Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/kg1UYa6iLirukpXA64m2cc8wlAw.roa
File: kg1UYa6iLirukpXA64m2cc8wlAw.roa (raw, json)
Hash identifier: vjOlmDSozGB1f/AlslgYVhQ5VBFHE70ncyn9aUIalDE=
Subject key identifier: 92:0D:54:61:AE:A2:2E:2A:EE:92:95:C0:EB:89:B6:71:CF:30:94:0C
Certificate issuer: /CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Certificate serial: 09ED3BED
Authority key identifier: 77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/kg1UYa6iLirukpXA64m2cc8wlAw.roa
Signing time: Sat 01 Jan 2022 04:56:17 +0000
ROA not before: Sat 01 Jan 2022 04:56:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210989
IP address blocks: 2a0d:1a40:7b00::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166542317 (0x9ed3bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c8d8bbf05797a75a49c5d70f5971ecdec6dd93
Validity
Not Before: Jan 1 04:56:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=920d5461aea22e2aee9295c0eb89b671cf30940c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:06:b5:ff:37:24:9e:d6:8e:7e:3d:bc:52:
7b:82:2e:be:dd:13:85:10:48:5e:ee:60:96:c5:2c:
bc:e4:ba:43:ba:0e:79:70:e8:28:6a:cf:7b:11:a6:
1f:43:f7:aa:d3:8c:a1:c4:dd:00:10:a4:d4:1a:ea:
47:89:49:0d:cf:f3:26:2b:5a:88:c1:d2:6a:a1:10:
7e:c8:9d:e0:c8:f5:15:d2:c7:6f:fd:ee:a2:76:69:
c9:f9:8a:86:c2:bb:47:b5:da:e1:33:bc:69:c6:40:
de:24:5f:41:1a:a9:64:ac:8e:b8:88:f4:72:bb:7d:
fc:2c:7c:09:93:c5:89:6d:85:49:f8:3c:40:55:1e:
df:a4:dd:33:41:97:3c:c4:bf:6c:6e:71:2f:8f:5b:
dd:a3:06:b7:21:50:2a:8a:4c:71:03:94:b2:54:c0:
47:72:e7:3a:ab:7f:fd:f3:0f:e6:85:5c:f3:02:02:
3c:65:92:84:98:b5:da:0f:f1:af:a9:8a:b5:ff:9a:
36:b6:8f:e7:89:39:19:2f:51:ba:c9:6f:61:3e:d3:
93:ba:19:6b:63:7c:d7:8e:0b:52:93:44:23:e3:4b:
a1:6c:ed:5b:90:4e:04:d6:67:8a:97:8b:3b:c9:14:
2d:64:d1:24:f1:2b:b4:51:3a:3b:d0:80:b7:eb:27:
b8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:54:61:AE:A2:2E:2A:EE:92:95:C0:EB:89:B6:71:CF:30:94:0C
X509v3 Authority Key Identifier:
keyid:77:C8:D8:BB:F0:57:97:A7:5A:49:C5:D7:0F:59:71:EC:DE:C6:DD:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8jYu_BXl6daScXXD1lx7N7G3ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/kg1UYa6iLirukpXA64m2cc8wlAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/45abde-5b44-471a-93d9-5345f7e74083/1/d8jYu_BXl6daScXXD1lx7N7G3ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1a40:7b00::/44
Signature Algorithm: sha256WithRSAEncryption
7e:81:20:10:79:10:e4:b4:80:66:7b:93:43:06:c4:fe:d0:29:
2e:2d:b6:76:12:9e:02:5f:bf:22:03:d7:46:28:57:ac:66:22:
5d:c9:f5:b5:23:f6:b9:28:4f:5b:55:a6:1b:ef:b0:aa:3b:63:
5d:74:68:ce:8d:47:22:81:46:80:d8:b9:94:70:32:2f:32:90:
ef:ad:a2:02:3c:9e:88:b6:f5:7c:b8:12:49:75:5d:17:ae:ba:
28:2a:d0:eb:f5:7f:29:7f:70:55:eb:7d:95:ac:41:08:86:af:
76:61:c7:70:7e:dc:c4:ee:5f:52:c8:bb:6b:a9:e1:c5:2a:ce:
49:02:ee:17:fe:71:34:11:e0:53:d3:de:97:6b:e4:5c:d2:05:
4e:a6:e9:3e:1b:6e:7c:1a:46:00:be:21:21:c0:1a:63:d8:e4:
67:6a:d8:e9:e3:e8:c4:79:d0:5f:e4:48:a6:c5:a9:c8:ee:3b:
77:b0:78:7b:02:97:56:07:1f:a8:fc:a8:c3:56:ad:66:aa:02:
de:4c:56:61:ef:69:58:dd:b9:6a:e8:0d:0c:35:59:74:b4:72:
08:b1:cb:e0:41:11:0a:07:d5:51:27:b1:d4:40:53:48:ea:0f:
5b:ca:03:af:8c:7f:3d:bc:63:8d:25:2c:b1:01:49:ce:da:18:
9a:8d:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:27 2025 by rpki-client