Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/uDbwPKsUEEtdXZ5h33cHhr8dVSM.roa
File: uDbwPKsUEEtdXZ5h33cHhr8dVSM.roa (raw, json)
Hash identifier: jkLGsjMSiyJdAlJpGusTvD/+yYEjf/W8V7onNGGNDCk=
Subject key identifier: B8:36:F0:3C:AB:14:10:4B:5D:5D:9E:61:DF:77:07:86:BF:1D:55:23
Certificate issuer: /CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Certificate serial: 018237110BD94B789B8F617E4212AEC67305
Authority key identifier: 23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/uDbwPKsUEEtdXZ5h33cHhr8dVSM.roa
Signing time: Mon 25 Jul 2022 20:34:00 +0000
ROA not before: Mon 25 Jul 2022 20:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:4600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:11:0b:d9:4b:78:9b:8f:61:7e:42:12:ae:c6:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b78d77a05449b1756083d03f1fd2373a6125a6
Validity
Not Before: Jul 25 20:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b836f03cab14104b5d5d9e61df770786bf1d5523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:c5:4f:77:ee:df:fb:a5:e3:43:68:0d:b4:
07:0f:c8:e2:ec:31:a9:34:8a:b7:7e:2f:d9:6d:0d:
3b:99:80:98:58:f0:f0:a9:5f:71:be:e8:58:79:05:
f6:66:07:b0:11:5a:82:37:26:82:4e:71:cd:a4:6d:
75:00:9b:1a:ba:6d:e7:c7:58:7e:36:73:34:7d:fb:
97:ce:78:e1:82:74:6f:ca:37:19:4f:fc:13:37:58:
a3:9d:19:01:76:09:e4:30:8d:d9:79:48:58:99:16:
df:30:3f:90:a1:23:08:aa:98:b9:b2:c0:b6:38:77:
b3:b3:25:80:4c:91:1c:db:42:be:ed:41:fe:2b:c4:
42:6a:74:df:6d:28:93:12:3c:50:36:59:0d:49:ce:
ac:ed:56:45:56:77:e3:80:a0:93:e8:c5:94:ad:45:
bd:16:72:c5:b9:83:a8:9a:56:48:de:71:69:a9:e3:
09:5c:f0:dc:c9:f9:d6:24:2f:6b:dc:5c:0e:8d:65:
e9:68:4f:81:7a:71:5b:76:db:ba:16:7c:10:1d:26:
6d:67:62:b8:d1:b7:f8:67:b6:d2:c7:a3:35:6e:26:
31:f5:59:a2:be:c3:88:09:20:6c:77:eb:e4:d8:8f:
2d:10:76:50:c8:e2:10:e7:f7:e5:e7:e9:2c:0f:08:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:F0:3C:AB:14:10:4B:5D:5D:9E:61:DF:77:07:86:BF:1D:55:23
X509v3 Authority Key Identifier:
keyid:23:B7:8D:77:A0:54:49:B1:75:60:83:D0:3F:1F:D2:37:3A:61:25:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7eNd6BUSbF1YIPQPx_SNzphJaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/uDbwPKsUEEtdXZ5h33cHhr8dVSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/177564-039a-4742-8301-6cb686328240/1/I7eNd6BUSbF1YIPQPx_SNzphJaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4600::/29
Signature Algorithm: sha256WithRSAEncryption
6d:5d:07:94:d9:34:c3:95:06:35:78:60:41:40:84:72:ff:f1:
84:a8:c9:bf:f0:4b:44:a5:8b:2b:3e:36:ba:1e:8f:56:48:19:
26:85:9d:c5:b1:47:87:4b:53:ba:a0:c2:79:92:28:2e:55:33:
1e:5f:d2:bc:ec:4e:00:96:b6:54:b3:c0:c2:db:95:a5:33:d1:
9f:cd:ce:b2:7f:b7:cf:44:1d:63:97:4d:36:06:a5:3a:10:3d:
d9:60:fc:57:bf:28:ec:30:55:db:d0:16:e3:82:e4:96:50:af:
c4:24:55:d3:d3:d7:f5:28:97:84:3d:1c:e6:e6:d0:b1:18:9f:
71:eb:67:53:07:f2:2b:24:34:44:42:95:14:3b:f3:1e:b6:92:
40:c5:c3:9f:29:d5:ab:f0:4d:78:41:b4:7d:46:84:5b:8a:f4:
83:53:66:44:1d:00:ac:8b:3d:0b:ad:c1:c3:4e:81:55:f8:76:
a8:2b:20:eb:fe:19:08:6c:1e:b1:35:59:7c:a8:76:4f:d1:85:
43:eb:63:ca:3b:8f:9a:2a:13:6e:26:74:7e:bd:20:cf:85:21:
f6:35:eb:f5:4d:4c:8b:6c:be:55:29:6a:e9:4b:dc:f1:fb:16:
04:21:e0:b1:49:9f:b2:89:ec:9a:e1:1a:42:a5:95:43:4e:bc:
28:89:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:06 2024 by rpki-client on console-ams.rpki-client.org