Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/p-BH3PEuZPIWyqJeM0tYr_8Tn14.roa
File: p-BH3PEuZPIWyqJeM0tYr_8Tn14.roa (raw, json)
Hash identifier: 7RrZVfQt/4V04fKkYl+YARzhUY1McXI3RR6+UKlOjGQ=
Subject key identifier: A7:E0:47:DC:F1:2E:64:F2:16:CA:A2:5E:33:4B:58:AF:FF:13:9F:5E
Certificate issuer: /CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Certificate serial: 01856BCA3A35B6A56F57B5C31A03319F6CC3
Authority key identifier: 6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/p-BH3PEuZPIWyqJeM0tYr_8Tn14.roa
Signing time: Sun 01 Jan 2023 05:24:53 +0000
ROA not before: Sun 01 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:7200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3a:35:b6:a5:6f:57:b5:c3:1a:03:31:9f:6c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c9a34c521ea6073e09c204934f7ce0ea086ba1b
Validity
Not Before: Jan 1 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7e047dcf12e64f216caa25e334b58afff139f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:ad:98:78:de:2d:c2:7c:5f:46:07:7b:13:
81:8e:c5:eb:f7:18:c5:80:b6:58:df:35:52:00:2f:
72:d9:cb:a2:59:18:e4:62:2d:86:10:08:20:ae:fa:
54:a7:1b:bd:2a:2b:6e:f8:e7:eb:85:cd:6f:1e:e8:
0d:a1:38:79:bf:c4:ce:64:65:60:e5:44:53:91:f6:
bf:82:12:02:14:fb:a3:2d:ac:de:23:03:a5:ed:f8:
e6:b0:ae:58:80:80:67:b3:ca:00:99:c8:11:20:26:
7e:17:ca:ad:c7:be:ac:91:a7:3a:a1:53:7f:26:5a:
b0:4c:2a:52:55:f2:09:bb:75:35:29:05:1f:9e:d2:
c2:69:d1:e8:ce:33:05:15:f3:7a:4c:ba:5c:fc:4f:
9e:22:99:f6:f6:e0:88:8b:0e:95:77:0f:8e:87:6a:
aa:f0:d1:d2:f9:9a:50:3c:f4:50:0e:6e:e7:b6:d1:
96:f7:b0:02:0c:81:f5:69:db:3f:94:4a:7e:bc:d3:
03:b1:5e:78:e4:d2:ad:09:a2:20:c4:84:b2:39:34:
96:29:e4:5d:c9:16:63:f9:4a:c2:f0:d8:6c:0d:ba:
42:54:b0:04:ab:cf:5d:e7:99:44:71:de:57:75:f8:
a9:bf:50:21:6c:ee:ce:49:72:63:e6:f2:3a:b5:f3:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E0:47:DC:F1:2E:64:F2:16:CA:A2:5E:33:4B:58:AF:FF:13:9F:5E
X509v3 Authority Key Identifier:
keyid:6C:9A:34:C5:21:EA:60:73:E0:9C:20:49:34:F7:CE:0E:A0:86:BA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJo0xSHqYHPgnCBJNPfODqCGuhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/p-BH3PEuZPIWyqJeM0tYr_8Tn14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d40dc2-5736-4444-8d56-d41bbd1d6fe8/1/bJo0xSHqYHPgnCBJNPfODqCGuhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7200::/29
Signature Algorithm: sha256WithRSAEncryption
22:55:bd:b3:d4:93:2e:40:87:18:fb:08:51:72:f6:00:6e:ba:
af:8e:8b:6e:de:f3:10:5b:e6:cf:5e:95:f9:f8:6f:ba:08:57:
b5:04:32:99:92:ca:50:22:bd:0a:ef:cb:24:55:e0:62:9e:ee:
23:66:c4:ed:80:88:27:4a:d8:93:19:58:5c:b0:ce:c9:40:60:
4e:07:03:9b:6c:1b:f9:ec:87:0d:4f:4f:02:78:c4:ed:36:b6:
39:c6:de:08:4f:12:ca:c6:0b:4e:8f:12:6e:e5:58:75:12:a9:
f2:d2:f1:50:b2:86:50:a2:37:91:2c:a9:e8:0e:f8:4d:c6:f6:
2d:87:b4:a4:f2:3e:b7:02:96:92:86:15:55:56:2d:dc:01:4e:
31:9e:c0:74:0c:25:07:32:a2:52:2c:05:00:a8:e1:71:c1:1c:
f5:5e:c4:c9:1d:a3:d1:e3:93:6a:a3:ae:3e:9a:7e:11:63:00:
fa:88:03:02:e9:57:17:40:8d:97:dd:17:34:4f:a4:9a:5f:64:
c0:87:ff:68:bd:f6:ab:a8:b2:0a:7f:a6:31:17:fc:b4:77:4d:
44:a6:2c:9a:2a:98:ed:f9:7f:2a:e9:17:7b:10:e0:a1:7f:aa:
de:be:25:83:3e:c0:fd:67:29:61:f2:7e:4a:ee:15:7c:27:ee:
4f:f4:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:11 2024 by rpki-client on console-fra.rpki-client.org