Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4Fx30GDECrK1oj5oYaMkGGlyJ0s.roa
File: 4Fx30GDECrK1oj5oYaMkGGlyJ0s.roa (raw, json)
Hash identifier: D3KlU3KkTkJIavaf7W0hfebjTRZK1YDtnTzEaJBa/dk=
Subject key identifier: E0:5C:77:D0:60:C4:0A:B2:B5:A2:3E:68:61:A3:24:18:69:72:27:4B
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09EA3BF6
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4Fx30GDECrK1oj5oYaMkGGlyJ0s.roa
Signing time: Sat 01 Jan 2022 04:56:15 +0000
ROA not before: Sat 01 Jan 2022 04:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208563
IP address blocks: 2a0d:1a40:7800::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166345718 (0x9ea3bf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e05c77d060c40ab2b5a23e6861a324186972274b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:36:ec:a9:5c:aa:08:b8:ca:21:7f:ac:2f:b2:
16:ce:ac:f6:ef:e6:77:c3:90:2c:ae:98:63:e5:8d:
17:5d:99:13:93:32:82:db:39:50:8d:3e:56:8a:4f:
73:b4:c7:05:7c:e1:0f:55:ac:b8:6a:a1:cb:f4:01:
3d:9d:5b:3d:b3:2b:58:d5:21:cd:0a:5a:81:d4:34:
b4:aa:03:5f:34:c9:20:b7:46:23:78:1e:1c:5a:57:
7f:26:aa:1f:2f:0c:f4:9f:2a:1f:61:3a:2d:1e:e2:
d3:d3:d2:2d:3c:6c:31:5d:9f:67:ec:00:40:7a:62:
f4:8d:bd:49:91:c6:f8:cd:33:3a:47:59:ea:ba:35:
1d:98:1f:cd:b7:40:b3:f8:38:f2:06:2e:8e:a4:b3:
95:d2:7e:58:6d:0c:3e:e1:4b:7b:4b:6b:e1:26:3f:
ab:01:4f:8c:73:ed:5e:93:f5:e0:d0:90:5b:75:38:
4a:a5:f6:76:43:1f:2e:50:2e:53:fc:08:14:9d:4b:
8d:93:e3:f6:71:4e:66:26:c7:57:cd:35:e8:02:43:
2d:41:46:9f:37:0b:19:d4:ea:36:57:2f:da:8b:b4:
5c:41:18:36:9c:35:d3:2b:f5:2f:86:5e:0a:56:56:
e0:59:c7:80:6d:5d:fd:f4:9f:6a:a6:a6:28:3f:f3:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:77:D0:60:C4:0A:B2:B5:A2:3E:68:61:A3:24:18:69:72:27:4B
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/4Fx30GDECrK1oj5oYaMkGGlyJ0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7800::/40
Signature Algorithm: sha256WithRSAEncryption
48:27:06:7c:93:61:61:95:3c:b1:bc:6f:af:35:30:8a:c7:0e:
ad:07:c5:45:5f:37:10:63:d0:19:23:bb:ba:d0:bc:c1:c2:af:
83:9c:61:59:64:6f:03:c7:6c:36:04:99:13:84:c9:63:90:d1:
4c:89:5b:29:3d:12:db:f3:4f:b7:36:5c:71:42:01:4d:34:38:
49:c0:38:6d:11:b5:37:4f:5f:09:82:b3:ec:e4:8b:ee:b2:9c:
24:a0:01:b1:60:69:8b:8a:ae:28:b3:83:12:6f:ca:b5:46:2a:
88:94:3d:b0:11:94:e7:ef:53:72:b1:d1:dd:70:9e:67:88:5a:
4f:f9:35:73:6e:50:fa:95:85:38:38:3d:64:87:6d:46:6b:58:
46:68:b5:3c:f8:d6:52:c4:61:90:29:35:d0:56:28:6c:0e:b2:
33:2e:22:f8:3d:43:b5:3c:e0:a4:9b:ab:b5:1c:fa:62:7a:ec:
79:02:95:f2:10:c9:59:cd:24:91:62:f9:34:f7:a8:f2:dd:61:
51:93:62:14:36:5f:49:1e:ad:ee:c3:53:76:d7:04:77:a7:2d:
04:f4:0f:e2:08:04:cb:24:cc:fb:06:24:61:11:d5:fe:30:87:
bf:c3:84:09:a1:45:1b:94:3f:ac:db:7e:ce:cd:64:5c:a1:85:
ab:fb:a3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:40 2024 by rpki-client on console-fra.rpki-client.org