Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kSE1SXPGZ1KRk57sXk_313MN210.roa
File: kSE1SXPGZ1KRk57sXk_313MN210.roa (raw, json)
Hash identifier: MfTfr06Ol6c0qySEPIVmvfijuFHzdHBVozIFZ0yMXxE=
Subject key identifier: 91:21:35:49:73:C6:67:52:91:93:9E:EC:5E:4F:F7:D7:73:0D:DB:5D
Certificate issuer: /CN=54914541fd1b95e7c0afc875fbef78794f55386b
Certificate serial: 018318C0FE7103C002BBB8F8A3DD177E7DC2
Authority key identifier: 54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kSE1SXPGZ1KRk57sXk_313MN210.roa
Signing time: Wed 07 Sep 2022 16:20:44 +0000
ROA not before: Wed 07 Sep 2022 16:20:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203232
IP address blocks: 2a07:54c1:1000::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:c0:fe:71:03:c0:02:bb:b8:f8:a3:dd:17:7e:7d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54914541fd1b95e7c0afc875fbef78794f55386b
Validity
Not Before: Sep 7 16:20:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9121354973c6675291939eec5e4ff7d7730ddb5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d2:fa:79:ef:74:95:82:9e:cc:52:e6:28:f9:
fc:fe:8e:e1:7e:fc:65:cc:a1:4b:6f:7a:8d:6f:45:
e3:a3:96:bc:60:aa:2f:24:be:54:59:df:87:e9:1d:
7f:af:7f:0d:c5:3d:b0:eb:2f:15:15:e0:07:4f:46:
de:40:ad:70:48:93:4d:80:cc:ba:1a:35:23:46:9e:
86:9e:f6:ef:cc:cc:76:fd:b5:60:ca:1a:17:4e:48:
00:88:ea:4f:16:05:09:45:1e:7d:fd:34:f9:78:9c:
3f:fa:32:d0:c4:96:b8:7b:72:37:97:d8:72:79:27:
23:d8:d0:27:31:6f:6f:43:3b:da:b9:78:e8:81:74:
e3:6c:2e:99:e3:e0:22:01:5e:eb:84:76:10:1f:45:
f7:af:4a:3e:5a:95:4a:ee:6a:c8:ac:01:32:d1:e8:
66:be:92:0b:91:05:22:76:22:3a:36:b4:3d:02:77:
28:9a:d4:bf:8d:89:e3:67:d4:c9:85:93:04:a9:0e:
ce:29:3c:95:de:91:15:27:95:9d:07:80:01:c7:b1:
c3:5e:96:8b:54:cf:52:04:ee:80:55:c2:c7:71:6c:
0f:79:79:8b:9e:13:c2:46:7b:ef:34:8b:e1:4e:db:
15:42:df:46:38:56:8b:d4:cf:27:7c:17:44:29:a6:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:21:35:49:73:C6:67:52:91:93:9E:EC:5E:4F:F7:D7:73:0D:DB:5D
X509v3 Authority Key Identifier:
keyid:54:91:45:41:FD:1B:95:E7:C0:AF:C8:75:FB:EF:78:79:4F:55:38:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJFFQf0blefAr8h1--94eU9VOGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/kSE1SXPGZ1KRk57sXk_313MN210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/464631-ca8e-4c6a-b091-d9f6d9642537/1/VJFFQf0blefAr8h1--94eU9VOGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:54c1:1000::/36
Signature Algorithm: sha256WithRSAEncryption
71:5d:00:16:08:b5:82:cd:ab:7d:5f:13:5e:58:42:2b:70:be:
0a:f6:0a:24:2f:b5:eb:81:04:f5:40:8d:85:08:19:46:ec:1d:
6f:58:1b:78:ab:ee:36:c1:6a:fa:44:a9:5b:73:ee:71:bc:06:
aa:81:c6:61:bd:a6:4e:66:f7:12:6a:d9:43:b9:94:a2:aa:13:
0c:02:3c:44:f9:a0:92:36:48:93:e8:f8:b8:16:bf:84:f8:fb:
26:ea:5d:6d:9b:01:01:8f:14:cb:37:fd:3c:d1:34:1f:d5:ee:
46:26:af:59:fe:07:ab:37:0f:d2:f2:c1:fa:44:bb:dd:13:49:
3e:c0:49:50:c4:eb:6b:e8:a2:ff:a7:b1:07:f2:fe:22:9c:f0:
13:b7:91:0e:e0:a1:d6:d8:ea:31:23:59:12:47:18:5c:fe:2b:
1f:ba:41:30:4e:53:43:8c:84:f1:fe:af:5f:f4:48:dc:5f:f8:
fb:fc:53:51:62:d8:21:b6:2a:bd:43:e2:c4:65:23:f7:25:39:
a0:9f:34:1d:d9:3d:00:68:24:90:76:ef:54:14:34:8e:b7:88:
d8:98:02:b3:16:6a:c4:3d:64:e9:2e:43:47:ac:17:6d:1f:6f:
c8:7d:96:82:c4:23:ff:b4:5e:ac:cf:24:28:9c:c3:e5:7a:16:
2d:6f:81:6a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYMYwP5xA8ACu7j4o90Xfn3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTE0NTQxZmQxYjk1ZTdjMGFmYzg3NWZiZWY3ODc5NGY1
NTM4NmIwHhcNMjIwOTA3MTYyMDQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTIxMzU0OTczYzY2NzUyOTE5MzllZWM1ZTRmZjdkNzczMGRkYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdL6ee90lYKezFLmKPn8/o7hfvxl
zKFLb3qNb0Xjo5a8YKovJL5UWd+H6R1/r38NxT2w6y8VFeAHT0beQK1wSJNNgMy6
GjUjRp6GnvbvzMx2/bVgyhoXTkgAiOpPFgUJRR59/TT5eJw/+jLQxJa4e3I3l9hy
eScj2NAnMW9vQzvauXjogXTjbC6Z4+AiAV7rhHYQH0X3r0o+WpVK7mrIrAEy0ehm
vpILkQUidiI6NrQ9AncomtS/jYnjZ9TJhZMEqQ7OKTyV3pEVJ5WdB4ABx7HDXpaL
VM9SBO6AVcLHcWwPeXmLnhPCRnvvNIvhTtsVQt9GOFaL1M8nfBdEKabqYwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJEhNUlzxmdSkZOe7F5P99dzDdtdMB8GA1UdIwQY
MBaAFFSRRUH9G5XnwK/IdfvveHlPVThrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEt
ZDlmNmQ5NjQyNTM3LzEva1NFMVNYUEdaMUtSazU3c1hrXzMxM01OMjEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80NjQ2MzEtY2E4ZS00YzZhLWIwOTEtZDlmNmQ5NjQyNTM3
LzEvVkpGRlFmMGJsZWZBcjhoMS0tOTRlVTlWT0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgdUwRAw
DQYJKoZIhvcNAQELBQADggEBAHFdABYItYLNq31fE15YQitwvgr2CiQvteuBBPVA
jYUIGUbsHW9YG3ir7jbBavpEqVtz7nG8BqqBxmG9pk5m9xJq2UO5lKKqEwwCPET5
oJI2SJPo+LgWv4T4+ybqXW2bAQGPFMs3/TzRNB/V7kYmr1n+B6s3D9LywfpEu90T
ST7ASVDE62voov+nsQfy/iKc8BO3kQ7godbY6jEjWRJHGFz+Kx+6QTBOU0OMhPH+
r1/0SNxf+Pv8U1Fi2CG2Kr1D4sRlI/clOaCfNB3ZPQBoJJB271QUNI63iNiYArMW
asQ9ZOkuQ0esF20fb8h9loLEI/+0XqzPJCicw+V6Fi1vgWo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:37 2023 by rpki-client on console-fra.rpki-client.org