Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/203816-dbbc-4e91-a7bc-c9860b89252a/1/RJsLO1wZ4Id4fITcI-ItQ5UBTTo.roa
File: RJsLO1wZ4Id4fITcI-ItQ5UBTTo.roa (raw, json)
Hash identifier: CW1HWfE98ipeH0N9e3YQcCcjVjjH4BDH53NI4gQPBBQ=
Subject key identifier: 44:9B:0B:3B:5C:19:E0:87:78:7C:84:DC:23:E2:2D:43:95:01:4D:3A
Certificate issuer: /CN=961c9ab8daf577c9c9c3d4592e1f92143ef04306
Certificate serial: 0375B31E
Authority key identifier: 96:1C:9A:B8:DA:F5:77:C9:C9:C3:D4:59:2E:1F:92:14:3E:F0:43:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhyauNr1d8nJw9RZLh-SFD7wQwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/203816-dbbc-4e91-a7bc-c9860b89252a/1/RJsLO1wZ4Id4fITcI-ItQ5UBTTo.roa
Signing time: Sat 01 Jan 2022 01:52:21 +0000
ROA not before: Sat 01 Jan 2022 01:52:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31317
IP address blocks: 2001:678:414::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58045214 (0x375b31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961c9ab8daf577c9c9c3d4592e1f92143ef04306
Validity
Not Before: Jan 1 01:52:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=449b0b3b5c19e087787c84dc23e22d4395014d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:a2:7a:9b:be:f0:2c:cd:d8:71:8d:c4:f5:
35:b2:f2:b3:da:19:ec:e0:cc:23:9a:89:a2:8b:19:
a1:6a:07:9a:dd:9c:58:de:e2:bc:4e:7d:05:3a:25:
74:4f:07:ec:d4:96:fe:99:b4:ae:06:5e:2e:6b:0b:
21:7e:83:e6:1b:8e:cd:2b:01:d0:cd:25:c0:87:7e:
d1:70:34:1a:a4:f8:ed:29:25:bb:38:39:47:33:22:
3c:07:8c:0b:10:c6:a1:7e:ad:25:da:e2:86:99:f5:
16:ff:60:e3:12:25:13:f3:88:54:7a:09:db:9a:e4:
23:f5:7b:3d:5c:14:7b:63:ca:09:09:4f:23:9c:01:
71:48:b5:dc:49:85:46:7a:99:0f:14:85:68:7e:3f:
1a:f0:db:e1:c9:e6:96:61:24:1c:e4:30:30:c4:45:
21:41:26:69:54:c7:20:eb:ab:eb:34:7e:47:e6:5c:
b8:61:cf:92:e9:79:09:b0:3c:03:83:ca:8c:b3:85:
55:be:ca:80:93:52:87:2f:53:fb:c2:9d:e2:94:43:
76:ca:c3:32:0a:ae:69:bc:1f:79:c0:22:fc:59:84:
29:20:30:bd:18:d1:89:f6:f2:52:93:cf:84:82:e8:
75:b3:35:aa:4a:4e:c9:e3:22:37:9c:38:95:5a:2a:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:0B:3B:5C:19:E0:87:78:7C:84:DC:23:E2:2D:43:95:01:4D:3A
X509v3 Authority Key Identifier:
keyid:96:1C:9A:B8:DA:F5:77:C9:C9:C3:D4:59:2E:1F:92:14:3E:F0:43:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhyauNr1d8nJw9RZLh-SFD7wQwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/203816-dbbc-4e91-a7bc-c9860b89252a/1/RJsLO1wZ4Id4fITcI-ItQ5UBTTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/203816-dbbc-4e91-a7bc-c9860b89252a/1/lhyauNr1d8nJw9RZLh-SFD7wQwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:414::/48
Signature Algorithm: sha256WithRSAEncryption
58:d1:f8:a4:a9:67:4d:26:04:0e:46:69:0b:2f:17:a8:b8:98:
69:8c:67:fc:3e:8a:cf:eb:d8:16:23:38:13:8c:0c:2c:57:d7:
7d:14:c8:6f:f5:0c:f5:09:51:14:a1:c9:a0:ce:41:66:54:36:
8a:6b:85:36:96:70:e1:de:06:65:87:29:cb:79:bf:c3:6d:6c:
78:aa:2e:bf:67:7d:58:85:32:37:a1:40:c2:82:0c:f0:ea:d8:
e9:06:c7:52:93:16:96:73:c2:ce:02:77:ee:54:14:ff:26:06:
29:14:41:2d:8c:f5:e2:83:34:e2:7c:d8:2e:1a:af:18:f7:32:
9e:3e:fb:a8:5e:77:33:f5:4f:a0:e1:2b:c5:48:a6:ec:d9:fd:
02:98:52:50:a5:ae:da:9e:c1:ec:5e:e3:50:d6:16:9d:be:8e:
74:5b:da:bd:4e:2a:18:c1:57:61:dc:a7:70:af:ad:f7:d3:c2:
fe:da:2c:d6:78:69:5c:15:e1:c3:a1:7e:55:27:42:9d:38:29:
8a:c6:a1:9e:1d:d4:6b:9d:ef:09:7a:9c:fe:72:4f:12:4c:89:
e3:8a:95:d8:7b:c1:90:e2:8a:d0:63:ae:1c:08:ab:2d:28:df:
d2:7d:94:cd:e4:af:7f:7a:72:b3:4b:6d:ee:e2:3e:73:ab:0d:
a1:d8:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org