Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/VsriWu3mSA-9f-KynH04RHIYRDg.roa
File: VsriWu3mSA-9f-KynH04RHIYRDg.roa (raw, json)
Hash identifier: Bx716ZcFflvxik4uKsnRqf2byoR49WwChVryjxNrPSw=
Subject key identifier: 56:CA:E2:5A:ED:E6:48:0F:BD:7F:E2:B2:9C:7D:38:44:72:18:44:38
Certificate issuer: /CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Certificate serial: 11C6DB43
Authority key identifier: 81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/VsriWu3mSA-9f-KynH04RHIYRDg.roa
Signing time: Tue 05 Apr 2022 19:03:04 +0000
ROA not before: Tue 05 Apr 2022 19:03:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43402
IP address blocks: 83.142.240.0/21 maxlen: 24
95.131.160.0/21 maxlen: 24
185.127.144.0/22 maxlen: 24
2a03:62c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298244931 (0x11c6db43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8102d3e0d5f21ec72c745731a641fb7903787de0
Validity
Not Before: Apr 5 19:03:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56cae25aede6480fbd7fe2b29c7d384472184438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2c:8a:ef:46:ab:ff:99:91:30:19:4d:75:bd:
e3:a6:d6:c3:ff:75:7a:95:a3:45:d1:63:60:83:00:
a7:6b:0e:06:32:26:e2:66:cf:c8:eb:60:36:b7:85:
c1:5a:bf:e0:07:15:d7:dd:e0:52:f2:01:d0:28:17:
3e:ca:a7:90:6f:67:75:02:37:1f:18:5c:51:85:10:
7b:eb:43:6b:df:66:eb:e4:e2:ab:f2:e3:ef:74:45:
45:8f:a3:76:ee:46:8c:99:f7:29:8a:a9:8c:64:b0:
a2:c1:12:9d:d7:59:da:c2:a0:b1:cc:94:52:0b:0d:
c9:34:bc:f6:ea:7a:7f:4a:cb:c4:de:69:e1:e1:db:
cd:46:d0:aa:ad:78:06:97:ea:ae:e3:5e:3f:f5:53:
f6:30:ff:58:4a:52:e4:14:fa:89:a7:57:82:b3:eb:
4b:9e:e8:0c:0d:88:ab:56:51:6d:2c:cf:b8:7d:66:
7f:9e:1f:8b:bd:26:d0:d0:81:e8:3b:6e:1f:34:83:
87:60:96:fa:f0:ff:7a:58:d3:90:84:c9:a3:66:1c:
2d:7c:a7:3b:7c:cb:87:d2:f5:a8:1b:02:4b:ce:b2:
60:56:14:27:0e:8e:cd:2b:65:93:ba:bf:f6:68:38:
ce:73:2b:20:46:96:b2:86:4a:93:ce:42:3b:99:2c:
ca:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CA:E2:5A:ED:E6:48:0F:BD:7F:E2:B2:9C:7D:38:44:72:18:44:38
X509v3 Authority Key Identifier:
keyid:81:02:D3:E0:D5:F2:1E:C7:2C:74:57:31:A6:41:FB:79:03:78:7D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQLT4NXyHscsdFcxpkH7eQN4feA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/VsriWu3mSA-9f-KynH04RHIYRDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/463b90-bb28-4b0a-9ad8-5b1523518221/1/gQLT4NXyHscsdFcxpkH7eQN4feA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.240.0/21
95.131.160.0/21
185.127.144.0/22
IPv6:
2a03:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
90:86:3e:ac:91:14:06:ad:80:86:35:45:41:02:ee:96:18:46:
c8:28:18:b5:4e:09:6b:ec:a9:91:34:a3:0b:06:62:a7:ae:67:
7e:95:34:02:08:b1:43:54:ed:05:f3:29:b6:7f:ef:bf:44:64:
bb:ea:52:8d:65:61:87:80:81:1e:bd:16:a4:a1:64:69:0c:7f:
ba:0a:2c:eb:c9:fa:16:29:51:53:65:e9:2e:9a:65:2b:aa:91:
e3:31:1d:02:8f:cf:94:4b:c8:0e:09:b5:38:53:0f:64:ce:bd:
b7:8b:17:49:ad:3c:c6:04:d7:b7:40:27:a0:fb:44:dc:db:75:
fe:24:78:a8:72:69:25:94:b8:53:cc:35:26:77:ce:24:be:8a:
f5:60:36:fa:64:b5:db:c8:55:2a:af:9d:40:b8:dd:59:d1:77:
20:42:db:bc:f3:e2:3f:02:82:6c:5e:ca:39:8f:9a:f3:7f:b7:
09:61:e8:9c:9c:9d:6d:60:c6:9a:58:6b:a6:e3:a9:b2:f9:d6:
46:e2:0a:bd:ef:79:44:7f:e3:9d:f1:0a:4d:4b:02:91:ea:52:
b2:62:83:95:37:05:f3:fa:a1:75:6c:a5:01:c8:38:32:61:c8:
22:25:73:37:e9:58:98:cc:32:60:c0:62:98:6d:a4:eb:c9:8b:
11:9f:2f:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:43 2024 by rpki-client on console-ams.rpki-client.org