Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/yryxnS2cgtNrOtlIbV1kFdcPa1M.roa
File: yryxnS2cgtNrOtlIbV1kFdcPa1M.roa (raw, json)
Hash identifier: KuZIkwGlEr2yXxv/PuPaURD3g+nfB7bUsOKIoVJB81A=
Subject key identifier: CA:BC:B1:9D:2D:9C:82:D3:6B:3A:D9:48:6D:5D:64:15:D7:0F:6B:53
Certificate issuer: /CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Certificate serial: 0800023A
Authority key identifier: BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/yryxnS2cgtNrOtlIbV1kFdcPa1M.roa
Signing time: Sat 01 Jan 2022 03:55:27 +0000
ROA not before: Sat 01 Jan 2022 03:55:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18779
IP address blocks: 2a0c:47c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134218298 (0x800023a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc69e2061e8c7cee42efa4fef9f30f7bf6f6d053
Validity
Not Before: Jan 1 03:55:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cabcb19d2d9c82d36b3ad9486d5d6415d70f6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d7:19:9c:fa:87:53:2f:6f:d7:7a:86:7d:57:
5f:02:06:6a:e3:2f:3a:01:bf:8e:ac:cf:fb:09:00:
f0:ad:7c:f6:ba:29:c4:df:1b:da:8d:cf:08:9d:5e:
2d:67:77:49:44:14:92:48:af:92:ab:c1:86:6f:90:
ea:d9:b7:f2:bc:9a:5c:10:25:6b:e9:f0:a8:7d:41:
e0:74:2f:da:ff:63:91:17:d3:c7:5b:8e:22:2b:d8:
e4:2e:eb:60:6b:38:5d:9b:44:e3:e1:b8:40:2a:bc:
e5:18:df:1b:4e:5c:de:27:6a:73:06:36:4c:4b:96:
1f:09:08:f5:b6:e7:65:eb:29:8e:9d:6e:3b:33:3e:
4f:9b:a6:d5:aa:f6:19:e3:0d:d4:cd:a1:12:c8:c5:
a4:8a:04:f2:24:b1:20:82:7b:74:04:ef:1d:19:94:
4a:85:70:7f:f4:62:fb:92:dd:3d:f6:25:5c:c6:eb:
98:4b:51:e6:1f:fd:d1:70:ca:01:65:db:8c:3e:bc:
8a:ad:d2:81:b7:20:8c:4d:8e:fd:50:74:2a:78:02:
7b:51:16:d2:ef:eb:7c:75:33:e2:3e:5f:3e:5e:08:
e9:eb:f1:ae:3a:da:29:2f:3b:40:c0:4e:03:c5:5d:
27:11:48:9f:85:40:57:9f:9f:5b:49:c5:60:69:58:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:B1:9D:2D:9C:82:D3:6B:3A:D9:48:6D:5D:64:15:D7:0F:6B:53
X509v3 Authority Key Identifier:
keyid:BC:69:E2:06:1E:8C:7C:EE:42:EF:A4:FE:F9:F3:0F:7B:F6:F6:D0:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGniBh6MfO5C76T--fMPe_b20FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/yryxnS2cgtNrOtlIbV1kFdcPa1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fefc97-81cf-4fe4-ac75-c44de5fd78ba/1/vGniBh6MfO5C76T--fMPe_b20FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:47c0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:32:12:27:e2:c9:18:69:5f:7f:2b:93:02:fb:1b:bf:ab:59:
85:11:46:e4:ec:f4:f1:ab:e7:90:dc:6d:20:f4:fd:69:4c:a9:
1e:c5:15:c9:9a:70:cc:b4:b7:37:5e:24:20:c0:e9:c7:4f:3d:
12:1f:bb:36:ee:6b:c6:3b:44:e7:5a:cb:fd:08:18:85:65:c8:
53:9c:ae:6e:23:0e:9b:84:9d:b5:a4:b2:b8:f0:49:3e:a4:30:
44:46:d8:f1:42:a5:95:d3:09:87:aa:41:5c:8f:13:64:95:47:
30:97:aa:45:dd:c7:c2:47:79:1f:c1:2d:35:0d:61:24:44:92:
cf:1a:f9:36:f2:ff:68:1f:6d:c9:71:9d:d2:16:82:0f:06:a5:
2f:af:62:23:a9:21:cf:38:35:a8:dc:8d:c5:47:42:df:1f:0f:
6a:c5:d0:85:85:c1:e0:29:e3:25:97:b2:a0:10:77:a0:9d:a6:
4e:fb:c5:26:cb:d7:a9:bc:0d:1c:94:9f:2b:7e:1a:14:8d:4a:
c9:a0:6b:ce:e6:40:9e:2d:e3:4b:b5:22:ec:b4:7c:c1:99:ec:
6f:37:f5:37:0e:c7:03:33:ff:31:10:77:27:8e:24:8e:bb:88:
b7:4c:d3:20:1e:cd:60:60:16:4a:03:05:9d:23:5a:02:87:39:
76:d4:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org