Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/yjfHXJ_kx-BYwsapaMgsARfP8dk.roa
File: yjfHXJ_kx-BYwsapaMgsARfP8dk.roa (raw, json)
Hash identifier: 6l7d3n17l8bVKuzdLQFBaPsimjJdwAMmwFKth6lxQ+M=
Subject key identifier: CA:37:C7:5C:9F:E4:C7:E0:58:C2:C6:A9:68:C8:2C:01:17:CF:F1:D9
Certificate issuer: /CN=c9bafc4cc5bcd40b83ed77c0ff39ef797c945a0f
Certificate serial: 0AB1E13F
Authority key identifier: C9:BA:FC:4C:C5:BC:D4:0B:83:ED:77:C0:FF:39:EF:79:7C:94:5A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybr8TMW81AuD7XfA_znveXyUWg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/yjfHXJ_kx-BYwsapaMgsARfP8dk.roa
Signing time: Sat 01 Jan 2022 15:03:30 +0000
ROA not before: Sat 01 Jan 2022 15:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56662
IP address blocks: 2001:67c:21ec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179429695 (0xab1e13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9bafc4cc5bcd40b83ed77c0ff39ef797c945a0f
Validity
Not Before: Jan 1 15:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca37c75c9fe4c7e058c2c6a968c82c0117cff1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:13:2e:23:e8:a3:dd:05:e4:7a:fc:75:cf:
69:60:e3:1c:5c:16:9a:42:b0:7a:90:0b:06:2b:36:
fc:1e:ef:3c:1c:82:1c:4c:05:48:d7:13:bd:c4:a1:
cc:26:ce:58:ee:24:68:7c:81:09:63:37:98:18:68:
62:2f:14:98:1e:08:e1:18:ce:21:cc:f6:a5:e2:5f:
a5:69:59:22:c8:ed:e6:90:3e:d5:7a:27:82:ad:9a:
68:8e:00:ad:ec:0f:aa:30:21:50:23:19:17:05:28:
87:30:35:36:b0:6f:5b:3c:c2:0c:a2:55:b4:a4:33:
dd:6e:e7:bd:15:b2:c2:df:b0:a0:ef:12:7c:31:2d:
44:7b:ce:43:4f:b2:53:d2:c9:fa:13:68:73:31:58:
f2:53:83:d1:71:06:5a:cf:f0:c9:5c:e5:7f:bf:3f:
a3:1b:7f:7a:bb:b9:fc:4d:a8:65:ac:42:67:81:8e:
39:43:4e:a7:91:9e:43:b6:d9:aa:26:48:25:a4:09:
4d:aa:5c:85:a3:b1:24:7f:36:b5:95:78:c9:c2:84:
a9:0e:b4:39:27:f2:17:5f:ed:10:9b:42:a4:e0:20:
3e:b0:a7:c8:da:0f:5b:02:2f:cb:4c:f7:d0:af:6b:
51:ae:2b:96:a4:35:57:ce:3e:13:97:df:4c:71:af:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:C7:5C:9F:E4:C7:E0:58:C2:C6:A9:68:C8:2C:01:17:CF:F1:D9
X509v3 Authority Key Identifier:
keyid:C9:BA:FC:4C:C5:BC:D4:0B:83:ED:77:C0:FF:39:EF:79:7C:94:5A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybr8TMW81AuD7XfA_znveXyUWg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/yjfHXJ_kx-BYwsapaMgsARfP8dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/845a5a-8bfe-4f0a-91cb-0e40026ab426/1/ybr8TMW81AuD7XfA_znveXyUWg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:21ec::/48
Signature Algorithm: sha256WithRSAEncryption
10:58:e3:db:ce:ba:21:96:a2:eb:92:7a:99:12:d5:91:ff:ff:
b1:21:78:56:6c:e1:03:e1:26:e9:5c:d0:2b:2e:37:80:be:dd:
16:9b:11:6c:95:e6:13:39:e7:e1:69:db:2b:7c:8d:d6:ab:9f:
c4:fc:40:48:d1:aa:64:f7:75:6a:6a:4d:46:db:61:3b:76:75:
24:91:1f:f2:90:b8:ac:e4:56:04:4c:9f:a0:fa:7f:f7:36:ce:
b7:58:ee:a4:df:1d:d8:d9:81:c1:c1:8f:a6:89:0d:5b:2f:8a:
20:aa:08:54:93:cd:f5:c3:bc:06:eb:47:90:9f:b8:6c:7d:74:
81:97:3a:75:c3:2c:63:cd:38:7b:fd:11:eb:01:00:7e:53:ab:
e7:a9:b6:80:c7:33:bd:61:03:d2:71:95:8f:a8:3a:ec:87:f1:
cb:8c:fd:91:b4:81:12:4d:0e:a7:78:a0:7f:d7:42:97:a3:98:
1f:a4:44:96:5c:54:9a:6f:a2:7e:b7:52:47:ac:65:3d:9e:ac:
a3:6d:a6:60:6c:fe:5c:e3:1d:96:bb:26:2c:35:37:f5:05:65:
c9:ba:18:6e:43:70:f6:a0:67:b5:b1:6c:bd:20:5b:d6:c0:5d:
63:e0:f3:59:ac:7a:84:bf:df:ab:05:53:38:87:c1:dd:dd:9e:
80:c4:a6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org