Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Rkgb-3TAA425wf5dU2-4XoUHLjo.roa
File: Rkgb-3TAA425wf5dU2-4XoUHLjo.roa (raw, json)
Hash identifier: HlhXKgU7PdbHt74uAPzGQw+1p6k04X4o8fpk6yXkrCM=
Subject key identifier: 46:48:1B:FB:74:C0:03:8D:B9:C1:FE:5D:53:6F:B8:5E:85:07:2E:3A
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 0181D41FE4FBE829579126141BDD316FC5FB
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Rkgb-3TAA425wf5dU2-4XoUHLjo.roa
Signing time: Wed 06 Jul 2022 15:27:48 +0000
ROA not before: Wed 06 Jul 2022 15:27:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 45.137.97.0/24 maxlen: 24
2.56.249.0/24 maxlen: 24
2.56.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d4:1f:e4:fb:e8:29:57:91:26:14:1b:dd:31:6f:c5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jul 6 15:27:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46481bfb74c0038db9c1fe5d536fb85e85072e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:5e:ea:35:9c:fc:7a:3a:39:44:71:9f:c4:
18:a1:06:e0:ae:34:f9:4e:59:37:b3:4c:8b:b8:6f:
2f:03:6a:ba:fc:cd:22:c1:20:aa:e5:f2:9a:94:4e:
94:0e:e9:61:ad:aa:c3:da:69:d3:46:3b:97:a6:e2:
43:cf:44:2f:ea:15:23:28:84:27:a3:08:22:9a:6c:
1d:94:a8:89:02:bc:cc:48:8b:5a:fa:10:4e:81:70:
43:46:8c:f9:dc:bd:02:32:57:9c:c6:c2:9b:ac:e9:
92:b9:71:6a:14:d4:97:e1:4f:0c:d1:be:99:d1:51:
2a:3e:5a:cb:19:f4:89:c3:4f:a9:1b:b4:a3:69:27:
42:d9:86:b1:89:58:58:e2:7f:ab:22:dc:b2:bd:c0:
3f:4e:7d:a9:ce:1b:35:01:44:16:01:80:63:d6:24:
e5:5f:a6:48:c8:a2:99:54:75:5b:93:df:5c:ce:92:
79:60:61:3d:bc:8c:31:91:0b:a0:07:3f:cc:6c:08:
d8:e2:a5:e7:f3:3e:0c:6d:01:5b:71:af:56:fc:de:
48:2f:a9:81:d8:b6:6a:f5:e3:d1:31:e8:1e:6b:ad:
91:74:00:8a:8a:59:17:da:10:92:a2:fd:dd:01:d0:
4d:48:a0:c9:b5:de:a5:7d:4d:99:c0:c7:5e:8a:94:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:48:1B:FB:74:C0:03:8D:B9:C1:FE:5D:53:6F:B8:5E:85:07:2E:3A
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/Rkgb-3TAA425wf5dU2-4XoUHLjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.248.0/23
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
98:72:48:45:38:6f:48:19:0e:26:17:02:ca:30:b7:66:e4:10:
27:88:fb:7b:33:c2:0d:6c:4c:d9:ff:a2:98:70:7d:6a:bd:3a:
06:94:8b:e6:b6:b4:7d:4e:92:63:dd:f6:2e:1e:1c:ce:c9:30:
52:16:cc:53:8a:65:c5:be:7a:53:73:ee:f0:7b:11:79:7b:78:
19:69:f4:f1:87:c8:2f:e6:30:47:a3:78:be:05:ee:f9:31:ec:
4d:98:84:9b:eb:c6:5d:65:3a:66:b5:9b:e7:29:bd:88:bd:9f:
d3:d3:e2:36:ef:9c:d0:f2:1c:d8:46:fa:70:1b:10:f3:79:a8:
66:75:b5:6e:35:6a:97:2b:a7:84:cf:7d:c6:1e:a2:cf:50:62:
89:45:69:ae:bd:fd:94:96:1f:57:5e:f0:e3:be:08:7c:c4:0d:
0a:d0:38:b7:c6:45:51:70:05:cb:71:70:08:42:d5:a1:0e:1a:
fc:16:df:7f:f3:d6:28:c4:28:e1:10:e2:2e:00:a5:49:51:06:
34:20:c5:69:bd:a2:64:87:0c:1d:fe:54:1e:82:58:55:8e:f9:
dd:6b:7e:c5:66:ac:64:82:99:1d:db:97:a5:aa:ad:b4:ca:d0:
e9:d1:13:e8:35:b6:9e:c5:46:22:02:85:bb:c5:82:5b:2c:4a:
ca:a8:13:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:14 2023 by rpki-client on console-ams.rpki-client.org