Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/KFFoSAGjnbXKmpyKjxfqbANEfNY.roa
File: KFFoSAGjnbXKmpyKjxfqbANEfNY.roa (raw, json)
Hash identifier: E4kVOXUxZ7FAfgkDSPjYYcwQaqtJybn1PGF0VPZ0Ybk=
Subject key identifier: 28:51:68:48:01:A3:9D:B5:CA:9A:9C:8A:8F:17:EA:6C:03:44:7C:D6
Certificate issuer: /CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
Certificate serial: 01821A61F3D879D2ECA34884EFF3DD50EF15
Authority key identifier: FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/KFFoSAGjnbXKmpyKjxfqbANEfNY.roa
Signing time: Wed 20 Jul 2022 06:53:23 +0000
ROA not before: Wed 20 Jul 2022 06:53:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212548
IP address blocks: 2001:678:e88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:1a:61:f3:d8:79:d2:ec:a3:48:84:ef:f3:dd:50:ef:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8556a2c0bb3d1ecd83c754f7b968f71340353f
Validity
Not Before: Jul 20 06:53:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2851684801a39db5ca9a9c8a8f17ea6c03447cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:bc:f2:f1:cf:4e:57:5b:e5:3d:0a:cc:21:
79:c0:52:df:49:cb:40:21:b4:be:d5:6a:02:e0:01:
59:c6:36:81:e6:9e:62:a7:e3:74:24:59:62:33:e9:
e9:46:3a:af:b6:34:58:34:0e:1f:e7:3e:bf:94:5a:
46:4b:d9:c5:53:16:c9:2b:77:4e:c8:34:ca:e9:42:
12:aa:f7:b9:e5:f9:9f:7c:65:83:b1:e6:92:14:dd:
a7:e8:6e:de:d9:a7:4a:72:3c:ac:b7:73:f9:61:80:
26:19:31:37:23:12:c5:06:36:86:99:e9:05:7a:44:
5c:3c:2a:0f:ed:9a:be:13:a6:07:eb:f4:dc:82:d2:
93:4d:34:e0:7f:51:8b:0f:e3:07:85:97:d9:55:22:
2e:c2:2f:a2:66:bf:4c:bf:8a:8f:18:48:66:b4:92:
7b:30:63:64:37:97:79:85:75:44:9f:48:15:9a:e8:
64:c3:44:72:a2:61:60:59:8f:93:eb:f7:0c:a3:18:
5a:9b:9c:55:4e:93:27:3c:81:ce:c3:0b:b7:95:b1:
9f:26:d8:d7:e7:18:ab:a9:c1:77:20:5f:a0:7d:98:
51:df:6b:00:e9:9e:cb:47:4d:02:b5:b6:c5:65:1e:
b1:d7:c7:ed:c7:21:5a:21:b6:ad:51:ae:a2:97:10:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:68:48:01:A3:9D:B5:CA:9A:9C:8A:8F:17:EA:6C:03:44:7C:D6
X509v3 Authority Key Identifier:
keyid:FB:85:56:A2:C0:BB:3D:1E:CD:83:C7:54:F7:B9:68:F7:13:40:35:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4VWosC7PR7Ng8dU97lo9xNANT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/KFFoSAGjnbXKmpyKjxfqbANEfNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/38fd5f-d410-44d3-a737-9ba2ee74658b/1/1-4VWosC7PR7Ng8dU97lo9xNANT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e88::/48
Signature Algorithm: sha256WithRSAEncryption
51:84:7b:eb:03:9b:0f:0e:cd:6d:8a:21:19:57:ee:99:d7:25:
9f:b4:52:e5:de:26:0b:43:3d:74:27:e8:39:e1:fb:b9:4e:c2:
7f:e8:c7:a3:de:f7:7b:b4:c9:5f:ab:bc:33:40:06:d5:8a:31:
ec:05:92:24:cb:99:eb:3c:09:42:a4:82:5e:61:ca:1b:2f:59:
92:fd:0b:64:52:02:1f:4a:12:9d:68:dc:0a:05:58:ed:aa:62:
b1:2e:ff:3c:c0:a6:40:29:d7:5b:b3:3a:48:9e:6d:70:02:54:
c2:ff:56:57:f4:7b:a0:c2:c6:cf:1d:31:9b:ee:18:fc:36:7a:
2f:86:db:2f:4c:29:f4:a1:6d:94:32:6e:6f:bf:1d:76:ad:66:
0a:1b:af:1b:88:e4:d3:a8:1a:4d:77:1f:f5:ea:fc:be:ee:b6:
ba:cf:b6:c6:48:53:69:bd:2b:9d:60:3f:ef:91:23:be:e3:13:
49:35:e5:69:ed:ca:fe:b3:7b:bf:59:cf:14:00:47:1b:47:00:
c0:64:2c:01:8f:64:2f:9e:01:3f:fd:55:62:a3:91:11:88:b9:
f9:94:79:aa:1f:28:c6:e5:45:20:5e:22:16:c7:7c:ca:3a:54:
84:f4:e3:62:92:ba:aa:53:75:53:d1:f9:a0:3a:9e:dd:df:0d:
b2:ae:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:53 2024 by rpki-client on console-ams.rpki-client.org