Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ajLqCOjI2Jp6_LqxGVOFJxzxzT0.roa
File: ajLqCOjI2Jp6_LqxGVOFJxzxzT0.roa (raw, json)
Hash identifier: fxjNlKigGjm06o+IXYwyzKJyG9YasgPwcCm1f0rpjXs=
Subject key identifier: 6A:32:EA:08:E8:C8:D8:9A:7A:FC:BA:B1:19:53:85:27:1C:F1:CD:3D
Certificate issuer: /CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Certificate serial: 01856D01AE10BCD04E95025C6E8E51B97AC4
Authority key identifier: 65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ajLqCOjI2Jp6_LqxGVOFJxzxzT0.roa
Signing time: Sun 01 Jan 2023 11:05:04 +0000
ROA not before: Sun 01 Jan 2023 11:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:d880:102::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:ae:10:bc:d0:4e:95:02:5c:6e:8e:51:b9:7a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Validity
Not Before: Jan 1 11:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a32ea08e8c8d89a7afcbab1195385271cf1cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:47:19:bb:b7:2a:30:3f:0f:3e:9f:33:c0:8e:
be:b9:4c:b7:8d:88:06:bf:1b:5b:ed:91:f8:cf:1f:
d1:ea:31:21:b1:77:45:f6:c3:fd:8b:b0:e0:eb:64:
1a:30:c0:33:5b:91:5a:05:d8:9b:7b:f2:90:f6:e0:
4e:7a:c8:3f:71:a3:07:ea:bb:7b:bc:03:40:7a:bf:
94:e0:97:57:d8:77:18:4d:7a:35:60:78:cb:46:db:
53:14:78:a7:63:34:55:59:ff:97:9c:50:3e:dd:96:
7d:4e:2f:09:71:10:47:ad:d7:08:f4:2f:28:da:74:
80:0c:60:c9:5c:b8:6f:e1:ae:51:d7:51:39:df:86:
39:b9:23:13:a9:7a:69:d6:f9:ee:64:16:c8:e2:e2:
9b:f2:17:31:cd:25:51:b5:8e:05:af:ab:50:0d:a3:
7c:cb:f1:75:f3:81:66:51:21:dc:95:34:d3:5d:0d:
72:b8:e1:02:f7:80:c0:ae:b6:d9:d4:50:f4:fd:af:
d9:37:37:a6:26:d2:28:66:40:39:4e:b0:21:89:30:
37:a0:10:8a:7c:09:c2:99:aa:36:b1:c5:68:75:5c:
57:3e:25:05:e8:8b:93:fb:12:ba:68:45:41:58:9b:
1e:d8:f0:d5:79:7d:24:c8:36:6e:ed:71:c7:53:53:
82:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:EA:08:E8:C8:D8:9A:7A:FC:BA:B1:19:53:85:27:1C:F1:CD:3D
X509v3 Authority Key Identifier:
keyid:65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ajLqCOjI2Jp6_LqxGVOFJxzxzT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ZQxZLbH9_ItOag57p1ZGhjc6a18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d880:102::/48
Signature Algorithm: sha256WithRSAEncryption
57:f4:a4:8c:62:5a:08:e7:e1:a9:78:b2:6d:e4:2f:89:81:a3:
23:d7:96:1a:36:f1:22:4c:f8:81:a1:c8:7e:55:2f:3b:12:3f:
32:69:b1:43:f8:19:26:48:03:af:d8:3d:d2:c9:69:6f:7d:03:
44:7b:b0:95:18:00:47:fa:5b:f3:4d:c9:5e:35:85:60:39:92:
44:00:1a:e9:33:4b:2e:ee:0f:8b:9a:f5:1e:13:6f:ca:8d:bc:
34:93:32:18:37:26:03:81:8b:e8:69:f4:63:ab:73:2f:42:1f:
b7:a2:58:88:f0:8d:36:e2:a2:8a:50:73:8a:d2:d0:90:d6:ad:
73:85:78:b1:55:d6:5f:d0:43:9f:6e:a9:fb:95:d0:7c:de:78:
43:73:cf:53:b5:f4:ed:14:e2:15:99:69:98:fa:69:f4:94:cc:
0a:dc:d2:e7:5c:1d:29:32:34:b7:03:44:90:cd:5a:df:32:2c:
24:b3:2b:89:20:3c:74:5e:fe:ad:14:b7:b9:d9:31:15:a4:0e:
2d:b0:c8:d9:53:cf:ad:13:97:a4:80:7d:88:e9:43:ae:96:66:
0d:48:62:80:df:b5:63:e3:d6:7b:d0:99:98:2a:08:e5:e0:2d:
a0:1c:af:37:b7:3e:29:bd:88:57:1e:f0:86:57:cb:d0:8f:2e:
42:78:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:17 2024 by rpki-client on console-ams.rpki-client.org