Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/k5Lk1REZL8dxnkYekEwjhZxGMbc.roa
File: k5Lk1REZL8dxnkYekEwjhZxGMbc.roa (raw, json)
Hash identifier: 2PBkjkrpj1sG7L4lF3iht0Ns3bT+ntY0xsQpLE7OhH0=
Subject key identifier: 93:92:E4:D5:11:19:2F:C7:71:9E:46:1E:90:4C:23:85:9C:46:31:B7
Certificate issuer: /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial: 018486AA61A845D94854E0369BB0CEB26D0D
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/k5Lk1REZL8dxnkYekEwjhZxGMbc.roa
Signing time: Thu 17 Nov 2022 17:37:03 +0000
ROA not before: Thu 17 Nov 2022 17:37:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a09:bb00::/29 maxlen: 29
2a0e:4fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:aa:61:a8:45:d9:48:54:e0:36:9b:b0:ce:b2:6d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
Validity
Not Before: Nov 17 17:37:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9392e4d511192fc7719e461e904c23859c4631b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:6a:e4:0b:bc:b5:2e:b8:2a:3a:83:42:20:
fb:fd:7d:54:ee:c7:47:3f:e5:33:a7:42:e5:14:97:
08:47:6a:06:a1:48:34:9d:64:76:01:9b:b0:d4:06:
2e:81:a1:20:05:87:e1:49:58:39:26:86:84:14:b2:
47:ab:96:38:3a:27:05:b1:84:0a:0b:7e:24:19:74:
3a:9e:cd:92:28:44:fa:d5:7b:b1:72:ad:82:ab:b2:
66:46:a1:2e:9b:06:f6:4b:a5:13:7e:57:27:e8:46:
cb:72:45:be:dd:37:fa:aa:6f:75:ad:b4:16:d2:1f:
3b:65:c8:70:7e:12:73:d7:87:61:19:60:4d:1c:d8:
c5:3d:18:88:c3:a7:24:5b:c6:90:e5:fe:8c:fe:47:
a3:46:1e:15:ba:f9:3a:3c:e1:2b:78:ee:5a:fb:c7:
a3:15:dc:d3:96:ad:22:84:a5:16:c6:b9:08:8f:cb:
e8:15:69:0c:b1:3b:6b:18:8d:07:7c:f0:0a:27:8d:
20:b4:97:59:45:b7:42:25:40:99:82:7e:40:29:04:
cd:ca:14:ae:f5:d7:7c:0c:39:65:85:97:0f:13:ca:
42:84:2f:ee:47:ef:0a:a9:21:62:4e:be:a5:37:34:
ac:31:c0:4a:1d:86:b2:cf:93:eb:bd:4f:b7:d4:01:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:92:E4:D5:11:19:2F:C7:71:9E:46:1E:90:4C:23:85:9C:46:31:B7
X509v3 Authority Key Identifier:
keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/k5Lk1REZL8dxnkYekEwjhZxGMbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bb00::/29
2a0e:4fc0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:5d:2b:b0:1a:10:6f:d8:c7:0a:f0:62:fa:9d:d4:2b:12:f5:
02:97:36:6f:d1:d5:cc:24:89:93:ad:33:e1:ac:cb:0d:74:de:
53:da:8f:08:91:d9:6b:cc:ea:18:e5:61:d1:43:62:14:d8:df:
d6:f0:28:cd:06:1d:dd:01:9f:bb:5b:23:1e:70:16:3d:88:c3:
84:b5:ed:4e:08:d9:e4:69:f8:78:09:dc:23:9e:91:30:5f:9a:
ab:53:4a:21:75:17:47:23:10:b3:90:54:a9:b1:4f:d6:d0:4e:
58:c3:a2:93:ed:d3:20:2c:c4:4d:d1:10:32:81:1b:b2:9f:2a:
d1:01:f7:fd:d7:68:a1:a0:8d:01:fd:d1:ee:8b:97:e6:da:6f:
6e:41:e9:fa:35:65:d9:59:7a:85:cf:ed:75:6d:5f:d4:17:9c:
6b:e8:7b:6d:8c:13:90:91:fe:a7:4e:58:ae:52:73:4e:50:c8:
50:9f:85:d7:12:8a:6d:ce:91:e5:2c:5e:eb:6f:18:01:be:05:
13:4a:8f:ed:5a:48:e2:c7:42:e3:e9:29:ca:25:8f:b8:06:c0:
2b:67:58:c3:ea:7f:52:ee:36:32:b5:86:c5:0e:8f:d9:c0:00:
85:78:a4:d3:5f:f1:5f:21:3e:8d:80:0b:62:cc:b9:e6:d1:d5:
9c:4e:21:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:58 2024 by rpki-client on console-fra.rpki-client.org