Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/WY9bDS9hWiuHZVz5N8fR6f2jZKw.roa
File: WY9bDS9hWiuHZVz5N8fR6f2jZKw.roa (raw, json)
Hash identifier: CgIdQM/KyveP/VYogR8jUnQYkrD6+xBmekcqct93imI=
Subject key identifier: 59:8F:5B:0D:2F:61:5A:2B:87:65:5C:F9:37:C7:D1:E9:FD:A3:64:AC
Certificate issuer: /CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Certificate serial: 018486AB50A4986EAE6D6A88CBC3CBD9F02D
Authority key identifier: 5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/WY9bDS9hWiuHZVz5N8fR6f2jZKw.roa
Signing time: Thu 17 Nov 2022 17:38:05 +0000
ROA not before: Thu 17 Nov 2022 17:38:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:fd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ab:50:a4:98:6e:ae:6d:6a:88:cb:c3:cb:d9:f0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Validity
Not Before: Nov 17 17:38:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=598f5b0d2f615a2b87655cf937c7d1e9fda364ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:a8:8c:79:06:90:2c:bb:1d:c7:4f:86:4b:
8b:3f:f9:12:c8:86:81:37:f5:4a:61:96:19:26:b9:
af:fc:10:55:3a:d5:69:e0:cb:4e:e0:de:0d:94:a6:
d5:65:3d:d5:1c:43:95:73:57:aa:7e:f5:86:b1:db:
7d:87:7f:a1:29:8b:3b:40:c8:7b:10:f0:4e:ab:36:
03:a2:d0:6b:be:ca:37:b7:e7:2b:0e:72:74:3a:3c:
f9:2e:80:43:df:06:ad:ea:ab:e1:62:a2:9d:e5:2a:
f2:38:72:ed:3d:1d:0f:3a:1b:23:50:3e:61:53:bb:
fa:ed:7a:79:cf:d2:aa:40:5c:a4:55:dd:82:01:d8:
c3:a3:68:bb:e7:91:21:56:48:ca:16:f0:0e:cc:d3:
37:15:63:d3:d3:5d:f1:0d:43:50:80:84:e0:1a:71:
29:ac:31:a6:59:3d:25:59:2d:74:32:e5:09:f6:fb:
83:a0:0e:43:20:d5:a2:34:24:25:9a:bf:64:fc:bb:
00:e6:27:60:ed:77:cc:44:5b:06:6f:1b:77:e1:2c:
c2:e5:1b:35:fc:da:dd:cd:ab:7e:da:d6:42:f0:f6:
84:3c:6f:5e:ea:4d:f5:2c:c1:30:db:74:94:e6:86:
df:80:48:49:af:61:98:8f:e3:fb:0c:11:44:9b:29:
90:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8F:5B:0D:2F:61:5A:2B:87:65:5C:F9:37:C7:D1:E9:FD:A3:64:AC
X509v3 Authority Key Identifier:
keyid:5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/WY9bDS9hWiuHZVz5N8fR6f2jZKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
33:c6:e3:b5:af:70:3f:06:ad:66:a4:e3:bc:df:38:7f:86:dd:
c5:ee:ee:ce:f6:ee:5c:46:3d:68:2d:c9:09:6b:42:eb:60:8e:
11:2e:fa:2e:06:5a:10:1c:30:5c:dd:6a:58:e7:33:0e:60:25:
2d:5e:86:8c:ba:eb:d7:67:25:9f:ca:8f:55:4f:6a:03:a8:9b:
fd:91:9e:19:7e:57:11:41:e4:7e:a7:45:62:a1:93:ee:bf:b4:
a3:2a:48:b2:74:f4:39:53:69:6e:bb:55:51:9b:85:49:c5:c1:
76:ce:a3:1d:d7:ac:d6:57:15:ba:8e:06:99:ff:99:04:19:05:
df:49:74:6c:7c:ec:12:b2:97:94:9c:21:29:62:ea:21:96:e7:
d1:21:11:0f:34:20:5c:cf:4b:a5:94:5b:78:35:15:8a:79:ef:
fe:96:d4:6e:cc:91:9d:e9:37:95:63:8f:f5:aa:e2:24:09:4a:
bc:40:9a:d2:65:ea:cd:29:7d:e2:72:82:86:bb:14:e3:2a:71:
90:70:5a:df:36:9c:9a:2d:c9:39:a6:17:e8:50:fc:48:6b:0a:
2d:55:27:20:c5:85:20:ee:f8:a0:95:44:c3:63:60:31:4a:38:
31:ba:aa:4b:a2:93:a1:0a:b7:33:ab:41:af:0a:04:10:96:0f:
12:04:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:12 2024 by rpki-client on console-fra.rpki-client.org