Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/yBPtbj_IkWNydAr52szipbDIaX8.roa
File: yBPtbj_IkWNydAr52szipbDIaX8.roa (raw, json)
Hash identifier: UTn/JM49/B2U5rnTd1LCWIG6AIma8wQ0+AFISwNHiC0=
Subject key identifier: C8:13:ED:6E:3F:C8:91:63:72:74:0A:F9:DA:CC:E2:A5:B0:C8:69:7F
Certificate issuer: /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial: 01856BE5B576B7312C4700BCBE61F5E27102
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/yBPtbj_IkWNydAr52szipbDIaX8.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a12:5300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b5:76:b7:31:2c:47:00:bc:be:61:f5:e2:71:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c813ed6e3fc8916372740af9dacce2a5b0c8697f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b6:7f:e9:18:2e:86:23:4b:08:f5:de:79:44:
a5:04:62:a0:8a:4e:6a:33:fc:ea:9f:ab:3f:f4:d4:
33:16:a5:b5:91:66:cf:6a:f0:92:76:96:ee:ab:41:
93:0b:b2:ac:03:87:5f:98:62:2c:5b:88:d8:57:8f:
d2:9d:5c:42:bf:81:06:e4:53:0f:51:9d:20:61:44:
07:83:89:6f:71:f7:8e:87:e9:89:3f:dd:d8:22:9e:
ef:6a:79:e7:54:f0:ef:35:61:24:6f:b9:2f:84:fc:
f1:a4:d5:14:42:64:e7:f2:29:57:6b:5c:b5:a8:99:
5b:19:fe:64:80:76:93:10:e5:c9:34:0c:16:3b:e4:
94:20:b1:14:e6:db:9a:be:1a:0e:93:60:85:91:85:
9a:d6:3c:69:52:a7:0f:63:97:83:9a:18:3f:08:9f:
96:e3:15:21:f0:6d:0f:4f:0d:64:20:62:5d:d7:dd:
c3:d6:65:36:65:e5:b3:6f:dc:4e:91:62:86:77:76:
5c:8d:d6:99:b2:4c:4b:29:35:e0:8a:eb:53:f6:0a:
35:1a:e8:3f:e3:45:15:a0:bc:c1:11:c1:33:36:ae:
64:00:73:ce:e3:04:40:81:f2:1b:a9:24:9a:93:c5:
d7:d6:49:3f:9c:6f:83:a7:09:db:4a:12:c9:d9:98:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:13:ED:6E:3F:C8:91:63:72:74:0A:F9:DA:CC:E2:A5:B0:C8:69:7F
X509v3 Authority Key Identifier:
keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/yBPtbj_IkWNydAr52szipbDIaX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5300::/29
Signature Algorithm: sha256WithRSAEncryption
6c:56:81:a7:70:a3:57:ef:c9:c1:50:ab:a0:86:b4:07:39:94:
96:22:b2:3a:fd:b4:d1:6e:74:46:0e:d5:b1:5f:a2:0a:c3:d7:
31:26:65:df:ec:95:a1:e0:f1:e7:23:e7:b2:a0:39:b6:77:a5:
37:38:81:14:8f:69:ad:33:8c:0e:e0:57:98:62:f6:8d:20:2c:
a6:8f:1d:c5:bf:30:7b:a4:39:71:54:b0:cb:35:f1:06:c8:fd:
e5:c5:f8:f1:35:79:c2:f4:f6:86:b8:31:d9:77:10:38:ae:17:
3a:b4:77:cf:fc:0e:ce:90:d9:8a:78:2c:4d:3d:88:68:c7:40:
ad:d5:1b:99:c7:0f:77:4b:a9:39:1c:17:94:de:85:a4:38:bc:
df:90:8a:b8:a7:87:91:be:83:60:d6:ca:7d:8b:ad:d3:03:6e:
bd:2b:36:eb:da:80:62:2c:09:b2:00:80:98:e3:2e:f7:63:94:
d4:42:a7:52:6b:22:9b:10:8d:26:42:d3:64:97:49:6b:02:3a:
c2:10:71:c9:d1:0f:a9:be:a2:96:e5:4a:4c:d4:d4:c7:55:fb:
8c:ef:3c:d5:e1:20:16:5c:bf:b8:f3:c8:2d:b5:54:8d:27:19:
61:f9:db:b1:92:d8:d0:eb:7d:57:ef:bd:1c:f3:81:29:fc:5f:
e7:67:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org