Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/JDAdz2dTB_GL_BWrPI67NKa-C8E.roa
File: JDAdz2dTB_GL_BWrPI67NKa-C8E.roa (raw, json)
Hash identifier: 2fORYkYAlPb5W4BQ8KA6zVvRpHKPpfig6dAiDb9B6rc=
Subject key identifier: 24:30:1D:CF:67:53:07:F1:8B:FC:15:AB:3C:8E:BB:34:A6:BE:0B:C1
Certificate issuer: /CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
Certificate serial: 0109EAB3
Authority key identifier: D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/JDAdz2dTB_GL_BWrPI67NKa-C8E.roa
Signing time: Sat 01 Jan 2022 13:00:20 +0000
ROA not before: Sat 01 Jan 2022 13:00:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a01:6640::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17427123 (0x109eab3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
Validity
Not Before: Jan 1 13:00:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24301dcf675307f18bfc15ab3c8ebb34a6be0bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:f6:93:00:08:8a:4c:c8:88:c6:76:18:ef:
72:ee:94:1c:b1:55:9b:ea:26:a0:ad:4c:cf:3b:c2:
73:dd:3f:5d:07:1e:b0:df:d2:b5:3e:e4:8d:78:d3:
84:98:f1:9e:d4:46:6e:2e:f0:a8:38:91:48:3e:58:
5c:63:dc:f0:ee:c5:31:db:db:0d:81:f0:52:25:70:
61:07:93:2a:15:06:5b:50:be:c2:d8:25:cb:7d:81:
71:fe:cc:72:d3:d7:c7:66:3a:ca:95:a0:71:1a:3f:
a5:d9:bc:7d:87:ae:00:ba:22:10:d0:6e:7c:16:17:
f4:f9:ab:38:a8:a9:d7:74:f5:a1:fa:bc:48:a4:26:
e8:17:40:5d:60:a6:ca:93:5d:50:04:c0:6b:5f:3d:
c7:26:ca:78:60:6c:46:61:6b:58:a5:7b:e6:ba:8f:
38:3d:cb:77:24:61:8d:82:0c:1f:1b:41:e3:b0:c6:
5e:67:94:8e:9c:e2:ca:5e:eb:8b:9e:fa:71:a3:d8:
7e:d6:c1:1d:a7:b0:bb:44:8d:a0:0b:cf:09:cc:eb:
1d:c8:24:e5:b1:5f:42:3d:f5:9c:31:79:9e:5e:c0:
f5:eb:25:e9:35:4a:f2:6e:a3:b3:fd:bf:8c:8c:e7:
39:b9:c1:3e:e8:9c:62:19:b9:96:45:14:4e:4a:ec:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:1D:CF:67:53:07:F1:8B:FC:15:AB:3C:8E:BB:34:A6:BE:0B:C1
X509v3 Authority Key Identifier:
keyid:D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/JDAdz2dTB_GL_BWrPI67NKa-C8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6640::/29
Signature Algorithm: sha256WithRSAEncryption
62:ee:25:95:d5:01:04:09:02:b2:e3:ae:66:5e:04:cb:be:7e:
62:ee:88:77:38:76:75:b3:d5:f8:93:76:97:f1:c9:ff:89:21:
2b:ec:bf:fd:af:27:2d:5c:1e:9c:16:68:26:b9:24:02:10:8d:
ce:30:d6:a9:c2:d5:9f:ae:31:bd:84:62:64:cc:32:12:da:c4:
5d:c5:fb:13:b5:66:42:47:46:1d:f0:6c:3f:85:d9:0b:59:f7:
59:74:67:07:f5:3e:65:1f:49:78:92:33:3d:44:28:73:dd:c5:
b2:f4:76:80:ec:9d:86:0a:8b:a4:d2:83:22:a0:ec:a0:31:bb:
47:db:63:0d:c8:13:8b:25:b7:82:11:d5:4e:df:fd:62:90:f9:
6a:88:dd:a8:59:23:9d:04:3a:5f:51:22:48:04:84:05:3c:b5:
5f:38:fe:a6:39:c4:ec:31:f3:6a:3a:78:eb:4e:8d:b6:b5:62:
8c:5b:f0:85:c2:b7:e0:4c:a1:c3:62:89:86:77:48:bb:10:81:
4c:6c:61:5d:db:4e:76:4f:c5:8d:84:f7:62:08:3d:20:fc:61:
5f:71:36:05:d1:14:b6:e0:2d:63:9c:55:ef:6b:ae:5c:b6:cf:
7b:20:9f:75:9a:b7:6f:91:a5:50:3f:02:67:ea:f3:7f:e3:99:
e1:61:0f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:32 2024 by rpki-client on console-fra.rpki-client.org