Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/2X7EI7M0XvyG_frWKH3qhYbiQ7I.roa
File: 2X7EI7M0XvyG_frWKH3qhYbiQ7I.roa (raw, json)
Hash identifier: m+fxvS+kb0RSSg5bGV/2o7tEJrvkP6FUR/sH9tbcqyg=
Subject key identifier: D9:7E:C4:23:B3:34:5E:FC:86:FD:FA:D6:28:7D:EA:85:86:E2:43:B2
Certificate issuer: /CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Certificate serial: 09DDE7
Authority key identifier: 54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/2X7EI7M0XvyG_frWKH3qhYbiQ7I.roa
Signing time: Tue 11 Jan 2022 18:56:34 +0000
ROA not before: Tue 11 Jan 2022 18:56:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 2a12:3e40::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646631 (0x9dde7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54334e53a20624ee7f0a0d88c1a9f0af05bf166e
Validity
Not Before: Jan 11 18:56:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d97ec423b3345efc86fdfad6287dea8586e243b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:91:bf:ea:d7:1a:e3:61:70:0c:d3:40:94:
c3:62:b2:e5:04:aa:08:23:76:a1:9f:d6:13:18:80:
aa:88:15:bb:e5:1a:4c:c8:fc:e9:b6:96:a9:3d:44:
9d:9d:fb:f0:f4:61:5e:99:cd:4b:ed:61:cd:c1:52:
0a:73:61:e0:52:24:0e:2c:97:4f:99:5f:d7:5e:2e:
e8:7a:e1:a7:8c:7d:ed:9c:1a:1b:8f:3d:e3:55:56:
16:af:70:be:35:37:4f:96:5e:3b:03:97:40:b7:01:
b7:c8:2e:b6:8c:66:d7:7f:11:3e:b4:4e:36:b8:dd:
e8:4a:40:94:47:e1:ae:4d:85:04:af:52:b4:b1:4a:
bc:8d:34:61:9b:5d:d9:da:56:07:bb:d4:16:48:2e:
f1:6c:47:25:95:e3:5d:ba:07:a0:43:52:bc:83:45:
8a:f7:90:dd:eb:56:bb:9d:2f:f5:c7:35:26:72:d1:
a6:a7:3b:f6:33:bc:c7:e8:39:b1:c9:5c:61:13:dc:
56:7b:55:01:f1:9e:f9:16:df:b1:28:68:94:f3:22:
fd:39:58:72:d8:5a:99:6b:22:5d:1d:49:3e:72:0c:
e2:11:14:09:7c:de:da:23:85:97:78:c2:2b:24:e7:
4a:e5:17:44:63:a1:ca:11:49:25:2a:83:09:ce:b3:
b7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7E:C4:23:B3:34:5E:FC:86:FD:FA:D6:28:7D:EA:85:86:E2:43:B2
X509v3 Authority Key Identifier:
keyid:54:33:4E:53:A2:06:24:EE:7F:0A:0D:88:C1:A9:F0:AF:05:BF:16:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/2X7EI7M0XvyG_frWKH3qhYbiQ7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f4a5ba-cf81-419f-a2c0-b76112f0c771/1/VDNOU6IGJO5_Cg2IwanwrwW_Fm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3e40::/44
Signature Algorithm: sha256WithRSAEncryption
b6:a4:4d:d5:d6:c8:bf:ff:e2:cc:ac:b8:e0:da:d7:b4:2a:30:
09:75:b7:f9:22:6d:76:40:c7:6b:3f:d9:09:a6:a5:55:e2:b1:
da:a3:b1:e8:6e:9f:a5:be:d0:44:f9:fa:c2:4e:2d:16:13:c0:
54:88:0a:d4:54:b3:6f:47:df:00:17:61:69:34:b2:0f:ba:5a:
14:77:8a:ae:2a:c4:9f:ce:3b:0d:93:f8:4d:da:17:eb:87:c7:
88:a3:31:83:b5:23:e0:0c:34:da:d4:da:92:38:58:d7:3e:5b:
82:12:75:19:1f:b5:13:41:02:7b:76:b9:6d:b6:ae:2e:4a:26:
a8:c7:2d:5d:11:d5:d5:1d:1d:6e:b5:0e:de:28:3e:b6:11:68:
a0:97:da:8d:5f:ce:de:50:14:6e:94:e4:3d:c4:78:fe:64:1a:
f0:0a:0f:f2:79:10:df:56:58:32:d1:82:af:9e:87:c3:e7:cc:
d7:d8:1f:9c:c7:fe:67:30:13:8a:a2:24:ff:84:a1:c4:5d:64:
49:78:d2:95:5b:a6:83:a3:67:a2:1b:ed:5e:bb:98:35:ff:55:
4c:89:19:82:7c:c0:f4:af:af:40:be:3c:6b:6e:e7:91:61:e6:
af:49:c8:a6:bc:db:91:f4:85:d0:d8:bc:8c:8f:09:9e:42:a9:
85:25:ce:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:53 2024 by rpki-client on console-fra.rpki-client.org