Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/TKCuIUQru6UPaInuPgGTLBljwyE.roa
File: TKCuIUQru6UPaInuPgGTLBljwyE.roa (raw, json)
Hash identifier: R8G78uf9wNsLx43pm6+iTW31ahHfvfbKpPLRI3aLsVE=
Subject key identifier: 4C:A0:AE:21:44:2B:BB:A5:0F:68:89:EE:3E:01:93:2C:19:63:C3:21
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0187C1E3C1E100AB23F7CD9745F49AE0D0FA
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/TKCuIUQru6UPaInuPgGTLBljwyE.roa
Signing time: Thu 27 Apr 2023 08:45:41 +0000
ROA not before: Thu 27 Apr 2023 08:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 193.37.72.0/22 maxlen: 22
45.88.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:e3:c1:e1:00:ab:23:f7:cd:97:45:f4:9a:e0:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Apr 27 08:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ca0ae21442bbba50f6889ee3e01932c1963c321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ca:41:e3:53:be:e1:28:61:96:aa:0f:41:d9:
e0:4a:e8:e3:cd:a2:1e:df:72:47:31:6d:dd:80:7e:
10:6c:21:a0:ae:5e:5a:b5:3a:8d:55:68:77:97:b9:
4f:c3:61:9a:11:e1:55:32:4f:d4:fb:2f:4e:7e:80:
58:ef:5e:ed:01:8d:55:84:93:cf:1b:1b:9d:74:ac:
08:5d:a7:b2:72:32:b9:6c:4b:9c:8a:45:a5:96:ae:
db:52:ac:1b:60:86:df:3e:0b:66:84:5a:53:d6:e1:
5e:46:cd:66:c2:e1:87:cc:6b:e4:04:e5:51:f8:df:
44:93:2b:ae:8d:be:e4:21:1f:2e:2d:28:ff:bb:75:
7a:14:1a:03:a2:8e:8a:f0:c1:c1:fc:58:b8:cf:90:
d2:3f:65:98:1e:0d:11:b9:55:7d:03:75:42:b7:ac:
04:5b:79:4b:0b:0e:21:50:b6:9a:35:d8:9a:12:ff:
61:73:f6:b6:6f:07:d9:c7:a3:d8:a1:34:af:ff:2b:
9b:04:d0:f1:24:1b:ff:d4:d0:67:de:cb:a3:1c:4f:
8d:6c:83:63:15:f3:93:3c:3d:fa:fe:a3:42:18:b1:
e3:54:33:a6:86:f1:14:19:ce:90:ed:1a:b0:4d:ab:
78:af:ca:88:4a:cb:08:4a:80:c7:48:52:28:98:34:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A0:AE:21:44:2B:BB:A5:0F:68:89:EE:3E:01:93:2C:19:63:C3:21
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/TKCuIUQru6UPaInuPgGTLBljwyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
193.37.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:67:70:d0:a4:1e:84:40:47:99:76:4f:a5:7a:fd:35:5b:6f:
6a:3d:0a:f9:7a:f0:8e:e4:88:2f:07:d8:46:72:2c:21:ba:61:
0b:1f:77:d7:33:97:2b:b9:60:78:63:8b:ca:6f:d0:52:1a:a0:
e4:a4:49:c7:e5:31:5e:f2:f1:7c:e5:79:95:c0:ff:20:1b:e0:
c0:3f:b6:e8:95:c4:66:b6:1a:c3:aa:20:1d:39:6d:6f:e8:09:
9a:bb:56:29:6b:5d:fc:92:a7:ff:25:c2:af:f3:f8:1e:ae:a7:
63:70:91:f1:fa:aa:d7:2d:36:a9:1b:94:37:8d:da:d8:13:ff:
2a:9d:2a:40:02:1a:b6:9f:a2:0c:9a:bf:38:ae:b4:73:4f:59:
74:6a:88:23:30:c3:a9:81:80:f4:64:e7:e9:fb:60:26:b9:2f:
90:ac:87:ef:37:c8:a7:a1:70:5e:df:d4:3b:8e:27:bc:59:cd:
3c:5a:fc:06:d3:c7:c7:11:b3:f5:05:dd:b9:3a:cc:82:03:4b:
4d:6c:cc:67:08:a6:20:1b:ae:cf:da:a6:01:bd:69:8e:7b:f7:
c2:9f:07:cf:cc:3f:d9:be:61:75:e6:e7:d2:c4:15:4b:c1:66:
f8:9b:38:75:0c:7b:e7:ab:6b:15:c8:bf:9c:f9:19:22:7f:30:
ae:6d:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:47 2024 by rpki-client on console-ams.rpki-client.org