Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/BsaxQs1a4Ek9uhTwRl6VcOnNvCY.roa
File: BsaxQs1a4Ek9uhTwRl6VcOnNvCY.roa (raw, json)
Hash identifier: Dk2HhB0/odiE8NIzwCqFgXMpLWpboLFj6KAuaXIB5n0=
Subject key identifier: 06:C6:B1:42:CD:5A:E0:49:3D:BA:14:F0:46:5E:95:70:E9:CD:BC:26
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 018214F88EE8388D608B2500289BD070E7E4
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/BsaxQs1a4Ek9uhTwRl6VcOnNvCY.roa
Signing time: Tue 19 Jul 2022 05:40:09 +0000
ROA not before: Tue 19 Jul 2022 05:40:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25393
IP address blocks: 78.27.224.0/19 maxlen: 19
195.177.116.0/22 maxlen: 22
2a02:2279::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:14:f8:8e:e8:38:8d:60:8b:25:00:28:9b:d0:70:e7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: Jul 19 05:40:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06c6b142cd5ae0493dba14f0465e9570e9cdbc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:59:af:50:1a:61:ca:37:60:2e:5a:dd:0a:
b6:2d:e1:9e:59:42:88:fa:0a:58:73:40:34:95:ed:
06:a8:97:c0:cf:cf:ed:00:43:44:26:6e:9f:e2:c4:
c1:2a:5d:29:56:93:02:7d:0f:ba:97:75:25:df:5e:
a9:a5:31:51:3b:55:be:1c:7d:9f:15:1d:5d:a9:cf:
bf:b1:ca:87:b1:65:e9:0c:07:7e:83:2c:35:92:12:
d7:f6:0a:ba:40:30:e7:35:e1:ff:da:4e:c8:57:cb:
ec:58:bf:5c:5b:65:80:83:10:61:d7:b7:1b:10:6d:
f0:b7:1d:f6:c6:69:d6:a3:fb:d2:d8:6e:11:58:ee:
e6:73:93:1a:b5:22:a8:fb:a6:26:80:d2:76:d8:d7:
85:83:20:aa:aa:0b:b9:71:85:df:a6:51:8c:a8:03:
b8:fa:ed:88:a2:d4:bf:69:a0:4d:de:a1:48:03:f8:
b6:96:02:34:4f:56:68:e3:d7:9c:a4:e1:e2:a6:0b:
45:20:8b:00:fd:60:c3:ae:be:8c:d2:5b:e8:c1:89:
99:ae:af:d1:ab:01:e4:ee:f0:78:47:d6:74:21:12:
83:ff:c5:56:56:35:cf:3a:db:e0:dd:64:72:c2:9a:
8e:ae:4d:a6:c5:06:3f:aa:9d:56:7d:37:25:38:c5:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C6:B1:42:CD:5A:E0:49:3D:BA:14:F0:46:5E:95:70:E9:CD:BC:26
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/BsaxQs1a4Ek9uhTwRl6VcOnNvCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.27.224.0/19
195.177.116.0/22
IPv6:
2a02:2279::/32
Signature Algorithm: sha256WithRSAEncryption
9c:14:ed:1b:55:65:ff:63:59:9c:e3:82:e9:40:e0:f5:c0:40:
7a:43:f4:31:3e:11:50:74:76:25:5a:e8:d5:3f:89:69:14:d0:
88:0e:bf:56:3f:75:dd:32:41:b9:1a:08:5c:c2:52:55:72:d2:
5a:4b:44:93:b6:2c:08:7b:c0:16:d8:60:a3:04:52:b1:c5:16:
e6:8d:e3:9c:83:40:85:26:69:d3:c6:11:7d:80:08:e7:23:d6:
a0:1b:96:53:a8:8c:57:02:aa:4a:96:54:21:c6:02:b0:fc:39:
54:26:e9:36:6e:bc:6d:63:7c:cf:64:b4:a5:eb:1d:59:ea:91:
1c:47:de:8c:1f:13:00:a9:b7:66:a8:0a:14:84:0f:ed:53:45:
44:11:c3:cf:3c:df:55:89:69:ad:42:1f:ac:5f:90:f4:cd:48:
de:60:ea:1f:7c:d8:ba:70:d1:51:9f:77:d7:bc:71:54:7b:cd:
13:22:c5:45:9d:47:03:15:6a:6c:3f:1e:b3:60:79:9f:b7:b8:
59:84:e7:77:39:ac:fa:db:d1:54:bf:76:6e:5e:12:3b:ea:7d:
ca:7c:7b:b6:92:ef:b9:c4:7d:47:96:1a:c4:c1:52:4b:f6:d6:
8f:e9:ef:64:e9:c6:63:db:77:9f:c1:2c:27:1f:89:5b:16:2b:
94:51:69:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org