Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/4CgIKiiU-CEvFTCez-bkkNUR7FE.roa
File: 4CgIKiiU-CEvFTCez-bkkNUR7FE.roa (raw, json)
Hash identifier: 8PIm/tXGbtBo6wIuZtfLtw0M6zFya42Xcdamy0bJDeQ=
Subject key identifier: E0:28:08:2A:28:94:F8:21:2F:15:30:9E:CF:E6:E4:90:D5:11:EC:51
Certificate issuer: /CN=ce3cff3184126ba92b08c2e7ddefb2d2ac69f29e
Certificate serial: 16EE68D2
Authority key identifier: CE:3C:FF:31:84:12:6B:A9:2B:08:C2:E7:DD:EF:B2:D2:AC:69:F2:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjz_MYQSa6krCMLn3e-y0qxp8p4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/4CgIKiiU-CEvFTCez-bkkNUR7FE.roa
Signing time: Sat 01 Jan 2022 06:01:48 +0000
ROA not before: Sat 01 Jan 2022 06:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57118
IP address blocks: 2001:67c:2c28::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384723154 (0x16ee68d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3cff3184126ba92b08c2e7ddefb2d2ac69f29e
Validity
Not Before: Jan 1 06:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e028082a2894f8212f15309ecfe6e490d511ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:06:9b:07:ef:f8:e9:07:7b:81:d1:1c:8e:
46:12:65:9d:98:68:99:a1:a9:48:15:df:87:38:28:
fc:f1:36:f6:bc:ed:cc:89:54:3e:87:18:3f:92:ce:
15:ec:93:c5:ea:2a:98:dc:91:d8:54:08:88:cb:82:
87:16:da:e0:3a:46:b2:fa:17:1e:da:08:08:7d:c9:
a9:d0:c0:5c:41:af:93:cc:c0:80:e5:fa:cd:40:a8:
e8:13:ee:61:87:a7:e3:0e:e4:d8:e3:38:a3:3e:b2:
0a:36:46:37:96:55:6e:c9:69:d5:fe:ef:be:73:17:
bd:28:5f:5d:98:04:db:f9:78:77:34:cd:aa:3b:a7:
41:60:c8:84:20:56:da:1b:e6:e1:30:e6:eb:92:21:
a7:a2:38:c7:1e:41:22:41:a1:9f:da:f0:b0:c3:71:
08:69:b6:5c:fb:91:a4:71:c0:a7:6b:bc:38:38:57:
16:7f:4b:70:cb:d0:e8:36:14:0b:94:1b:f5:2f:8b:
4c:59:74:7e:da:7c:14:88:d9:9d:73:9f:f5:8d:44:
bd:bc:2e:50:21:30:68:89:bf:2a:9c:7d:bc:60:4e:
2f:2f:18:7b:99:18:66:fa:5b:77:54:34:bc:86:2e:
17:65:0c:33:58:46:f2:c6:23:94:07:6b:43:12:1c:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:28:08:2A:28:94:F8:21:2F:15:30:9E:CF:E6:E4:90:D5:11:EC:51
X509v3 Authority Key Identifier:
keyid:CE:3C:FF:31:84:12:6B:A9:2B:08:C2:E7:DD:EF:B2:D2:AC:69:F2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjz_MYQSa6krCMLn3e-y0qxp8p4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/4CgIKiiU-CEvFTCez-bkkNUR7FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/564dde-11a9-4bb7-9151-49e1a9fb1b00/1/zjz_MYQSa6krCMLn3e-y0qxp8p4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c28::/48
Signature Algorithm: sha256WithRSAEncryption
7d:b7:7f:a5:7d:b5:1d:3a:68:3f:6d:d1:c8:16:e5:76:55:71:
63:84:5b:fc:b0:cb:62:ef:65:a4:fd:ed:56:62:88:b7:ca:dc:
b2:46:20:6e:5e:1f:b0:09:98:8f:4e:be:a6:77:a6:4e:5c:80:
58:d3:85:73:a6:60:e7:b7:35:4f:a0:51:1f:8b:54:09:90:f8:
c5:08:42:00:a4:99:18:e2:0d:2b:69:58:1d:66:51:5e:18:0d:
9d:b0:6b:f4:39:1c:c8:d5:23:c5:89:04:31:73:35:ef:e3:01:
bc:15:cb:11:0e:aa:03:fc:1d:57:04:70:a2:ef:f2:9f:33:5c:
8d:87:dc:ae:c2:87:f5:f2:f3:24:61:34:23:76:2b:4e:ae:6a:
b2:bf:b1:74:7b:2f:e3:60:b3:0b:4a:5e:d1:ae:be:2c:06:55:
34:6c:34:e5:2e:27:2b:41:ce:bb:f5:4b:ce:dd:42:3a:43:9f:
51:d5:fd:cc:2f:90:42:25:cb:6d:b3:f6:33:12:53:40:d5:18:
d0:10:68:8c:d7:a8:99:82:93:d4:68:7d:8c:18:ba:f4:a1:9c:
0a:54:2e:9b:05:d0:f9:94:f5:6e:9a:be:86:a9:fb:db:ca:40:
26:09:65:81:1d:dc:a7:b6:83:46:53:36:06:40:41:fc:2b:5d:
ec:75:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:08 2024 by rpki-client on console-ams.rpki-client.org