Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/0PtHxvipGSqBGeFsX9bql52vJ3A.roa
File: 0PtHxvipGSqBGeFsX9bql52vJ3A.roa (raw, json)
Hash identifier: 7CdT1r59bP4n8nYjpd0Eg/G5YKhaelJKgPKdTsb/54c=
Subject key identifier: D0:FB:47:C6:F8:A9:19:2A:81:19:E1:6C:5F:D6:EA:97:9D:AF:27:70
Certificate issuer: /CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Certificate serial: 0AC2D5
Authority key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/0PtHxvipGSqBGeFsX9bql52vJ3A.roa
Signing time: Tue 11 Jan 2022 18:56:35 +0000
ROA not before: Tue 11 Jan 2022 18:56:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 2a12:3e40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705237 (0xac2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Validity
Not Before: Jan 11 18:56:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0fb47c6f8a9192a8119e16c5fd6ea979daf2770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:2a:d3:61:7e:d3:a2:7f:c0:27:be:63:07:
5a:62:da:74:f1:ef:8f:ed:5b:4f:72:81:e2:45:e6:
30:43:23:8c:7c:9d:d8:9b:45:f0:33:28:11:bc:9d:
71:03:a9:73:70:07:6d:1e:3f:b5:75:88:9a:d1:ae:
7b:27:fe:18:80:f3:2e:9f:93:55:97:d9:de:51:7a:
41:f9:e9:53:f2:d9:34:d4:55:cc:eb:ff:1f:82:e4:
90:65:5b:c9:c4:09:18:93:7b:99:c1:eb:d0:d5:5e:
77:21:6b:e8:14:93:6d:56:11:29:45:a5:b0:bb:3d:
bb:fa:0b:84:47:a0:3f:87:b3:4f:c3:76:6b:56:cf:
56:97:5a:99:ad:05:9d:de:20:0b:a7:1a:8e:44:20:
4c:3d:6d:60:91:8e:dd:bb:38:77:c2:25:2c:e0:b0:
75:14:3e:58:2f:1e:3d:ea:69:9f:c1:6f:9c:b5:4f:
97:a0:1b:78:4c:18:f2:31:b7:24:c7:c1:fd:14:b3:
e2:1c:d9:5b:9f:a4:3a:68:14:6b:97:ba:54:4e:d5:
c9:61:b4:8f:70:82:d6:9f:17:56:ad:75:9d:6f:f6:
cf:d8:2d:e6:d8:ff:9d:67:4b:7d:d1:27:1c:c1:5a:
75:b7:0a:87:57:37:a6:12:72:7b:35:86:a2:06:98:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:47:C6:F8:A9:19:2A:81:19:E1:6C:5F:D6:EA:97:9D:AF:27:70
X509v3 Authority Key Identifier:
keyid:54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/0PtHxvipGSqBGeFsX9bql52vJ3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
02:23:20:df:15:38:2c:29:57:da:2b:62:16:16:2a:44:31:52:
87:09:d4:bc:d0:8a:22:57:06:33:a1:13:c6:51:79:b4:49:7f:
82:3a:b7:91:11:33:bc:e4:0a:ca:76:5a:f1:01:6d:7f:00:f9:
af:04:dc:96:43:5d:a2:be:5c:7b:04:5b:da:75:14:2f:10:9a:
79:56:d6:4b:74:bb:4e:93:93:63:2b:ae:65:35:02:f3:2a:96:
18:c6:b2:fb:84:79:73:36:28:e9:d3:0d:be:49:f1:02:3e:51:
19:37:e5:2d:46:a8:30:f3:69:65:74:ca:aa:e9:96:a3:60:d3:
90:40:d7:5d:32:1c:11:18:7a:00:0c:55:5d:4d:39:6d:34:a0:
81:c7:cd:44:b0:d4:97:fa:5a:84:b1:23:90:d0:4c:d5:0c:59:
a8:c5:28:8c:10:1b:e6:99:77:1c:82:0d:57:69:a4:bc:53:fc:
b8:09:a8:b6:f9:2c:1c:02:21:d5:2c:98:02:d6:e7:ab:f7:2d:
bf:66:68:7f:69:77:65:35:cc:3c:91:f0:ca:97:f7:e7:a7:ea:
c5:95:7a:72:3e:43:a2:40:37:55:8e:6f:d1:23:31:aa:c1:5e:
53:a5:ff:1b:07:9c:fc:af:fe:fc:7e:c0:16:00:05:a2:4d:d3:
e2:d3:49:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-fra.rpki-client.org