Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/kmu1kKL0HiLUyXG2xZTJ0sfvmcY.roa
File: kmu1kKL0HiLUyXG2xZTJ0sfvmcY.roa (raw, json)
Hash identifier: reh57CpR2+mjhpFuL57BrUYR39LltscjNIPzZeZh0BI=
Subject key identifier: 92:6B:B5:90:A2:F4:1E:22:D4:C9:71:B6:C5:94:C9:D2:C7:EF:99:C6
Certificate issuer: /CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Certificate serial: 018326EB656F471D4C901A3126EB47A7D8E0
Authority key identifier: AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/kmu1kKL0HiLUyXG2xZTJ0sfvmcY.roa
Signing time: Sat 10 Sep 2022 10:21:44 +0000
ROA not before: Sat 10 Sep 2022 10:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 62.68.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:eb:65:6f:47:1d:4c:90:1a:31:26:eb:47:a7:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc85b9a18400b845152ae2fbd28e859863e2f7e
Validity
Not Before: Sep 10 10:21:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=926bb590a2f41e22d4c971b6c594c9d2c7ef99c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5e:7d:82:06:cf:db:cf:8b:bd:f8:8c:1e:fa:
f6:2e:c1:3f:1c:f0:b8:37:d4:98:81:3a:07:c5:08:
5b:96:80:2a:a9:e5:3a:7b:77:4c:2a:a4:0f:3c:34:
0e:48:17:f2:5a:55:db:67:a7:0a:96:3c:d0:15:a1:
7b:23:c0:6a:fe:08:5d:a4:4a:9d:0a:00:fd:3f:05:
73:b3:eb:71:9c:f0:23:4b:31:0b:6d:9c:88:a7:b2:
a6:75:b0:56:bb:4b:55:4d:63:6d:c4:ec:16:66:f0:
95:63:7a:fb:55:a7:21:85:db:54:9e:3a:62:55:41:
6d:a0:c7:e5:c8:d2:75:ed:fa:a7:58:ef:30:a3:7d:
35:af:3f:8b:7b:3b:ec:d4:e9:d2:41:b9:8d:a7:d8:
2f:13:56:39:62:44:4f:48:31:fb:27:ed:54:ca:51:
77:c1:98:57:9b:57:7e:91:c1:ec:3e:76:37:53:bf:
1e:7b:4a:0a:43:60:c1:42:df:a6:34:3c:cf:99:55:
1c:99:0a:09:97:06:7a:e4:68:c0:a9:a9:8b:9a:a9:
dc:11:33:b7:e8:67:ec:de:99:97:28:c7:51:c2:9e:
aa:c7:02:f0:9c:04:6b:0a:22:24:5b:8e:3f:69:f5:
f4:ee:de:fd:72:89:27:53:b1:d7:e5:dc:e0:74:7c:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6B:B5:90:A2:F4:1E:22:D4:C9:71:B6:C5:94:C9:D2:C7:EF:99:C6
X509v3 Authority Key Identifier:
keyid:AB:C8:5B:9A:18:40:0B:84:51:52:AE:2F:BD:28:E8:59:86:3E:2F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8hbmhhAC4RRUq4vvSjoWYY-L34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/kmu1kKL0HiLUyXG2xZTJ0sfvmcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/20bf41-7f20-48f7-8609-517a6505dcb4/1/q8hbmhhAC4RRUq4vvSjoWYY-L34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.89.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a4:d6:13:5b:f8:c7:74:b5:7b:db:0b:2a:00:79:cd:0c:72:
35:6b:30:23:f3:80:6f:68:8c:0f:6e:c8:35:26:6d:5e:c7:bb:
2f:4c:b7:3c:fe:5f:4f:ee:04:c4:ef:ab:9a:dd:8c:9d:e6:ca:
77:de:f0:c9:bd:29:5b:c3:c3:16:9d:d1:d4:14:7b:e5:f1:50:
00:7b:38:de:8f:9b:d5:25:d1:31:05:57:e8:8f:2d:ac:d5:20:
f3:7c:3c:6b:d2:6d:ba:4d:30:a4:cb:5e:34:4a:a4:8a:16:5b:
ef:9a:7d:13:b5:f7:e1:82:3a:49:a0:97:fa:96:d0:ee:e8:a8:
6a:c3:02:97:fb:c0:90:62:63:d1:f3:27:b9:c7:95:94:5c:ea:
7e:5b:d3:c6:a7:e9:2e:03:0a:34:87:a9:16:2e:00:8d:21:30:
02:2e:fa:a6:e3:e6:15:d6:52:3f:17:4e:3f:45:4b:8d:89:d1:
cf:11:28:fe:86:52:d4:db:6a:4b:0e:c6:b0:1e:12:54:c5:3c:
17:44:1f:80:b7:50:a0:92:a7:9b:12:80:76:99:2f:ab:33:6c:
df:b9:17:a3:75:59:ee:ed:5d:ec:79:f6:9e:0b:82:a3:a0:71:
6e:0a:cb:4b:4a:cc:d0:8a:a2:ad:40:ac:b5:d6:54:3e:45:4e:
ea:d3:64:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-fra.rpki-client.org