Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/o5-oFJoOpZhwcmNQ2j7XWYcLZtI.roa
File: o5-oFJoOpZhwcmNQ2j7XWYcLZtI.roa (raw, json)
Hash identifier: DzeiELuj6bmPucATHLyZ618uddjmJCRQnEIQppCTnvk=
Subject key identifier: A3:9F:A8:14:9A:0E:A5:98:70:72:63:50:DA:3E:D7:59:87:0B:66:D2
Certificate issuer: /CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Certificate serial: 018CC6B8D9767E4CCA8B740CDA6FA08CA2A5
Authority key identifier: 5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/o5-oFJoOpZhwcmNQ2j7XWYcLZtI.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:fd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d9:76:7e:4c:ca:8b:74:0c:da:6f:a0:8c:a2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fd351e5eb2962fc16fc14e7c6e51b84ad1de8b5
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a39fa8149a0ea59870726350da3ed759870b66d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:23:59:3f:06:16:48:66:cc:cb:72:eb:d0:
82:26:5d:e1:54:6c:0d:58:f7:a5:e6:89:f8:0c:fa:
d7:95:6c:11:30:04:f0:3d:14:06:8d:f9:0f:ea:87:
69:31:c0:a9:12:0f:8f:37:85:e3:22:f7:69:94:ba:
1d:13:55:83:38:c4:72:7f:31:76:0c:99:74:1a:3c:
e7:62:ee:a6:6f:fe:07:35:2d:84:ec:6e:5c:e0:40:
82:5f:7b:a4:90:b1:ac:25:b2:ed:e0:65:f1:80:a7:
42:c7:dc:0d:ad:67:0e:2e:d9:94:8b:e8:aa:47:8d:
3a:c6:4c:d9:fa:c3:2c:80:49:cb:5d:bd:6d:49:fd:
8f:e3:f5:bd:55:5f:96:18:f8:94:7a:2e:78:e0:6d:
c0:06:95:fb:73:6c:7f:1d:30:e9:4c:20:64:3c:dd:
f7:ee:3a:bb:e8:af:0a:d6:8f:9d:3b:80:88:bc:1b:
d8:52:b9:58:0a:35:bf:fe:84:84:d5:1c:7d:f3:0f:
a9:c1:fa:60:fc:45:9e:8d:3d:36:14:08:1a:2f:89:
f1:be:18:00:7d:3d:24:6c:4b:79:8d:13:af:4c:c7:
f3:9f:c3:2b:e3:5a:d2:af:d6:5d:ac:f3:44:ba:7e:
bc:74:ea:6b:5f:15:21:64:8b:18:87:d7:0f:77:35:
63:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9F:A8:14:9A:0E:A5:98:70:72:63:50:DA:3E:D7:59:87:0B:66:D2
X509v3 Authority Key Identifier:
keyid:5F:D3:51:E5:EB:29:62:FC:16:FC:14:E7:C6:E5:1B:84:AD:1D:E8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9NR5espYvwW_BTnxuUbhK0d6LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/o5-oFJoOpZhwcmNQ2j7XWYcLZtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9457c7-bdfe-4c8a-8f54-747d88367adc/1/X9NR5espYvwW_BTnxuUbhK0d6LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fd80::/29
Signature Algorithm: sha256WithRSAEncryption
05:22:4e:8e:f8:56:5c:2f:fb:81:2d:9f:1e:63:a5:03:20:0b:
5c:74:d7:ea:9c:2f:4c:4d:e3:57:e1:57:a1:3f:32:80:f7:c7:
ad:ad:3b:63:82:b2:bf:69:83:82:a2:33:de:27:a7:35:c3:bb:
fb:8f:16:22:e0:6c:c6:3a:18:e1:60:61:d5:5b:63:e8:ce:1f:
52:8f:66:7e:00:34:b7:41:da:35:bb:a5:e5:ea:b7:e4:6b:03:
59:80:4b:37:bc:97:c8:f0:2e:94:4b:1c:2d:47:fc:f9:f0:bb:
63:ea:60:43:15:ff:5e:6f:65:86:a5:fa:16:2b:2c:cd:e4:e2:
d0:26:f0:ff:b2:45:8d:6e:80:c5:c6:51:2b:f8:7f:35:ab:b1:
54:33:1f:a4:9a:07:cf:42:e0:e8:6a:2a:3e:38:45:bb:f2:ec:
fe:89:c5:c3:1e:42:ed:91:9a:7e:f0:02:5b:e6:f0:c6:98:70:
89:6a:e9:9c:e2:37:38:34:98:bc:54:17:a5:bb:d7:50:00:78:
19:71:8d:b1:41:b4:38:6f:a5:b7:c5:83:54:1f:06:a3:1b:f8:
df:20:f5:2a:51:0f:24:c0:41:e4:7a:1f:a3:b5:fb:cd:d1:57:
57:96:ce:d0:42:9f:a7:9d:46:f0:2d:da:85:da:14:3f:6c:d2:
38:a9:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:12 2024 by rpki-client on console-fra.rpki-client.org