:5f:3a:23:22:7d:08:87:70:
ae:ef:6c:ec:0f:d1:79:9b:b7:71:d5:01:30:c5:42:d2:fd:fc:
4b:b5:46:f7:ad:87:56:4f:5b:b4:ea:c2:87:b4:0b:c0:c7:57:
15:1a:0d:c0:c8:97:0e:de:99:44:f0:d0:08:a3:66:6a:7b:21:
74:9c:17:d5:f5:29:77:65:59:3d:8f:56:69:67:b2:0e:73:7c:
45:db:5a:4b:b5:ce:09:92:26:b4:48:5f:f6:e6:a6:62:8a:3f:
0e:02:44:ac:62:d8:bb:6e:c3:4b:9c:22:27:2b:42:2d:d8:35:
92:76:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org