Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KH9_MrGbDiq-cZor_KUiDM4hIo4.roa
File: KH9_MrGbDiq-cZor_KUiDM4hIo4.roa (raw, json)
Hash identifier: UBA0uqh9lBjc8nl9n1cJGTyUPH4zsz8BLRtRqtyLKIQ=
Subject key identifier: 28:7F:7F:32:B1:9B:0E:2A:BE:71:9A:2B:FC:A5:22:0C:CE:21:22:8E
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0182D9C2ACB596754BF5232A176D37A060FA
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KH9_MrGbDiq-cZor_KUiDM4hIo4.roa
Signing time: Fri 26 Aug 2022 10:46:30 +0000
ROA not before: Fri 26 Aug 2022 10:46:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209861
IP address blocks: 2a07:54c2:b00b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d9:c2:ac:b5:96:75:4b:f5:23:2a:17:6d:37:a0:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Aug 26 10:46:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=287f7f32b19b0e2abe719a2bfca5220cce21228e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:c9:cf:92:38:51:85:f4:a7:7d:b9:38:83:
6e:d1:dc:aa:07:53:60:d1:f6:12:19:16:2c:0d:6c:
58:79:3e:0f:02:78:ae:d2:40:b5:bc:66:af:50:70:
f0:ef:58:32:38:14:f2:98:b8:f6:1e:cf:70:f9:4a:
a3:17:14:de:b5:66:78:a3:e4:d1:0c:f6:09:7b:d6:
c2:a2:de:ec:7b:d1:48:e4:6c:b6:20:23:35:ff:8c:
da:47:0a:e0:03:5f:f4:f8:a3:f6:76:ec:59:fc:4d:
eb:1b:7e:25:66:6a:c5:d6:27:2e:04:b7:11:c0:fc:
40:48:9c:54:70:45:cf:46:04:2f:1d:66:a1:9b:14:
09:b4:ac:f5:09:c4:2b:6d:1e:89:48:60:d7:22:b5:
7c:84:98:3e:c9:27:2f:15:c6:2b:17:1a:44:08:20:
5b:af:ac:dc:90:2a:e2:34:a2:df:40:da:86:05:94:
45:4c:45:c3:12:9f:56:4a:6f:dd:e4:05:99:b4:82:
3a:67:f7:01:04:b0:03:dd:89:6e:3a:dd:72:39:d9:
2d:5d:24:32:48:6a:7f:90:d8:dc:c4:bd:ae:27:69:
df:cb:fa:c6:46:35:ca:9d:ec:ef:f5:53:9d:39:11:
ab:47:77:df:4b:d3:1d:28:4c:32:58:13:4c:6c:78:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:7F:32:B1:9B:0E:2A:BE:71:9A:2B:FC:A5:22:0C:CE:21:22:8E
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KH9_MrGbDiq-cZor_KUiDM4hIo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c2:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
51:6e:d5:36:cc:22:74:1a:58:cd:ad:37:d1:71:78:02:c1:d5:
c2:2f:a8:10:3c:20:ee:ed:19:d5:28:f5:18:ef:36:64:09:75:
bb:5b:70:7a:35:ff:23:1a:d3:ae:ab:1c:0f:29:52:f1:13:b0:
10:bf:51:6b:95:53:6c:ea:88:48:8e:63:d4:b7:1c:72:0c:3c:
ea:c4:15:6c:b5:08:63:b5:52:29:1c:86:8f:8f:aa:9e:87:d3:
7d:3a:e3:7c:cb:01:42:e8:84:b7:a8:8b:99:ea:ac:b2:db:dc:
5d:dd:bf:f3:d7:c6:49:b2:59:0c:85:67:cb:af:1a:3c:d3:5a:
2d:05:d2:01:1e:dc:a9:f5:0a:ff:e7:f0:f4:9b:c9:6b:82:78:
03:e2:07:41:c7:7a:d3:49:b8:bc:f2:22:b1:61:01:ca:25:a9:
d2:96:48:0b:3e:31:f5:af:c0:1e:8c:d3:f3:44:c9:14:01:bb:
77:9b:36:02:c3:e4:50:db:18:01:fa:92:bc:e7:97:bd:5b:9e:
6d:51:96:b8:e3:37:1e:ad:93:45:b0:8c:1c:fe:1e:7b:7b:5e:
78:e4:8b:1e:2b:b0:88:a2:5c:33:8d:0d:c3:1f:4f:0f:7b:60:
71:26:1c:e8:81:75:25:bd:09:7f:cc:a4:8c:23:35:aa:15:c2:
08:09:b4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:11 2024 by rpki-client on console-fra.rpki-client.org