Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/OTLF8e4m_zdZPvBiVJogQi9v8NU.roa
File: OTLF8e4m_zdZPvBiVJogQi9v8NU.roa (raw, json)
Hash identifier: JYCgNigcyROo3gX8LvklloD0sVCL1rS3YSTIR/RRzb8=
Subject key identifier: 39:32:C5:F1:EE:26:FF:37:59:3E:F0:62:54:9A:20:42:2F:6F:F0:D5
Certificate issuer: /CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
Certificate serial: 018E1455F481E6756E85CBE782C4DA3D6DB1
Authority key identifier: C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/OTLF8e4m_zdZPvBiVJogQi9v8NU.roa
Signing time: Wed 06 Mar 2024 15:16:01 +0000
ROA not before: Wed 06 Mar 2024 15:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207487
IP address blocks: 2001:678:c18::/48 maxlen: 48
2a14:14c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:55:f4:81:e6:75:6e:85:cb:e7:82:c4:da:3d:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
Validity
Not Before: Mar 6 15:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3932c5f1ee26ff37593ef062549a20422f6ff0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:b2:5c:ad:b9:94:4f:1c:a5:51:d6:11:bb:
ce:7f:a3:2f:f6:41:bd:62:c2:d2:2c:fa:87:f5:54:
91:aa:48:e4:88:9a:bf:ee:91:45:80:57:1b:e8:01:
06:6e:96:66:b5:ed:a7:42:7b:cf:cf:cd:90:e0:41:
9b:fd:69:4b:ad:b2:dc:a3:5c:40:f3:9c:57:52:57:
26:0c:64:b7:63:ac:01:e0:83:74:2e:4f:61:8e:fc:
ac:f8:8e:f5:14:be:da:2c:d7:b2:b7:2c:f9:6b:5f:
3c:6e:01:e5:c4:36:b2:d9:4d:1c:03:d8:a9:d3:c7:
39:96:a0:bc:f1:46:79:ab:72:d9:c2:a3:db:b7:12:
ed:f1:6c:7c:07:c4:99:2a:e6:99:9f:9c:f9:84:06:
4c:a6:9a:be:64:2c:f2:33:ea:d6:66:79:ed:03:7a:
7f:2d:88:2e:b1:75:cb:e2:33:9a:15:61:31:0f:3b:
86:1d:9e:7e:21:48:d6:b1:2f:a0:7d:09:ad:07:c6:
b3:30:cb:0b:31:75:df:2f:ed:49:e2:95:e0:c0:1e:
e9:4b:73:43:95:73:bc:90:35:fc:84:8c:8d:b4:8d:
e4:bb:bb:f8:3c:5f:d1:e1:01:3a:6a:d1:62:af:3c:
84:e8:de:df:09:53:08:92:6b:04:74:a4:b9:e6:36:
06:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:32:C5:F1:EE:26:FF:37:59:3E:F0:62:54:9A:20:42:2F:6F:F0:D5
X509v3 Authority Key Identifier:
keyid:C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/OTLF8e4m_zdZPvBiVJogQi9v8NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/wGOG8UWOpiU7G1yj-x8TXFjLMxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c18::/48
2a14:14c0::/48
Signature Algorithm: sha256WithRSAEncryption
57:f8:cb:6e:79:cf:e6:be:4b:06:04:8a:26:36:ad:18:be:a8:
22:46:4a:17:87:7f:a2:db:84:db:26:b0:a9:37:ce:bf:58:b7:
6c:bb:6e:42:5e:bb:b6:58:46:f6:ff:68:63:77:b9:46:52:96:
34:e3:ee:72:0f:ff:8c:66:db:70:c6:0d:6b:5b:34:d6:30:56:
f2:a6:91:cb:3a:bd:ef:45:d7:8f:bb:7c:e2:1c:41:e4:5d:95:
59:08:49:e9:e5:2c:4b:33:23:91:10:f1:42:6f:40:7c:ea:e9:
26:58:52:30:77:f7:c8:04:4e:64:36:4b:1e:ea:cd:e9:3a:5f:
5f:51:fc:70:a6:16:0b:93:9b:75:1e:a7:af:48:80:4b:1e:27:
fb:e7:ca:18:de:5a:d3:17:a7:62:97:ff:af:4a:f5:f3:6c:d0:
4b:c4:cf:8f:2a:c7:97:84:b7:ac:40:7d:23:e8:cc:c8:4e:de:
78:ef:37:7e:29:06:36:b1:30:e8:12:60:2e:bd:b1:22:63:d3:
5c:b7:a4:e2:cf:e6:a3:f4:47:6e:d1:a0:be:3f:44:a9:c4:1e:
c1:a8:f8:fb:74:ce:70:e7:be:47:6c:28:d7:38:9c:0e:79:53:
da:c1:d3:06:05:60:2d:4a:00:b8:38:ba:da:cf:27:52:81:00:
51:4e:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org