Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/4ZeUlQU3quNpGKsbIEaiNyKOWmI.roa
File: 4ZeUlQU3quNpGKsbIEaiNyKOWmI.roa (raw, json)
Hash identifier: vQUmVxAZv2MyfpEiNQKmSMVPKUEp4+SfIYYgt/TM8Tw=
Subject key identifier: E1:97:94:95:05:37:AA:E3:69:18:AB:1B:20:46:A2:37:22:8E:5A:62
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 01856D8AE12207DDFBFA07EA8A502A78776B
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/4ZeUlQU3quNpGKsbIEaiNyKOWmI.roa
Signing time: Sun 01 Jan 2023 13:34:56 +0000
ROA not before: Sun 01 Jan 2023 13:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a09:bb00::/29 maxlen: 29
2a0e:4fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:e1:22:07:dd:fb:fa:07:ea:8a:50:2a:78:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Jan 1 13:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19794950537aae36918ab1b2046a237228e5a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:55:20:76:0d:4c:4e:6c:80:49:19:3d:12:
bf:8b:e2:04:fc:e0:c7:01:66:01:7e:62:7f:94:a6:
72:0e:f1:1f:03:61:26:65:80:3a:2d:81:ea:6c:bd:
6d:bc:fc:a3:98:4c:3e:5a:dd:90:d3:c2:57:23:cd:
97:c4:df:ae:ed:ca:b5:cd:be:8a:e4:24:b4:85:d3:
0b:29:1e:fe:9c:e1:ee:0b:da:78:93:70:a9:55:01:
92:55:2f:26:5b:47:75:c6:3e:ec:30:68:7e:32:90:
1c:2a:2f:85:5b:50:eb:5e:25:c4:68:08:d3:36:b2:
a6:67:e7:3e:d5:24:4c:fa:fb:60:46:60:74:04:c3:
40:b5:21:42:e3:d4:62:d0:44:c1:e1:c4:be:dd:ff:
c0:ab:6a:c8:42:4b:99:ff:87:61:8d:cf:41:c8:63:
d7:94:53:0d:de:5a:63:3e:db:76:01:91:49:20:05:
a2:a5:ce:de:e1:f0:4b:0c:f4:20:c1:66:5a:fd:e7:
af:52:e0:a8:14:97:7b:8a:f3:0a:90:46:38:12:86:
f1:ab:fa:51:0c:8f:aa:bf:c2:0b:d3:b1:b2:b3:1f:
19:e9:db:f9:ca:3c:68:c2:69:62:1b:af:d2:21:9a:
e3:f6:1a:8d:7e:76:21:3c:53:a1:b9:c0:62:df:2f:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:97:94:95:05:37:AA:E3:69:18:AB:1B:20:46:A2:37:22:8E:5A:62
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/4ZeUlQU3quNpGKsbIEaiNyKOWmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bb00::/29
2a0e:4fc0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:0a:87:68:07:77:75:1d:40:96:68:f4:b5:2c:21:d2:57:f0:
9c:59:63:22:a3:23:b8:55:3b:1b:de:77:74:73:3f:e3:d1:1c:
fe:00:63:f8:23:58:23:e7:6b:e3:b3:04:d9:41:ba:34:ca:f3:
f9:09:22:e3:30:e9:8b:ac:f7:64:a8:b1:82:38:ac:21:0d:b0:
7b:fc:ce:7d:02:b3:3b:b9:c6:3f:78:bd:0b:a2:85:01:70:8a:
c6:07:5a:b5:01:a4:31:fc:2a:e8:84:5e:3e:81:d9:c9:34:eb:
da:63:9f:38:5c:7a:94:b4:46:72:33:01:19:dc:92:97:78:df:
12:1a:84:b3:02:c9:5c:c3:cf:d5:00:4d:4e:b0:e5:1a:68:9a:
f1:a6:b7:48:31:23:24:cf:b0:98:f8:fe:42:db:a2:f0:41:61:
fd:f0:69:c5:ba:09:cc:da:38:36:ef:e7:d6:e5:74:ff:47:87:
11:66:69:07:34:c7:17:2e:9e:6f:43:62:3a:48:4b:8b:df:7b:
b6:b8:6f:c2:a8:c7:0c:59:ae:a8:6f:b8:7e:b4:0b:63:f0:18:
33:32:04:a7:af:8c:7d:b5:83:d4:02:01:3f:59:96:44:6f:a3:
be:c4:e5:ff:d6:64:e9:ee:52:52:f5:a0:6d:e3:21:55:02:a9:
44:67:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org