Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/AT7ErVu02eGkYfXCQO-r1NweIEY.roa
File: AT7ErVu02eGkYfXCQO-r1NweIEY.roa (raw, json)
Hash identifier: Ol/j1ZLaz5sByyguaS6WbOhXhwpTW4/HteTvhGj47fM=
Subject key identifier: 01:3E:C4:AD:5B:B4:D9:E1:A4:61:F5:C2:40:EF:AB:D4:DC:1E:20:46
Certificate issuer: /CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
Certificate serial: 01857139D4B93B85033F63A8239624803F71
Authority key identifier: C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/AT7ErVu02eGkYfXCQO-r1NweIEY.roa
Signing time: Mon 02 Jan 2023 06:44:53 +0000
ROA not before: Mon 02 Jan 2023 06:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44700
IP address blocks: 81.27.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d4:b9:3b:85:03:3f:63:a8:23:96:24:80:3f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
Validity
Not Before: Jan 2 06:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=013ec4ad5bb4d9e1a461f5c240efabd4dc1e2046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f1:20:90:0b:f4:6c:22:cb:1e:53:86:aa:6c:
a3:3a:8e:d9:08:83:83:ec:1c:ce:a4:fc:da:97:20:
c8:b7:f8:ef:6f:fc:12:93:fa:55:b1:1e:b5:6f:16:
4a:71:a7:71:0f:59:ce:c3:43:06:1d:82:27:95:21:
f0:14:e0:8e:45:88:8f:76:0b:62:57:0c:b8:c8:ec:
25:45:35:da:8f:e4:74:0e:92:6a:a3:b0:d0:97:2f:
23:81:14:29:e5:6b:54:a8:cf:78:c4:b3:b5:65:78:
b3:c9:6d:ed:7f:25:be:8d:4c:d2:83:2b:56:63:65:
be:bb:48:d2:14:8a:b1:a9:b8:ca:fd:90:14:01:8e:
ee:1d:6b:47:ad:fd:be:2d:0a:3c:1c:ce:39:7a:e0:
f6:7f:7d:9b:30:30:b4:9e:74:c8:78:79:30:89:1b:
0a:46:54:2f:b8:66:b0:6d:3a:c2:81:ab:7f:e2:d7:
37:2f:cd:57:7f:ce:35:f4:2d:01:9b:9c:44:73:ba:
25:2c:9f:fb:e5:f4:10:81:4c:a2:22:a3:fd:4d:e3:
a5:35:7e:a2:4f:ca:c1:de:80:7b:64:4e:73:1f:e0:
0a:01:a6:81:22:80:ab:32:03:86:09:02:76:37:02:
4c:41:93:92:a1:ea:60:00:4f:d6:05:24:05:87:fd:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3E:C4:AD:5B:B4:D9:E1:A4:61:F5:C2:40:EF:AB:D4:DC:1E:20:46
X509v3 Authority Key Identifier:
keyid:C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/AT7ErVu02eGkYfXCQO-r1NweIEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.224.0/22
Signature Algorithm: sha256WithRSAEncryption
77:3c:95:0f:8b:d4:6d:e6:2d:ff:35:1e:e6:cc:1b:9f:a8:d8:
5d:4f:c1:4d:2d:e1:c3:88:76:6c:04:77:c4:fb:99:b1:01:0b:
fd:4e:c0:87:84:45:86:aa:8f:f2:23:b9:9d:37:3d:e0:9c:09:
a7:dc:12:90:47:eb:fe:7f:b9:11:26:42:fb:66:5c:a1:64:c3:
ed:fa:b2:d9:b8:7f:cc:f2:a2:a3:3d:73:03:df:f2:6a:b7:bc:
46:78:39:5d:25:18:2e:99:4c:a4:02:30:a6:c5:ee:24:7c:2f:
f2:12:91:6d:af:21:e4:c8:5a:6a:aa:d5:02:a7:ef:58:1b:8a:
de:28:9c:82:be:33:b0:5b:ac:fe:51:17:26:bf:d8:0c:6f:e7:
89:92:56:1a:62:da:3e:bf:f6:92:a9:fd:d4:5c:50:ad:df:29:
15:cf:8d:d4:0b:fa:66:5d:2e:7e:fc:c1:05:b2:ca:11:27:e1:
f6:dc:57:53:4c:35:cb:8c:c1:f6:bb:aa:7b:63:25:cf:84:d5:
f8:ae:cb:f8:f1:ea:c7:df:5a:4a:fe:6f:e5:79:b4:41:45:6b:
74:ef:50:00:bf:ce:0a:3f:5f:47:e6:fd:98:4c:12:43:d4:7f:
78:60:9e:7e:67:d4:f0:1f:3a:e3:01:1c:1a:2c:14:22:93:50:
0c:c8:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:51 2024 by rpki-client on console-ams.rpki-client.org