Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qvNIuP4Ll6H1z_7yf-hy9Ta_K8s.roa
File: qvNIuP4Ll6H1z_7yf-hy9Ta_K8s.roa (raw, json)
Hash identifier: oQh1dZ+6ea/XNWGXc2XOhDnlA1hFSS6CP6aubrPWPP4=
Subject key identifier: AA:F3:48:B8:FE:0B:97:A1:F5:CF:FE:F2:7F:E8:72:F5:36:BF:2B:CB
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 018582CAB9C5CA9BFD52F85346A1567C6A9A
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qvNIuP4Ll6H1z_7yf-hy9Ta_K8s.roa
Signing time: Thu 05 Jan 2023 16:36:41 +0000
ROA not before: Thu 05 Jan 2023 16:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 5.181.179.0/24 maxlen: 24
2.59.56.0/24 maxlen: 24
45.158.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:ca:b9:c5:ca:9b:fd:52:f8:53:46:a1:56:7c:6a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 5 16:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaf348b8fe0b97a1f5cffef27fe872f536bf2bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:0a:4f:85:1f:ed:18:97:f2:2c:91:a9:c1:
b1:71:71:67:5f:b0:c1:37:21:c2:7e:95:58:8a:e6:
38:39:c7:6e:2d:94:20:a0:22:79:01:ab:fd:d1:2d:
05:5d:db:27:58:ed:c4:b4:63:a2:82:f6:bb:58:ed:
d8:d4:4e:82:d3:8b:29:69:d8:32:cb:2b:56:bc:db:
ac:0c:30:5e:f2:d1:b5:4d:7e:e3:c3:b2:ef:16:dd:
8e:aa:6a:b5:72:74:57:90:61:8e:51:92:c9:68:7a:
63:27:76:77:9e:d0:0f:d4:5e:9d:da:18:2e:9b:49:
eb:8d:51:0b:b3:b3:62:5b:d0:60:ef:d2:92:ba:81:
20:f9:69:5b:5a:ef:65:51:28:3d:ef:d8:74:33:04:
b9:49:ec:0f:3b:ce:4d:48:0c:d0:3c:40:a6:41:ac:
2d:ed:26:f1:16:64:8a:8a:e3:32:b7:02:46:1e:87:
4e:4e:6d:ce:7c:fc:9f:0f:ab:43:8b:f2:54:6b:39:
c1:8f:a1:a5:d1:91:3f:a9:e9:d1:7a:b6:b4:ad:dc:
a8:a4:08:3f:f1:e9:c7:21:e5:af:83:ef:cd:c6:8b:
d9:75:6b:c7:2f:91:61:0c:e5:44:a0:95:14:d9:d3:
cd:3c:1c:5c:1a:68:d1:d2:d4:6c:b9:24:86:1e:77:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:48:B8:FE:0B:97:A1:F5:CF:FE:F2:7F:E8:72:F5:36:BF:2B:CB
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/qvNIuP4Ll6H1z_7yf-hy9Ta_K8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.56.0/24
5.181.179.0/24
45.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
76:4a:69:05:d2:8b:da:02:1d:c7:2f:52:e3:17:95:a8:6f:50:
06:46:1b:af:6b:9e:71:07:76:ce:40:60:66:be:a6:0d:59:08:
ae:9b:54:61:56:d7:06:60:7f:b9:f0:06:68:51:e6:41:c5:ae:
bb:e5:04:40:89:12:43:ff:3a:fb:af:e1:f0:75:c9:8f:d8:a7:
a9:9f:9b:87:a1:88:01:27:70:cc:8e:10:29:d2:3a:58:43:2e:
4a:40:9b:45:d3:cc:07:ff:62:45:4e:08:a9:dd:66:bc:e6:d9:
18:1f:24:42:f6:df:68:0e:65:80:56:11:04:30:9d:e8:82:74:
40:65:0f:cd:1d:3f:2e:bb:b8:9e:59:4d:b9:33:db:f8:a7:58:
82:61:92:cf:07:31:f1:07:e1:3f:d2:a2:0e:fd:11:80:c0:f2:
da:b5:c6:ad:f1:e7:ff:40:38:cd:a6:04:ce:d4:39:0a:6f:f4:
b9:07:4b:79:d4:73:c7:fd:92:35:ac:70:23:2e:51:d9:77:91:
ae:e5:22:65:7e:9d:1e:e4:c0:1b:ae:03:c2:58:0b:2f:31:89:
95:3e:28:cd:f4:23:8b:93:f4:56:30:e6:4a:1e:60:c6:04:04:
94:f4:9c:26:1d:b6:8a:17:4e:45:01:37:92:9c:d5:d5:a3:50:
a3:b9:86:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:15 2023 by rpki-client on console-ams.rpki-client.org