Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/kbyB5_it9jloBzgs1xIFf4wMS1c.roa
File: kbyB5_it9jloBzgs1xIFf4wMS1c.roa (raw, json)
Hash identifier: Nju2/pPp8Nz43t66Zzghv1kZtXmL4bDNI8WaSfhMqpk=
Subject key identifier: 91:BC:81:E7:F8:AD:F6:39:68:07:38:2C:D7:12:05:7F:8C:0C:4B:57
Certificate issuer: /CN=412ec7428c151c604ef393a0ba4979f50902012c
Certificate serial: 0182EE8F70F7519C44884A6EECB10C2B5AD7
Authority key identifier: 41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/kbyB5_it9jloBzgs1xIFf4wMS1c.roa
Signing time: Tue 30 Aug 2022 11:42:34 +0000
ROA not before: Tue 30 Aug 2022 11:42:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 45.80.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:8f:70:f7:51:9c:44:88:4a:6e:ec:b1:0c:2b:5a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ec7428c151c604ef393a0ba4979f50902012c
Validity
Not Before: Aug 30 11:42:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91bc81e7f8adf6396807382cd712057f8c0c4b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:a3:27:a1:07:8b:2a:eb:ce:95:4c:83:19:
93:1d:29:bd:23:5d:51:05:34:b1:91:64:28:42:19:
f5:1c:22:74:d8:73:ed:e4:19:dd:9f:9d:5f:18:b6:
47:75:40:33:02:a5:ed:5b:95:06:fa:54:13:0a:a0:
d5:b1:8d:d3:8c:2b:98:32:e0:57:14:df:4d:d6:05:
f5:fd:12:0e:62:4b:1e:93:4a:35:fc:ac:17:96:aa:
69:05:fe:f9:4a:7a:42:48:3d:77:bf:0e:fd:4a:e9:
4f:6a:c4:82:4a:2b:2a:f3:92:a6:ec:35:fc:38:16:
f3:cf:37:bf:16:a3:6e:9d:33:be:2c:fc:d5:31:a5:
6f:d4:d7:53:39:10:1b:12:09:63:fe:29:f1:11:c9:
ca:4d:a6:05:6d:c9:3c:6b:53:87:65:2a:a6:b8:49:
ab:2e:12:84:f2:83:d3:ac:d2:f0:aa:df:15:a9:aa:
e4:b4:da:b2:86:06:2b:ae:a4:23:1a:cf:8c:67:8f:
4a:f6:3c:5b:28:19:57:b5:a3:0d:b9:4e:6b:49:2a:
95:67:c7:68:45:fe:6b:df:5f:3b:b8:6e:4c:5a:c5:
29:7e:72:ee:70:46:03:2e:74:cf:7d:64:8c:f8:85:
64:d4:23:de:d5:99:27:00:3d:76:25:66:4a:45:8f:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BC:81:E7:F8:AD:F6:39:68:07:38:2C:D7:12:05:7F:8C:0C:4B:57
X509v3 Authority Key Identifier:
keyid:41:2E:C7:42:8C:15:1C:60:4E:F3:93:A0:BA:49:79:F5:09:02:01:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS7HQowVHGBO85Ogukl59QkCASw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/kbyB5_it9jloBzgs1xIFf4wMS1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ce2aa1-0687-4a6a-8105-11e457b613f1/1/QS7HQowVHGBO85Ogukl59QkCASw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.224.0/22
Signature Algorithm: sha256WithRSAEncryption
73:1f:13:16:a1:e2:a0:2c:70:db:23:59:03:91:2a:b4:92:fd:
d6:2d:37:fa:1e:07:a1:a7:00:08:cc:3e:cc:80:63:24:fd:5a:
01:a8:6b:45:ae:c2:93:c7:d0:32:ca:3e:7a:cd:ad:ce:10:73:
2d:33:ee:03:e6:f6:a5:9b:9a:99:cd:47:95:fe:3d:4d:a3:24:
d7:9d:af:03:70:e4:a5:f8:ee:01:c7:2e:43:18:09:a6:7b:5a:
cf:c5:49:ea:2d:e5:29:09:a9:6c:28:ec:56:0c:f2:a9:76:9b:
fd:f0:45:c9:25:00:6e:4a:c1:59:83:00:9d:2a:a2:af:a1:50:
7d:0c:8a:50:3d:77:4c:bb:83:c6:f7:15:5d:3b:8c:26:7a:1e:
a9:a8:07:73:86:92:e5:d4:f6:cf:e8:17:ec:a7:74:bd:0f:d0:
5d:77:4b:df:27:d3:c4:96:b3:da:41:1e:ac:e1:1e:a7:f5:b9:
82:75:41:ea:59:40:ce:1e:64:22:f2:64:f0:1f:a9:94:f9:ba:
50:26:40:48:ef:79:b6:3a:d8:0e:3c:95:c3:99:73:bb:21:53:
6f:70:17:aa:61:13:09:f8:8d:10:a7:ce:17:a7:fe:88:68:d3:
6c:0b:a2:96:97:66:76:a2:59:84:df:e0:d1:3d:3a:0b:fd:57:
52:ad:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:25 2024 by rpki-client on console-ams.rpki-client.org