Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/upWqzCBdXs6FKPnMnRdKw0NemX4.roa
File: upWqzCBdXs6FKPnMnRdKw0NemX4.roa (raw, json)
Hash identifier: jMIdJ59L7awOIE6h+81qQRKidRuAshvdFHO9Cc+lkx0=
Subject key identifier: BA:95:AA:CC:20:5D:5E:CE:85:28:F9:CC:9D:17:4A:C3:43:5E:99:7E
Certificate issuer: /CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
Certificate serial: 071752B8
Authority key identifier: F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/upWqzCBdXs6FKPnMnRdKw0NemX4.roa
Signing time: Sat 01 Jan 2022 15:59:21 +0000
ROA not before: Sat 01 Jan 2022 15:59:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 2a0a:e2c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118969016 (0x71752b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77c035ba70b47570188ac10ee9f396cabb2e8a9
Validity
Not Before: Jan 1 15:59:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba95aacc205d5ece8528f9cc9d174ac3435e997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:f3:6f:ca:ed:f0:e2:21:2b:1c:2b:4c:ae:
78:13:de:0a:f2:a9:cb:2f:7c:96:bc:f3:0b:ae:76:
b1:a7:3c:82:54:d3:82:98:c4:76:da:f7:50:06:24:
4f:02:ef:90:99:ff:d0:ed:8e:66:dd:cd:70:7e:12:
84:c5:c1:c6:d2:b1:72:94:0a:a3:58:6c:ba:f7:28:
4b:86:4b:f4:dc:34:2b:a5:33:4b:42:3f:63:df:ee:
63:cd:12:7a:68:96:07:8c:7e:9b:f7:9c:58:2e:8b:
c7:d4:3c:eb:a6:66:82:2c:d4:20:cb:8b:b1:8b:ea:
f5:47:13:cc:f5:b8:80:91:65:6e:0e:db:41:d4:76:
d4:30:e7:62:d0:56:f7:1e:81:d6:f4:2b:48:27:98:
6e:95:f7:df:1e:e8:fe:c1:ce:db:9a:fd:4f:a9:6d:
36:32:7f:b8:0a:bd:10:1f:93:83:0f:cd:61:13:5e:
94:0e:8b:52:0f:84:54:9b:77:57:ab:21:26:4d:89:
49:2b:32:a7:58:ca:47:91:cb:f0:6b:5f:1f:91:00:
57:83:49:b8:a6:bf:e0:41:4e:8a:57:e6:47:a6:a2:
64:b2:53:bd:92:7f:b1:87:ca:55:57:f8:63:17:95:
74:f5:04:f8:f8:48:d5:35:1c:4c:73:ef:d0:5c:21:
8b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:AA:CC:20:5D:5E:CE:85:28:F9:CC:9D:17:4A:C3:43:5E:99:7E
X509v3 Authority Key Identifier:
keyid:F7:7C:03:5B:A7:0B:47:57:01:88:AC:10:EE:9F:39:6C:AB:B2:E8:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93wDW6cLR1cBiKwQ7p85bKuy6Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/upWqzCBdXs6FKPnMnRdKw0NemX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/a31852-8216-4572-9495-e302fd583357/1/93wDW6cLR1cBiKwQ7p85bKuy6Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c5::/32
Signature Algorithm: sha256WithRSAEncryption
17:29:de:f8:90:5e:96:e3:d2:e1:5c:0f:05:2b:98:4a:b7:46:
1d:e9:99:af:a8:89:6b:90:61:28:de:85:9b:d2:61:c3:da:16:
7c:96:9c:11:17:45:cc:73:49:66:45:98:7b:0b:3e:b0:64:8e:
7d:e6:21:85:d8:7b:37:f4:76:1e:02:24:48:db:4f:96:ae:bd:
36:34:ec:29:b5:4c:4b:2e:32:92:d0:98:88:c2:5c:a6:97:fa:
28:98:f6:8e:59:a3:4a:1a:39:56:c9:47:78:4b:0b:f3:ee:42:
cc:05:08:d0:a4:87:9f:06:e7:8f:87:19:9d:77:10:bb:99:bd:
6b:ee:0d:9c:91:8a:0b:de:1e:9e:1f:4d:5b:89:ac:64:34:d2:
2d:0f:8f:38:40:2a:da:ab:96:e2:79:01:02:4d:a9:88:c8:7d:
58:03:8a:11:d0:d7:b0:8a:81:55:fe:78:46:77:e5:61:ad:34:
26:e0:04:b4:01:8e:c8:5f:79:ed:dc:4a:8a:c7:96:51:25:95:
64:c4:0a:d8:64:38:cc:c0:3f:9f:5f:5d:a2:3f:dc:15:df:b8:
38:bb:7d:99:a9:ed:70:0a:75:91:e5:1f:75:86:80:ba:e4:a3:
c8:25:81:46:af:48:65:53:31:a1:6a:85:33:17:87:22:8f:46:
4c:bc:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:46 2024 by rpki-client on console-fra.rpki-client.org