Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/urFAlmq9-YgXCACFSUElGRsZI6A.roa
File: urFAlmq9-YgXCACFSUElGRsZI6A.roa (raw, json)
Hash identifier: tOQf+eb4FHYPZ1WtHU9Z7HMS1c6hVcrxGjYd5/5H0hw=
Subject key identifier: BA:B1:40:96:6A:BD:F9:88:17:08:00:85:49:41:25:19:1B:19:23:A0
Certificate issuer: /CN=aaa4055ae158938d240f1bd4c6166e9ff251e6a5
Certificate serial: 018572CC98426FF8D6E9A0305568DFEF40BD
Authority key identifier: AA:A4:05:5A:E1:58:93:8D:24:0F:1B:D4:C6:16:6E:9F:F2:51:E6:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqQFWuFYk40kDxvUxhZun_JR5qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/urFAlmq9-YgXCACFSUElGRsZI6A.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1136
IP address blocks: 145.70.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:98:42:6f:f8:d6:e9:a0:30:55:68:df:ef:40:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa4055ae158938d240f1bd4c6166e9ff251e6a5
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bab140966abdf98817080085494125191b1923a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:a0:b9:f9:6d:18:2d:a4:08:11:3f:e7:6b:
70:49:3d:98:52:11:d6:5f:a5:e2:21:09:60:fc:91:
6c:6d:db:88:cc:b0:65:b8:2c:22:8e:b2:f3:14:ad:
57:c0:04:a5:3b:58:12:23:2c:d1:88:8d:69:5b:d2:
c7:3b:b1:2d:ea:c0:1d:55:12:4e:8f:60:88:89:58:
51:f0:ef:6d:27:b4:48:de:2c:ed:d2:73:74:02:af:
99:82:52:56:0b:86:81:25:01:38:d7:8a:d6:14:e5:
0c:dc:25:6d:35:37:1c:bd:7c:71:74:e3:c1:cb:d9:
82:00:87:1c:f0:1c:d0:7d:75:e6:a7:3e:b2:94:f8:
d5:c3:e6:94:d1:76:49:6a:35:e6:64:df:8b:9d:2d:
f4:0e:31:13:e5:26:b7:fd:ed:33:94:0c:0a:0d:2a:
4e:58:48:78:ca:21:a9:ab:48:4d:b6:1e:8a:bf:2b:
92:c4:89:e7:95:a6:46:bf:52:de:0d:29:7c:f0:6e:
91:36:5d:91:ed:11:2b:b6:fe:09:5e:4a:01:6a:a3:
b0:1b:1f:12:cc:2f:79:40:40:06:fa:c3:4a:79:bb:
c3:aa:00:7f:8b:b7:ba:42:a9:83:9e:99:aa:c9:72:
43:c2:aa:6d:f0:43:2c:62:2c:47:a9:e9:f8:a8:77:
ad:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B1:40:96:6A:BD:F9:88:17:08:00:85:49:41:25:19:1B:19:23:A0
X509v3 Authority Key Identifier:
keyid:AA:A4:05:5A:E1:58:93:8D:24:0F:1B:D4:C6:16:6E:9F:F2:51:E6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqQFWuFYk40kDxvUxhZun_JR5qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/urFAlmq9-YgXCACFSUElGRsZI6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3fd213-f593-4297-a8cc-f10a9c5bcb2d/1/qqQFWuFYk40kDxvUxhZun_JR5qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:2f:b0:18:d2:61:af:34:b5:f6:74:54:21:6a:bc:6a:2b:2a:
3e:db:5c:bc:45:a0:6a:f3:63:ed:e9:4e:ca:11:f2:12:bf:ff:
bd:c9:27:6b:06:9d:94:81:a4:84:e2:90:8a:32:e5:28:ff:00:
0e:56:76:f2:57:48:11:14:9a:19:a3:a2:8d:b3:b2:3d:94:47:
2c:b5:57:de:e4:8e:43:50:5e:5f:44:5c:ff:39:a5:23:53:bf:
f0:b5:54:35:88:a6:99:00:19:57:6d:a3:84:c4:a3:61:8f:fe:
64:0a:d2:2f:d3:a7:8d:9c:35:86:30:81:a5:34:12:b9:01:0e:
66:e6:79:a9:3a:61:73:56:bb:ab:b4:9e:c5:52:e7:fc:f1:b9:
b2:45:2b:6f:2d:59:2d:c4:a0:59:9c:6e:57:1c:9c:0e:36:53:
d6:d3:1c:04:82:e6:30:9d:c4:42:50:b1:7c:ec:99:e9:4d:eb:
eb:38:fe:6f:8d:ae:b4:73:83:70:55:be:6e:4a:69:ba:62:81:
1c:c1:97:ad:82:a8:04:be:d6:28:a8:df:0d:ab:f1:20:c1:dd:
b7:dc:b2:70:3d:0c:36:d3:81:bf:0f:fa:74:25:7e:64:52:e2:
56:c1:9b:b4:06:d4:5a:fe:cd:b7:95:32:20:73:c4:8a:af:09:
6d:37:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:08 2024 by rpki-client on console-ams.rpki-client.org