Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/tqA_qKLxsDGhExuKo0YnSQMmXmw.roa
File: tqA_qKLxsDGhExuKo0YnSQMmXmw.roa (raw, json)
Hash identifier: j2y10qHbN7UeK9BdbzdoxAdwOV7GhFyiApVLXLxWPno=
Subject key identifier: B6:A0:3F:A8:A2:F1:B0:31:A1:13:1B:8A:A3:46:27:49:03:26:5E:6C
Certificate issuer: /CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Certificate serial: 0182F7CCFC660D7B786639443F5A41C724D8
Authority key identifier: 5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/tqA_qKLxsDGhExuKo0YnSQMmXmw.roa
Signing time: Thu 01 Sep 2022 06:46:22 +0000
ROA not before: Thu 01 Sep 2022 06:46:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21155
IP address blocks: 87.239.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f7:cc:fc:66:0d:7b:78:66:39:44:3f:5a:41:c7:24:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5db3ca79bbaa9753de2a56448c4901f3067e29aa
Validity
Not Before: Sep 1 06:46:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6a03fa8a2f1b031a1131b8aa346274903265e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:a5:9e:38:2c:7f:05:f2:90:d6:6d:c2:5c:
8d:4e:d2:33:79:7d:5a:d5:41:b9:e7:4f:44:8f:b7:
7d:63:11:f9:1d:9a:5d:fb:5c:a9:7d:3c:dd:2a:ff:
2b:0e:db:8c:a2:49:9a:eb:d9:3e:33:bc:e8:f7:57:
13:91:00:1f:43:15:d1:c4:79:4f:4e:0b:f2:a4:2e:
70:0c:9b:da:8c:97:ec:38:7b:f7:ea:2e:bb:6d:ed:
fc:29:a8:a9:6a:43:b2:94:2e:57:56:36:49:df:ac:
f5:61:aa:c4:bc:d4:dc:70:e2:ad:ca:75:f6:b8:dc:
b0:06:f0:15:57:81:41:bf:c7:f9:49:61:35:7a:91:
83:22:76:d7:c7:21:65:dc:0c:96:25:9b:f3:50:55:
82:e7:31:8e:0c:1a:d5:c0:54:9a:07:c1:88:cb:6a:
53:f4:41:21:3d:03:88:ae:08:2e:43:10:a0:d6:d1:
77:43:4b:da:89:6e:9a:c4:52:7c:8e:c3:dd:9d:56:
7c:69:83:bf:d0:1d:15:cd:58:b9:8d:0e:57:ef:43:
78:98:98:ca:17:de:a3:ad:fb:a6:19:df:5b:00:fb:
8c:55:85:6c:ba:33:ff:38:5a:f0:ce:70:d4:7c:c1:
eb:e1:42:bb:b9:dc:f1:7e:22:c7:9e:3c:64:6d:43:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:3F:A8:A2:F1:B0:31:A1:13:1B:8A:A3:46:27:49:03:26:5E:6C
X509v3 Authority Key Identifier:
keyid:5D:B3:CA:79:BB:AA:97:53:DE:2A:56:44:8C:49:01:F3:06:7E:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbPKebuql1PeKlZEjEkB8wZ-Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/tqA_qKLxsDGhExuKo0YnSQMmXmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b7a6b6-c37c-4996-85f8-ad34df45eaba/1/XbPKebuql1PeKlZEjEkB8wZ-Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:d4:75:2e:e5:16:79:93:ce:a8:52:76:00:54:86:aa:3c:ad:
06:85:c8:d2:f8:78:90:46:b7:25:01:6b:0c:ab:97:f5:dd:1b:
9d:15:96:35:93:d7:bd:ed:f5:11:e1:80:ae:56:44:ad:89:73:
bd:1d:6d:c0:bf:07:d0:78:91:b1:fb:0c:da:10:38:bf:58:51:
e6:79:e6:d9:db:30:02:0e:fc:00:53:cf:3d:1e:59:f8:7c:d6:
e0:e3:37:8f:1d:04:58:b2:46:d4:ab:af:05:9e:01:5c:8e:2f:
d1:fc:4c:e8:6c:70:13:bb:34:2c:ab:62:6b:60:4d:76:98:27:
ca:e0:71:e0:7a:e6:4c:e9:64:79:a3:f4:05:7c:85:3f:56:06:
5e:6b:1b:88:d2:88:24:99:e5:da:d3:42:88:0b:59:9e:b5:cb:
1f:6c:56:78:55:02:e3:76:4d:8e:4c:2f:ad:81:fb:84:fc:b2:
9c:0e:31:6c:df:26:1c:a7:1b:37:d2:89:41:b0:8d:53:33:97:
2c:7c:01:cf:0b:cf:9e:a4:89:9f:d3:81:25:65:a3:1a:39:ec:
29:ca:af:d8:e7:01:eb:41:6e:3a:e1:40:79:1b:f4:63:b6:e2:
bb:0b:bd:0b:0e:e4:ef:ed:90:88:c5:44:4a:e5:a9:4c:d0:90:
2d:0c:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:10 2024 by rpki-client on console-ams.rpki-client.org