Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/1-CKi7Hom0ADrIjrWo48jyD2bytM.roa
File: 1-CKi7Hom0ADrIjrWo48jyD2bytM.roa (raw, json)
Hash identifier: 4gYlg3U13LVoWz70oLfQJU4uomgQNrHiIZRGON90m08=
Subject key identifier: F8:22:A2:EC:7A:26:D0:00:EB:22:3A:D6:A3:8F:23:C8:3D:9B:CA:D3
Certificate issuer: /CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
Certificate serial: 0182D469226F65C31BC7AB8D5C6ADC7B8E3B
Authority key identifier: 42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/1-CKi7Hom0ADrIjrWo48jyD2bytM.roa
Signing time: Thu 25 Aug 2022 09:50:36 +0000
ROA not before: Thu 25 Aug 2022 09:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 45.93.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d4:69:22:6f:65:c3:1b:c7:ab:8d:5c:6a:dc:7b:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
Validity
Not Before: Aug 25 09:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f822a2ec7a26d000eb223ad6a38f23c83d9bcad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:2a:7d:a8:6e:0d:6d:4b:e6:61:af:68:dd:
af:52:d5:72:56:13:72:3a:3a:d5:b3:31:c3:71:95:
97:72:28:4d:b3:2e:a4:ff:dd:1b:81:03:d9:7c:86:
fe:f2:e9:e1:1d:13:21:42:e9:18:4c:d4:00:1a:fd:
b8:89:ea:2d:2f:e9:52:f9:ea:69:d0:3c:93:b5:64:
85:b7:9a:b3:49:93:50:57:3b:3b:68:07:f5:7e:d6:
34:4f:fe:10:12:a8:a7:f1:de:09:38:45:1a:f1:e2:
f7:0a:50:9f:9b:4e:43:27:bb:fd:24:ef:2b:61:ee:
5a:eb:b2:21:ea:dc:e8:fc:0a:1b:61:a1:19:27:75:
67:df:e7:d4:f4:61:85:75:0b:03:de:29:6f:3a:ee:
fb:87:60:22:98:48:5c:cf:2f:d3:29:3c:80:56:2f:
43:ac:9c:01:b3:60:0b:2b:bc:c8:2f:3f:62:a5:0e:
a9:40:8a:3e:11:97:e5:80:3f:78:33:80:56:f5:84:
72:9f:e9:e4:16:08:1c:0d:2d:c6:68:6d:3f:44:4f:
dc:42:c3:94:76:12:a7:6a:ab:1c:2c:a3:25:b1:e3:
db:a8:a6:d4:ac:ec:e7:c4:3d:78:29:9a:75:34:62:
25:96:09:d7:ee:08:22:43:29:62:4a:74:b8:8b:7e:
c8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:22:A2:EC:7A:26:D0:00:EB:22:3A:D6:A3:8F:23:C8:3D:9B:CA:D3
X509v3 Authority Key Identifier:
keyid:42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/1-CKi7Hom0ADrIjrWo48jyD2bytM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:bb:03:4f:6e:b3:2b:56:af:71:fc:c5:1a:16:31:38:28:96:
a6:26:be:49:c8:df:8f:82:26:c4:71:32:00:3b:24:b7:d1:70:
83:21:4a:fb:51:1f:61:e2:2c:1a:af:a2:42:db:ed:71:a1:00:
9b:7c:e3:61:3c:07:2c:03:da:3c:f6:84:7e:51:31:34:40:51:
c0:4c:7d:ff:49:b8:55:a4:25:9a:c5:7c:dc:91:50:3f:03:37:
ec:67:9d:8c:6b:fa:ee:44:c9:9b:af:e5:d8:c4:80:70:33:40:
36:5c:b6:17:b9:93:6e:3c:c4:25:b1:b6:bd:0a:ea:0a:3e:0a:
c7:86:50:98:2c:c1:0c:3a:ae:5c:e2:2e:36:d7:92:d9:59:c4:
e4:01:ef:d1:f6:c9:6a:72:12:36:e4:02:51:c5:ad:93:a3:f1:
b8:8b:6f:a1:58:89:7b:89:5f:53:8a:11:90:8a:46:32:08:80:
ba:4b:3f:88:c6:30:69:dc:5d:9e:6b:02:30:ce:6b:32:96:c3:
95:08:66:a9:0c:0f:35:2a:78:dc:c2:8c:e6:d0:4b:ce:79:ef:
0f:02:0f:99:ad:56:77:bf:07:11:09:f7:5f:a7:53:09:a8:3c:
4c:93:07:1f:60:90:58:96:e5:ec:1b:9e:3e:25:47:13:d3:ce:
ce:8b:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:55 2024 by rpki-client on console-fra.rpki-client.org