Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/tkN6GMkKliYrZY-7Q_lsWwxTAiU.roa
File: tkN6GMkKliYrZY-7Q_lsWwxTAiU.roa (raw, json)
Hash identifier: Kj4qeY/VzwDAQYDrNHRNjYU+J8ZNwfDfV3lJZSCvFJE=
Subject key identifier: B6:43:7A:18:C9:0A:96:26:2B:65:8F:BB:43:F9:6C:5B:0C:53:02:25
Certificate issuer: /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial: 01856C0A4195E128D11AF4E8D06AAD2BCEA6
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/tkN6GMkKliYrZY-7Q_lsWwxTAiU.roa
Signing time: Sun 01 Jan 2023 06:34:49 +0000
ROA not before: Sun 01 Jan 2023 06:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 84.252.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:41:95:e1:28:d1:1a:f4:e8:d0:6a:ad:2b:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Validity
Not Before: Jan 1 06:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6437a18c90a96262b658fbb43f96c5b0c530225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:18:a7:1c:75:f1:8d:e8:79:75:94:d5:bf:
4d:c6:84:31:b2:50:f2:56:8c:29:c3:e6:c4:aa:32:
84:82:f8:61:d4:94:31:5f:ea:f7:cc:a2:de:d0:11:
2e:69:92:99:72:37:52:70:ce:b1:ed:21:45:03:98:
fb:1c:04:d3:65:b6:a6:25:9b:f2:48:a4:b3:8f:7d:
26:41:76:a1:9b:f4:7b:2e:3e:73:bd:d7:11:68:ef:
09:ef:46:f4:f8:ea:a1:a6:cb:02:4f:2d:23:f1:59:
cc:ef:b7:1b:83:a8:be:25:92:13:c7:50:55:da:52:
f1:df:d3:92:82:84:46:21:53:3b:1c:7a:c4:43:55:
e3:0a:8a:b4:27:db:20:c3:eb:8a:c3:21:ca:6d:a6:
da:9c:89:68:c1:b9:74:17:52:68:60:bc:35:0b:fd:
d9:44:89:83:c6:53:99:44:f5:50:bc:69:fe:1a:10:
46:4c:c9:0b:a9:53:5e:14:85:3b:87:28:a7:36:8f:
5d:a7:3d:c2:7c:20:34:ed:74:ae:5f:30:de:ff:6e:
67:06:a5:3b:f9:66:33:cc:be:45:82:4b:2e:c3:96:
a9:36:5a:0e:c4:05:79:61:45:44:8a:dd:8a:34:72:
03:e9:fd:57:c6:0a:4a:23:53:34:5d:9d:85:e5:e9:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:43:7A:18:C9:0A:96:26:2B:65:8F:BB:43:F9:6C:5B:0C:53:02:25
X509v3 Authority Key Identifier:
keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/tkN6GMkKliYrZY-7Q_lsWwxTAiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.112.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:b3:81:0b:c4:35:e0:ee:33:08:64:ad:21:cf:0f:b1:df:40:
de:0f:eb:cc:c8:27:ed:59:37:81:f9:ca:81:49:ec:1e:eb:9a:
94:7a:9c:51:16:71:3c:b9:07:80:81:6f:49:2a:fc:68:97:49:
18:57:f8:4e:94:53:f3:18:3c:72:70:cb:a7:ca:d8:4f:fb:06:
b1:42:20:b0:76:09:b5:6a:fd:68:22:a6:e3:66:8e:4a:e2:09:
c9:7c:a5:d1:37:4f:44:41:e1:80:22:50:36:96:9c:fd:7a:15:
4d:82:cd:f1:dc:2a:0a:fa:e2:3a:e3:64:b6:da:90:db:ae:f6:
b7:0a:e6:77:34:34:b0:16:ca:85:f0:f2:1d:35:b9:c0:88:68:
49:7f:df:ae:8a:4c:06:3f:22:f6:5c:2d:a1:af:c5:c8:9b:dc:
f6:98:3e:29:94:97:c7:02:85:99:b2:9e:bd:3e:51:19:d5:02:
f8:a5:35:4c:d9:ec:7f:c7:1c:de:f9:65:42:89:27:8f:38:38:
6b:0e:c7:4d:33:40:7a:02:6f:36:e9:68:7e:50:c0:87:85:99:
01:fa:3b:a1:c8:a7:0a:40:b4:d8:60:1e:7e:b5:03:52:a8:4e:
f2:52:81:11:ba:a4:81:55:86:30:89:e7:bc:10:18:ea:3c:79:
9b:b4:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:12 2024 by rpki-client on console-ams.rpki-client.org