Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/z8nCzMnpFB_R413UwyoYk0AZb9Y.roa
File: z8nCzMnpFB_R413UwyoYk0AZb9Y.roa (raw, json)
Hash identifier: w5+/R3j6JxpjG7kuNA6i110p5em5IZJEK/ZMJy8/ots=
Subject key identifier: CF:C9:C2:CC:C9:E9:14:1F:D1:E3:5D:D4:C3:2A:18:93:40:19:6F:D6
Certificate issuer: /CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Certificate serial: 7C5464
Authority key identifier: 7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/z8nCzMnpFB_R413UwyoYk0AZb9Y.roa
Signing time: Sat 01 Jan 2022 01:52:22 +0000
ROA not before: Sat 01 Jan 2022 01:52:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a12:5300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8148068 (0x7c5464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bdc0d0d1b42f50a06a087bea22512932eb68802
Validity
Not Before: Jan 1 01:52:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfc9c2ccc9e9141fd1e35dd4c32a189340196fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:79:e0:81:81:95:48:f9:76:b3:12:0f:6f:
53:63:29:c8:13:4f:7d:c3:eb:52:a4:71:a4:45:c1:
ac:16:21:5b:f9:d4:b5:1b:8f:3b:4a:94:ea:21:b3:
ca:b0:9f:cc:70:6d:3f:65:0f:17:77:e6:df:40:ff:
c8:e9:7e:d1:fd:d7:b9:da:55:ae:07:db:42:0e:d0:
4c:15:6c:c2:8c:af:6d:46:67:b1:d3:9f:92:88:8e:
a1:88:f6:6f:d9:a4:3a:3f:75:b0:67:3f:94:4d:b8:
03:02:1f:ff:87:09:d8:76:8a:a0:70:64:16:c4:dc:
14:6f:a4:e1:dd:ef:9d:70:e6:28:00:a5:4b:86:9e:
66:fb:10:ba:6d:80:5f:3e:24:a7:92:5c:b3:90:d7:
1e:6b:b4:83:b4:76:c0:17:6a:91:c1:29:fc:4e:4c:
e4:b5:b9:16:26:c5:77:9a:83:8c:dd:c8:e3:5d:00:
7e:31:2e:60:0f:11:bd:94:6d:96:77:2e:fa:38:56:
7f:59:fd:73:2d:7d:2d:13:20:73:17:57:5d:e9:1a:
47:6e:3c:13:cb:25:9e:4a:fa:85:e7:ea:47:b7:af:
e5:a1:2d:f0:7a:19:92:0b:bf:b2:41:55:aa:c2:aa:
38:58:cf:18:a4:97:38:76:4a:33:53:73:58:73:ce:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C9:C2:CC:C9:E9:14:1F:D1:E3:5D:D4:C3:2A:18:93:40:19:6F:D6
X509v3 Authority Key Identifier:
keyid:7B:DC:0D:0D:1B:42:F5:0A:06:A0:87:BE:A2:25:12:93:2E:B6:88:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9wNDRtC9QoGoIe-oiUSky62iAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/z8nCzMnpFB_R413UwyoYk0AZb9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/21af10-1804-43c4-9123-4f6d80881109/1/e9wNDRtC9QoGoIe-oiUSky62iAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5300::/29
Signature Algorithm: sha256WithRSAEncryption
59:d3:43:27:93:ce:da:1a:8b:fa:45:d2:dd:a7:f7:4b:83:ca:
70:4b:a5:3a:d9:03:11:1d:73:84:9e:54:2a:3a:fe:ff:f8:08:
a6:a1:88:c8:7f:52:0e:41:47:31:7a:0c:c0:90:35:93:78:83:
ac:e0:e8:15:93:4e:77:fa:79:5a:47:38:f0:6f:7d:9f:cd:27:
91:cd:69:23:49:65:93:37:29:de:ec:f5:2a:80:9d:bc:38:2b:
c5:87:03:cf:b9:6d:f7:a7:c6:88:ca:98:51:87:e8:f1:bc:5a:
9e:ff:2a:e8:82:b0:3a:94:51:6f:9a:c9:59:57:06:04:c3:59:
9e:df:b9:78:d3:43:c3:76:b5:8b:5e:cc:cb:54:12:f0:17:4d:
83:f9:82:18:1a:c1:8b:5d:ad:45:95:3a:a1:47:2a:a6:4e:7d:
bd:9b:25:36:46:a8:e1:13:44:ea:08:21:a6:41:f1:f6:9a:fe:
7b:13:fd:cd:63:10:25:12:e3:e9:de:02:b9:c1:60:90:17:f3:
47:fb:28:e8:95:e9:03:cd:7b:5d:03:9f:3a:f5:7e:02:bf:a1:
28:b2:6a:90:46:af:d4:57:03:48:a7:14:65:d4:f5:59:b0:22:
a0:2d:9f:7e:51:04:41:78:e2:e8:c0:6a:61:7b:65:f0:ad:e8:
e7:a3:63:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:30 2024 by rpki-client on console-ams.rpki-client.org