Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KNRUs1w_fxaz7lmw20uVzLCp_vk.roa
File: KNRUs1w_fxaz7lmw20uVzLCp_vk.roa (raw, json)
Hash identifier: BcI0ikVsTq/DJzJ1VKJa1P3i2ReI/uag6yDh9Aj3xz4=
Subject key identifier: 28:D4:54:B3:5C:3F:7F:16:B3:EE:59:B0:DB:4B:95:CC:B0:A9:FE:F9
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 0183212A5081BE2A22A20851E3298374C536
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KNRUs1w_fxaz7lmw20uVzLCp_vk.roa
Signing time: Fri 09 Sep 2022 07:32:44 +0000
ROA not before: Fri 09 Sep 2022 07:32:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59788
IP address blocks: 2a06:a005:1680::/44 maxlen: 48
2a07:54c3::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:2a:50:81:be:2a:22:a2:08:51:e3:29:83:74:c5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 9 07:32:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d454b35c3f7f16b3ee59b0db4b95ccb0a9fef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:69:c2:f2:80:5a:f7:34:95:d1:95:f9:64:
9d:2f:76:e0:bb:c9:4b:62:41:63:9b:15:95:ab:3b:
2d:ad:b3:1e:75:50:74:21:7f:d8:89:8d:98:59:4a:
8a:6b:65:5c:06:20:5f:49:0f:02:6d:e8:83:72:7c:
8e:71:1f:23:25:f4:95:d8:69:7e:a0:1a:94:b7:8e:
87:ee:ec:76:84:a3:81:2c:7f:55:5d:7b:1e:4e:dd:
61:5b:c2:69:d3:8e:12:bc:fc:c8:f4:80:93:09:82:
0b:6c:97:ac:de:8e:f6:3b:fa:8d:dd:60:96:b4:62:
b7:8c:04:3f:4d:2b:df:c4:6a:15:3a:03:fd:fc:22:
ea:e1:22:85:8a:5a:05:f8:14:7c:19:2e:be:53:14:
b7:e3:23:9c:11:7c:c9:fb:78:d0:f9:cd:b3:2e:84:
d4:f5:b2:f4:e7:a7:61:30:40:34:6d:8c:1e:64:96:
c8:42:f1:3c:03:14:53:05:3f:fa:ad:3f:1e:bb:7b:
ce:4f:53:69:03:6f:3b:88:82:40:f8:0c:e4:cb:04:
33:fc:28:43:f7:57:c4:e3:d6:da:37:e5:a7:8b:5d:
64:bf:a9:09:bc:2c:9a:26:07:59:f8:e8:56:6a:ab:
90:c8:4e:c6:69:9e:6b:8e:6b:ab:e5:c6:56:37:6d:
9e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D4:54:B3:5C:3F:7F:16:B3:EE:59:B0:DB:4B:95:CC:B0:A9:FE:F9
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/KNRUs1w_fxaz7lmw20uVzLCp_vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1680::/44
2a07:54c3::/32
Signature Algorithm: sha256WithRSAEncryption
5b:b7:00:12:3d:41:08:c8:38:cd:89:de:bc:f6:c0:b3:28:35:
5a:95:c0:69:c6:8b:44:c9:03:3a:77:18:54:37:7e:44:5f:73:
c8:32:38:36:b0:e0:4e:f3:c6:76:1e:8c:ec:d4:27:92:43:7e:
e3:80:c2:d5:0e:66:9a:6d:5b:d2:35:d5:01:01:95:a7:d8:c7:
d0:a7:e0:1b:b5:99:52:c0:75:3a:b2:b0:dd:a0:97:47:67:46:
88:a3:82:c4:20:06:3d:f6:5c:d9:87:07:ca:0c:9e:3b:b5:9f:
a5:a0:61:8d:97:b7:99:59:aa:fd:16:af:33:1d:30:cf:34:d0:
5e:c9:69:d6:53:71:18:7c:e3:52:71:5b:8b:e3:9f:6f:2e:00:
50:37:07:a0:ed:8a:61:e1:11:52:44:16:8e:b5:80:da:5a:b9:
18:87:52:36:16:89:c8:83:9a:90:c9:e8:e5:b3:c2:c3:4f:32:
7b:83:f1:62:61:8f:65:05:43:11:1c:72:99:d8:a0:06:81:18:
bb:6e:1f:76:5e:03:4a:14:4c:74:20:db:07:06:60:61:81:38:
29:d0:df:75:64:a4:51:c7:0e:b0:7d:aa:3e:66:c3:46:0a:c0:
8d:48:e3:95:cb:e1:51:22:92:5b:bb:a3:fa:94:15:6d:1d:f4:
fd:b9:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:01 2024 by rpki-client on console-ams.rpki-client.org