Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/yykYoB1AiVPa_LfoK_9GYnRncwY.roa
File: yykYoB1AiVPa_LfoK_9GYnRncwY.roa (raw, json)
Hash identifier: br1LSwqF8cmTWaJcW6Uw94ieAFknZK6hDjJPYggjG/M=
Subject key identifier: CB:29:18:A0:1D:40:89:53:DA:FC:B7:E8:2B:FF:46:62:74:67:73:06
Certificate issuer: /CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Certificate serial: 018570427DD8618971C4E9F2095F9A942D5E
Authority key identifier: B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/yykYoB1AiVPa_LfoK_9GYnRncwY.roa
Signing time: Mon 02 Jan 2023 02:14:43 +0000
ROA not before: Mon 02 Jan 2023 02:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1836
IP address blocks: 2a01:bc60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:7d:d8:61:89:71:c4:e9:f2:09:5f:9a:94:2d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Validity
Not Before: Jan 2 02:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb2918a01d408953dafcb7e82bff466274677306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:de:bb:cc:e8:f3:19:f5:06:91:77:f0:a2:
ea:db:0e:d7:c3:cd:54:de:6c:85:db:bf:5f:be:0d:
a1:05:70:68:82:54:8e:18:ff:9b:14:90:1f:3a:97:
ed:45:02:f1:13:0f:3e:fc:dd:00:8e:04:1d:01:62:
5a:44:73:4f:d0:8f:2b:1d:b2:3d:6c:99:54:c9:99:
82:9b:2a:cc:08:da:d3:c4:7f:6b:f9:e2:0c:be:ed:
ff:a2:1e:2d:3e:c7:1b:e7:4c:9b:11:5f:ec:4d:cf:
2c:f3:f8:65:56:79:fb:e2:b6:7b:8b:3d:d6:a0:86:
a6:71:28:20:9a:99:d4:c0:b4:06:e7:8b:cd:8b:dc:
92:0c:76:dc:9d:9d:cc:32:11:e7:ff:0f:11:b3:d9:
9d:71:03:e1:56:4f:9a:97:c2:bf:bc:ad:2e:32:e0:
4a:e0:1f:b3:5e:71:96:e8:4a:05:f1:bd:ef:20:dd:
cc:6a:1a:73:47:2c:75:7c:34:44:23:18:92:d8:48:
af:95:c8:73:c7:91:db:f3:77:34:b8:c8:86:ee:93:
a1:5e:08:9d:a6:42:81:19:79:eb:57:8c:c7:75:e3:
21:c1:d3:c2:6c:59:c5:3d:df:0d:3d:bb:31:1a:b1:
f5:fa:5a:fa:da:59:3b:18:60:3e:09:2b:23:da:b5:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:29:18:A0:1D:40:89:53:DA:FC:B7:E8:2B:FF:46:62:74:67:73:06
X509v3 Authority Key Identifier:
keyid:B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/yykYoB1AiVPa_LfoK_9GYnRncwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bc60::/32
Signature Algorithm: sha256WithRSAEncryption
5d:23:46:b4:1b:1c:58:dc:b4:ca:e8:97:ed:a2:fa:89:df:f1:
ab:13:ee:7a:3e:83:6a:a0:76:e4:56:27:07:2e:f1:d8:65:39:
82:2f:cb:80:b3:86:a1:41:bc:ab:29:67:8f:e0:eb:08:2f:54:
b0:0b:b4:49:ed:c4:fe:f5:29:13:36:be:fc:fa:9d:a3:3f:ec:
d2:70:cb:33:b1:b0:d3:89:be:02:4d:c8:91:48:97:50:d5:ba:
be:98:ab:9a:cf:4e:a1:84:94:b1:e0:10:53:a7:dd:e7:d9:f2:
3b:b6:a7:0e:16:0e:af:4c:e8:50:cc:03:5f:a4:ed:a4:56:e6:
4e:bc:30:01:eb:c8:0e:29:64:dc:9d:65:14:bf:95:63:e9:7d:
e3:b7:ad:a5:31:06:ff:d5:16:b9:ea:e3:0c:b9:05:e6:c9:16:
27:ce:81:3f:ac:71:5e:7f:b9:d9:0c:fd:a0:7b:36:fe:34:b7:
a2:a6:19:cc:8a:da:e3:d7:6b:4c:7d:d8:4b:20:56:ea:22:79:
37:20:84:e3:50:65:5c:9f:ef:29:0e:db:8c:a5:68:4a:ee:96:
8a:5a:e5:f1:c9:54:49:7f:29:3e:2a:d8:63:2c:1e:7a:0a:18:
68:78:5f:e1:5c:3d:e3:5a:3e:05:5e:58:c0:f8:e5:b9:46:85:
e7:2f:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org