Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/paYOG69m41gLbBJvEpuKlpM6NCg.roa
File: paYOG69m41gLbBJvEpuKlpM6NCg.roa (raw, json)
Hash identifier: YkB/fLUu42eK7KmLIj+yyAvpf2/0QCGQN9lRnxoD5LI=
Subject key identifier: A5:A6:0E:1B:AF:66:E3:58:0B:6C:12:6F:12:9B:8A:96:93:3A:34:28
Certificate issuer: /CN=df3f295c65fbcf201f6f61eaa8c436ddf3f649d5
Certificate serial: 07FA1417
Authority key identifier: DF:3F:29:5C:65:FB:CF:20:1F:6F:61:EA:A8:C4:36:DD:F3:F6:49:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3z8pXGX7zyAfb2HqqMQ23fP2SdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/paYOG69m41gLbBJvEpuKlpM6NCg.roa
Signing time: Sat 01 Jan 2022 08:54:36 +0000
ROA not before: Sat 01 Jan 2022 08:54:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57112
IP address blocks: 45.92.224.0/22 maxlen: 24
2a0a:4980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133829655 (0x7fa1417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3f295c65fbcf201f6f61eaa8c436ddf3f649d5
Validity
Not Before: Jan 1 08:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a60e1baf66e3580b6c126f129b8a96933a3428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:54:93:5e:bd:1b:0d:e7:0b:a0:98:06:bc:ef:
77:c5:ff:80:e2:6d:ed:01:60:74:85:ee:c7:6d:29:
1e:0a:8e:38:66:e0:45:54:3e:ac:cf:4a:4a:d7:c4:
4c:5d:c8:49:34:de:d1:0c:ba:13:7b:b6:e6:65:cf:
d4:24:04:95:cb:30:25:8a:83:1c:64:70:5f:6d:0f:
ce:01:d4:67:4f:ce:50:68:86:9d:50:77:9a:06:94:
a7:34:ba:b3:5e:7f:20:1f:24:ef:3d:08:f2:4f:06:
31:c4:b1:33:be:75:68:7d:4e:79:0a:6b:86:af:ff:
3d:b2:0c:5e:91:b2:70:36:b2:39:d1:67:66:a1:20:
ed:f2:1e:59:eb:75:dc:0c:f5:37:f3:a3:1e:8d:90:
ca:a7:ed:01:58:1e:38:8c:15:9b:82:e1:40:7c:e1:
16:86:3b:0c:1c:16:ea:a2:c7:9a:63:87:7e:f6:e1:
6d:05:91:a5:d3:60:6d:5a:d8:42:7c:7c:13:36:ab:
ef:29:f1:15:c8:04:b0:cb:dd:3f:76:b6:bb:ad:6b:
04:de:d3:dc:5b:bd:32:53:c7:fb:dd:ae:ec:2a:09:
f8:a3:fd:21:4f:2f:b5:86:aa:50:85:ec:17:cd:cf:
0c:c6:c6:b5:ee:4c:a3:de:70:43:6e:17:b1:b6:1a:
8b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:0E:1B:AF:66:E3:58:0B:6C:12:6F:12:9B:8A:96:93:3A:34:28
X509v3 Authority Key Identifier:
keyid:DF:3F:29:5C:65:FB:CF:20:1F:6F:61:EA:A8:C4:36:DD:F3:F6:49:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z8pXGX7zyAfb2HqqMQ23fP2SdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/paYOG69m41gLbBJvEpuKlpM6NCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96f87c-f735-4d2c-9a58-310aa93c4f8c/1/3z8pXGX7zyAfb2HqqMQ23fP2SdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.224.0/22
IPv6:
2a0a:4980::/29
Signature Algorithm: sha256WithRSAEncryption
5d:e9:74:bf:a8:ea:e3:03:d7:6b:78:a3:81:6e:5a:a5:f5:fa:
81:43:47:ee:0b:c3:91:4b:40:9b:b2:79:a5:89:1f:a8:a9:88:
7e:0f:21:52:cb:de:ec:62:3c:d7:b2:ee:cb:c5:c8:a9:52:64:
62:c5:fc:7a:01:59:c9:22:4b:7e:39:71:ff:9b:f0:65:19:44:
b2:93:c5:1f:2a:bb:1a:ab:65:c3:46:0a:5c:14:da:3e:96:94:
35:a6:a7:07:e5:10:d5:cd:2c:a7:05:75:20:b7:13:20:6e:c0:
b7:58:70:94:35:e2:71:d9:f2:a1:ac:36:32:5a:e1:18:e3:76:
2c:33:01:b1:ea:f1:b1:fc:54:aa:67:90:65:a6:b4:92:7a:b2:
d0:81:38:4a:52:bf:35:9f:ae:29:66:68:d3:a9:6b:d3:da:18:
23:55:e3:7b:7e:54:e5:b0:05:d0:ab:c4:1d:55:45:e9:be:5f:
e5:56:2d:54:c6:68:b4:94:71:32:d7:b6:ae:97:f1:58:43:ae:
15:1d:ae:3c:e3:43:78:88:5b:ed:f6:d3:26:52:ec:a3:db:a5:
82:ba:db:b2:55:fc:cc:c4:24:d5:18:79:06:07:dc:f9:52:1b:
38:6e:21:98:00:5d:9c:c5:a8:71:94:cd:a0:11:cb:3b:a8:ad:
9b:a6:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:43 2024 by rpki-client on console-ams.rpki-client.org