Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/d-PE7RBD-xktifUm6ysEBh9_ctU.roa
File: d-PE7RBD-xktifUm6ysEBh9_ctU.roa (raw, json)
Hash identifier: o6srw/5OtGjx2A5Yw2OmSijVBqlaJXCJ6kqxgqb1g4Y=
Subject key identifier: 77:E3:C4:ED:10:43:FB:19:2D:89:F5:26:EB:2B:04:06:1F:7F:72:D5
Certificate issuer: /CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Certificate serial: 018570FBBAEFCB2E6BC13427DD2A227FD8B2
Authority key identifier: CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/d-PE7RBD-xktifUm6ysEBh9_ctU.roa
Signing time: Mon 02 Jan 2023 05:37:03 +0000
ROA not before: Mon 02 Jan 2023 05:37:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210562
IP address blocks: 2001:67c:8cc::/48 maxlen: 48
2001:67c:b10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ba:ef:cb:2e:6b:c1:34:27:dd:2a:22:7f:d8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Validity
Not Before: Jan 2 05:37:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77e3c4ed1043fb192d89f526eb2b04061f7f72d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:e6:6c:fa:e3:6b:ee:0c:b9:e8:67:45:ce:
c8:7c:f1:15:bc:35:a7:56:d4:39:d2:a4:78:c8:ae:
53:0b:55:d3:83:92:b0:8a:fa:38:ae:96:75:b5:30:
77:22:2d:60:50:eb:3f:c4:7a:a1:f3:88:27:81:db:
f0:60:4e:1c:71:f4:cf:32:66:7f:02:28:33:99:19:
8e:ab:ed:13:33:24:06:ca:11:7a:e4:0c:a0:a7:b9:
b8:a7:1f:55:41:79:8d:8b:a2:e1:e8:61:9d:04:28:
f1:98:ba:6d:fe:a8:4c:65:87:1f:a7:e8:1d:64:90:
11:7b:c4:0c:a9:c2:68:64:35:de:f2:a9:58:da:1b:
99:8d:da:ac:fb:0f:3f:67:78:ad:33:7c:40:48:35:
1f:df:24:bd:36:f8:ea:41:4c:25:0b:90:b6:23:ab:
c1:cb:3d:6a:91:85:2b:46:ce:63:18:7d:4f:c1:53:
1c:92:c0:58:77:e9:c9:55:33:f3:03:21:45:d9:eb:
50:62:2a:ab:80:e7:9a:34:85:17:20:00:49:80:21:
13:76:f2:12:f1:24:ff:49:7e:03:65:a3:38:82:2c:
89:04:f4:c0:07:cf:ff:14:bb:a1:74:55:16:3e:b4:
35:4c:57:bb:49:e2:39:c8:f8:4d:36:3a:9f:f1:86:
2c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:C4:ED:10:43:FB:19:2D:89:F5:26:EB:2B:04:06:1F:7F:72:D5
X509v3 Authority Key Identifier:
keyid:CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/d-PE7RBD-xktifUm6ysEBh9_ctU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:8cc::/48
2001:67c:b10::/48
Signature Algorithm: sha256WithRSAEncryption
6d:10:a9:4a:75:aa:9f:9a:2c:af:65:ad:d2:e5:bc:a5:7d:f2:
63:ee:06:02:29:28:76:65:bc:65:39:92:3b:4f:f8:f7:54:d2:
fd:82:bc:76:c2:cd:04:8d:9b:96:a5:32:8d:23:de:70:d6:cd:
17:2b:a2:2d:bb:85:99:0c:c4:22:af:f2:76:12:dd:91:00:58:
2e:46:a9:f9:04:1b:42:9b:6a:01:6c:fd:d0:66:1b:13:4b:bd:
91:94:2e:5e:cd:3a:42:87:ea:a2:d7:ae:90:44:a6:7b:e2:0b:
b5:bc:ae:e1:e6:0c:4a:b9:9a:d8:68:94:10:61:4e:a3:44:b6:
2f:a5:a6:46:5c:17:fa:fc:8d:6d:89:3d:00:a7:2c:d3:b0:47:
28:db:5a:9e:b4:5d:b8:6c:62:fb:d7:82:67:49:59:c7:6e:b3:
fc:f9:61:d9:ae:f5:d7:21:72:91:1a:47:e7:08:5e:00:c5:f6:
0b:57:d8:bf:82:a3:75:49:70:12:99:2b:fe:ac:00:74:c9:62:
4a:c5:56:a8:34:45:af:7e:0c:0b:73:aa:08:c7:b7:ff:60:49:
fb:31:f4:ec:99:b0:aa:11:37:9c:5b:32:96:b4:48:78:f4:b0:
c7:56:08:7f:81:5b:2a:44:d1:17:cc:40:64:e6:fe:70:16:6b:
5f:4a:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:03 2024 by rpki-client on console-fra.rpki-client.org