Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/KHIJWgGbuT2S0m_tg2JCcQLwbck.roa
File: KHIJWgGbuT2S0m_tg2JCcQLwbck.roa (raw, json)
Hash identifier: KPhqkNExHKJcCehrftQ4n6dRKRvFYzZXcInpy5Zl/tQ=
Subject key identifier: 28:72:09:5A:01:9B:B9:3D:92:D2:6F:ED:83:62:42:71:02:F0:6D:C9
Certificate issuer: /CN=2a2caea2eed113867ad773b7b35809d386a803b2
Certificate serial: 018282FF042CE541F68ABDF4CBA19548274D
Authority key identifier: 2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/KHIJWgGbuT2S0m_tg2JCcQLwbck.roa
Signing time: Tue 09 Aug 2022 14:25:26 +0000
ROA not before: Tue 09 Aug 2022 14:25:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57330
IP address blocks: 2001:67c:2964::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:ff:04:2c:e5:41:f6:8a:bd:f4:cb:a1:95:48:27:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a2caea2eed113867ad773b7b35809d386a803b2
Validity
Not Before: Aug 9 14:25:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2872095a019bb93d92d26fed8362427102f06dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:cc:d9:52:02:8a:78:bb:b8:aa:14:f8:1e:
3b:3b:fe:51:51:92:e8:08:27:2f:fb:d6:47:82:c6:
b3:1e:93:58:a5:70:75:8a:3d:dc:9a:38:4c:d5:ac:
a2:e4:83:a5:c9:f5:23:60:f0:d1:aa:43:a6:f9:0a:
c0:37:7a:bc:fb:b8:20:57:9b:3f:ef:f2:1f:e9:b2:
15:7e:5b:41:de:5d:45:c5:a8:25:81:9d:15:18:72:
4c:8f:89:9a:39:09:32:8f:1b:24:f0:1f:2a:93:57:
7c:56:83:b7:4f:df:4a:5f:4d:ce:ee:98:8b:1c:1d:
17:10:c6:f7:ee:14:93:86:fc:c7:8a:96:e3:4e:99:
24:a7:ee:99:da:d3:07:75:56:e5:76:8a:17:35:0e:
51:e3:ac:56:da:4d:21:31:3b:b5:9c:3b:ee:fc:da:
4e:89:7a:e9:7a:3f:bc:8b:37:34:94:2f:a2:74:c1:
a9:ca:86:ec:30:39:c9:03:d6:63:f2:b7:ce:3f:a9:
3f:54:9f:c2:e4:0e:d6:95:b4:12:9f:22:c5:0d:f9:
50:a4:96:71:58:95:2d:b0:0a:18:bd:a8:79:e7:b2:
51:96:40:8a:de:d5:fb:a8:3c:a8:e9:4b:3e:ab:b4:
47:5b:fa:90:a1:a6:ea:be:b4:5e:e1:a7:4b:20:1e:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:72:09:5A:01:9B:B9:3D:92:D2:6F:ED:83:62:42:71:02:F0:6D:C9
X509v3 Authority Key Identifier:
keyid:2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/KHIJWgGbuT2S0m_tg2JCcQLwbck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/Kiyuou7RE4Z613O3s1gJ04aoA7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2964::/48
Signature Algorithm: sha256WithRSAEncryption
03:38:10:62:5d:69:34:5a:00:5b:a3:4e:cd:be:9b:75:f5:9f:
be:05:01:c3:e1:0b:dd:5e:e9:9b:27:bf:b9:01:34:f9:97:9b:
69:a4:ec:09:7b:38:74:ca:be:b4:47:06:23:f7:a1:6a:82:7a:
d1:b7:1a:85:27:5b:77:59:17:42:ec:0d:30:60:19:57:dd:f3:
3e:7e:ec:94:b2:f5:14:bc:0c:1a:ac:5d:12:b2:b8:8c:fd:14:
35:a4:87:d5:8f:cf:df:a2:58:9c:4e:1d:cb:f2:b0:06:2f:91:
ec:9a:c3:82:75:b6:49:c2:f5:58:f5:05:5d:f6:eb:55:8d:9d:
86:3f:cd:31:17:05:d2:d4:30:e5:89:30:42:73:bc:c6:96:7d:
22:4b:54:6f:d0:73:a0:17:c0:50:19:16:e1:27:01:53:9e:1c:
8e:8f:6a:6a:13:a5:c5:f8:27:56:c6:26:6c:fb:3f:b0:c9:a1:
9e:26:e6:f0:cf:45:b8:49:66:02:0e:7c:ba:72:3a:09:d3:93:
fd:60:24:ac:63:9e:a7:c3:d4:df:60:62:1e:e2:01:71:5f:40:
04:84:95:29:37:31:c3:7a:33:81:ba:43:14:3e:2d:06:a8:83:
1c:04:8b:ad:b9:61:5a:99:05:12:bf:cc:14:18:2e:14:f0:26:
5c:c8:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org