Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/ILi-6VVQ71XkDhzhqqjB25v5QiQ.roa
File: ILi-6VVQ71XkDhzhqqjB25v5QiQ.roa (raw, json)
Hash identifier: wnPmwPNZwK63DltpGvdUgjeRVgl++o5ii/DaxvhSHHk=
Subject key identifier: 20:B8:BE:E9:55:50:EF:55:E4:0E:1C:E1:AA:A8:C1:DB:9B:F9:42:24
Certificate issuer: /CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Certificate serial: 044CC603
Authority key identifier: 90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/ILi-6VVQ71XkDhzhqqjB25v5QiQ.roa
Signing time: Tue 01 Mar 2022 08:20:13 +0000
ROA not before: Tue 01 Mar 2022 08:20:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35407
IP address blocks: 2001:678:b90::/48 maxlen: 48
2001:678:b88::/48 maxlen: 48
2001:678:b80::/48 maxlen: 48
2001:678:d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72140291 (0x44cc603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Validity
Not Before: Mar 1 08:20:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20b8bee95550ef55e40e1ce1aaa8c1db9bf94224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:3b:3c:e4:75:36:4b:b1:4e:12:f7:11:30:
77:7a:d5:4e:f8:30:28:48:ec:2e:95:0c:db:3a:25:
64:4e:aa:f7:f7:40:89:76:33:52:34:8f:7f:3d:f1:
2a:5d:99:b6:4e:9c:bf:d3:64:f1:f8:1d:56:f2:7b:
35:01:36:f3:60:91:57:39:98:a4:a0:91:82:77:54:
6f:73:8a:be:3c:5a:2d:68:89:f9:cd:52:e8:04:28:
c2:d9:9e:44:17:cf:08:c2:f7:02:7a:05:8d:20:8a:
e5:02:72:2d:14:98:58:c5:94:b1:68:d5:8a:9f:f4:
9f:20:e8:0a:dc:36:c8:c6:55:25:19:d8:1c:8e:88:
94:01:4a:e8:2e:39:be:57:bc:49:a5:ab:c4:0b:04:
3c:4e:8b:88:45:7d:d3:ef:92:ab:8c:29:bc:24:8c:
a1:9d:7d:ae:74:58:3f:e0:86:b7:06:6e:6e:34:a3:
3d:04:7c:d3:65:bc:45:98:32:bc:c5:a9:b4:4e:f6:
34:f0:43:96:20:80:d5:bc:81:33:80:26:07:39:d1:
5d:02:4f:2a:e9:fe:5c:82:53:73:a2:79:01:ea:e0:
fd:e7:94:02:74:55:c9:4a:aa:1e:8c:38:53:95:2f:
6a:2d:f2:1e:7b:8d:4a:50:f3:54:16:d4:a8:82:e0:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B8:BE:E9:55:50:EF:55:E4:0E:1C:E1:AA:A8:C1:DB:9B:F9:42:24
X509v3 Authority Key Identifier:
keyid:90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/ILi-6VVQ71XkDhzhqqjB25v5QiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d8::/48
2001:678:b80::/48
2001:678:b88::/48
2001:678:b90::/48
Signature Algorithm: sha256WithRSAEncryption
6c:36:e8:6d:ac:0c:4b:39:53:dd:88:c4:61:62:b9:36:af:7e:
d8:5f:ee:b9:9f:c7:f2:9a:33:a3:f9:d1:0e:99:0d:6a:52:14:
c5:95:08:ec:c4:74:46:b8:6a:87:dc:ce:01:a2:35:d7:63:ae:
75:41:0f:ee:67:06:73:db:ee:ac:8a:ab:00:9f:c5:5d:82:23:
2c:22:33:d8:99:c1:fc:40:e2:b8:e3:25:8c:a7:11:bf:80:f9:
95:01:11:cd:41:ff:4f:d2:57:6f:05:5f:f3:fc:81:11:92:aa:
a7:f3:05:22:b5:d3:3b:b4:44:b2:97:0d:db:8f:ce:b8:24:a7:
50:dc:46:9d:e7:29:83:92:91:09:d3:7e:11:03:e2:02:dc:33:
27:93:53:91:f9:f8:f6:16:4e:5d:a6:89:c3:35:e5:17:f6:89:
a1:83:63:30:46:c0:fa:fc:af:fa:db:4a:96:13:9c:5e:2d:a0:
f7:e8:f9:74:e3:dc:98:ef:9a:23:a0:25:6a:2a:ac:c6:42:64:
5e:9d:53:38:b8:85:b7:2b:3b:2d:f7:d7:a0:7c:56:1b:bc:af:
d7:e4:13:ad:00:a0:fb:70:f4:c2:4b:c3:83:c3:5c:41:33:4f:
49:79:57:9d:ab:4b:79:74:83:32:7c:a0:bb:f1:71:58:f4:25:
fc:0b:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:28 2024 by rpki-client on console-fra.rpki-client.org