Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/LK02NAVJdwiV63tECUkPHuFVBAk.roa
File: LK02NAVJdwiV63tECUkPHuFVBAk.roa (raw, json)
Hash identifier: Vtp767C6D7yJZdyjaf8tXeQUH6Vg//sirlgTxWzMcWk=
Subject key identifier: 2C:AD:36:34:05:49:77:08:95:EB:7B:44:09:49:0F:1E:E1:55:04:09
Certificate issuer: /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial: 012512E0
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/LK02NAVJdwiV63tECUkPHuFVBAk.roa
Signing time: Sat 01 Jan 2022 04:55:39 +0000
ROA not before: Sat 01 Jan 2022 04:55:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.88.88.0/23 maxlen: 24
45.88.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19206880 (0x12512e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Validity
Not Before: Jan 1 04:55:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cad36340549770895eb7b4409490f1ee1550409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:da:3c:93:c8:8b:07:2d:f5:51:6f:b0:0f:bc:
b1:32:54:dd:28:d2:2e:05:92:7f:be:ee:dc:ef:30:
38:1b:00:f8:2b:55:d0:8c:2d:9c:eb:9e:e3:3f:03:
b6:99:3c:c6:f3:84:f3:1a:6e:46:86:38:93:25:29:
f8:f5:4b:be:4c:4c:27:71:b3:e0:9e:7b:c5:05:83:
e4:9e:10:ff:9f:a4:bc:9a:ea:82:f2:36:d6:41:1a:
c4:9e:7e:8f:01:bd:7a:03:e3:de:fd:00:38:c8:25:
1a:f3:1f:59:d7:54:0e:62:a6:3d:9c:c4:5d:c0:69:
a0:de:96:c2:ad:5a:4c:45:a6:bb:d5:d9:d3:b3:22:
a2:6f:ae:e5:60:3d:ee:84:53:47:de:53:58:0f:87:
40:fb:9b:6c:88:68:3b:a5:9d:60:c4:de:0f:15:16:
93:c6:6b:1c:d5:67:90:f0:94:e7:66:1b:82:46:bf:
d8:5d:cf:34:2b:90:07:e2:fc:1f:98:04:5d:f8:63:
9a:7c:ac:3a:89:6e:ac:a6:2e:13:60:4f:18:02:92:
30:64:b9:a4:9c:90:a0:9c:bf:54:db:45:ea:27:90:
fa:4b:00:93:69:88:ab:c2:53:28:41:57:7a:39:28:
d9:5a:b7:24:6b:73:6a:86:8a:8c:6a:41:ee:54:54:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AD:36:34:05:49:77:08:95:EB:7B:44:09:49:0F:1E:E1:55:04:09
X509v3 Authority Key Identifier:
keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/LK02NAVJdwiV63tECUkPHuFVBAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/22
Signature Algorithm: sha256WithRSAEncryption
24:16:84:b7:d8:88:4c:d2:3c:4d:62:ea:f4:9e:2e:69:5f:ef:
75:55:da:e4:8b:98:9a:52:83:b2:6e:43:61:b7:67:7d:cc:0a:
aa:c9:c9:ac:77:da:bf:09:24:c5:87:d6:7b:9c:6f:cd:7b:eb:
eb:d1:d8:83:e1:76:28:2f:c9:2b:f0:59:ff:6b:cb:f0:51:be:
5c:d6:b6:1a:f7:5b:0f:db:3f:c9:3f:cc:1c:d7:b5:02:a5:a7:
f3:6e:7a:a6:4c:20:9b:d7:6e:80:50:24:4b:6d:de:5d:54:be:
ed:a9:91:59:78:f9:97:5d:ea:5a:8e:4e:58:aa:9c:1d:4a:7d:
32:27:be:6c:b2:09:13:84:2f:dd:98:50:f2:11:30:f3:a4:99:
7d:57:0e:b7:a6:64:31:90:c6:0a:24:8e:6d:d2:dd:b0:e9:a6:
7b:01:9a:5d:97:0b:4b:b5:12:15:83:5f:52:20:78:e0:21:46:
e4:57:53:72:9f:28:0e:04:ec:72:ff:53:20:73:d5:82:8c:75:
f3:af:61:39:42:81:c1:28:9e:7e:4e:bc:af:41:59:ac:08:14:
95:60:bb:fc:1b:96:a6:e8:97:d3:00:ea:6d:85:0b:e7:77:c2:
95:2d:b3:6a:b6:4e:2e:44:7a:95:7c:8b:e1:4c:12:f6:21:3a:
c5:32:35:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:11 2024 by rpki-client on console-ams.rpki-client.org