Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/cAiSrUPTrILgsqiGqGMK9FmNsVE.roa
File: cAiSrUPTrILgsqiGqGMK9FmNsVE.roa (raw, json)
Hash identifier: 5vYkRRvjUjRP3jyckHLSw3H63lXA8bQXHgPKq/trG64=
Subject key identifier: 70:08:92:AD:43:D3:AC:82:E0:B2:A8:86:A8:63:0A:F4:59:8D:B1:51
Certificate issuer: /CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Certificate serial: 018536535E6008941BCB21255E4F57456BA8
Authority key identifier: 83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/cAiSrUPTrILgsqiGqGMK9FmNsVE.roa
Signing time: Wed 21 Dec 2022 20:15:11 +0000
ROA not before: Wed 21 Dec 2022 20:15:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25369
IP address blocks: 2a09:6901::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:53:5e:60:08:94:1b:cb:21:25:5e:4f:57:45:6b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8331a361bdc51d7aacadce302f1257d5c3f35ae1
Validity
Not Before: Dec 21 20:15:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=700892ad43d3ac82e0b2a886a8630af4598db151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:45:62:fc:58:0a:96:5e:30:bd:1c:d9:5c:
2e:c1:bd:8f:2e:64:17:26:da:b3:df:ce:2c:68:ba:
aa:ae:ea:72:64:de:c3:59:7a:04:e9:c7:9c:68:30:
36:30:d7:26:a8:8f:8c:e8:4a:91:6d:ab:5f:7c:92:
2a:40:6e:20:ea:a4:4d:07:d1:2d:96:90:4e:21:19:
75:6d:d3:d6:06:f6:2b:41:2b:c2:b8:84:4d:d0:9a:
9d:5e:35:03:1f:9d:17:dc:dd:cf:5f:0b:59:48:49:
19:36:cc:0a:35:09:9d:da:9b:6d:28:40:6c:cc:7e:
a9:28:9a:67:cd:60:8a:de:fd:c5:84:48:77:c1:48:
db:29:5c:01:70:4c:14:7c:7d:7b:b4:8b:40:4c:f8:
70:52:f9:ca:a0:98:b2:bb:ed:67:c8:4e:10:3a:0b:
ad:ee:a6:01:de:6f:94:64:d9:ac:77:96:fc:90:cb:
c0:5e:06:7a:5a:99:35:99:21:06:8d:6f:67:3d:c5:
e9:a4:b1:0f:38:b0:6f:61:63:61:00:f6:89:75:38:
4f:3f:ee:e9:63:f4:e1:72:6b:96:fd:9e:9e:23:54:
0f:f9:e9:5c:de:77:98:bc:2e:d9:3a:f3:df:a0:2e:
fb:38:29:a7:34:d2:55:dc:4d:ef:e9:42:98:59:d4:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:92:AD:43:D3:AC:82:E0:B2:A8:86:A8:63:0A:F4:59:8D:B1:51
X509v3 Authority Key Identifier:
keyid:83:31:A3:61:BD:C5:1D:7A:AC:AD:CE:30:2F:12:57:D5:C3:F3:5A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzGjYb3FHXqsrc4wLxJX1cPzWuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/cAiSrUPTrILgsqiGqGMK9FmNsVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d0b751-8e26-4066-8dfe-245cc8163174/1/gzGjYb3FHXqsrc4wLxJX1cPzWuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6901::/32
Signature Algorithm: sha256WithRSAEncryption
05:80:64:64:5c:f9:b4:a8:dc:22:73:3b:b1:63:02:10:10:ce:
44:28:ac:f7:00:be:37:35:67:a7:fc:56:fc:78:4d:40:70:6a:
d4:97:28:82:78:4e:81:f3:5b:e2:44:00:5c:b7:aa:93:a5:cb:
19:b2:7f:e9:1f:1b:8b:35:43:9d:b5:71:e4:dd:53:5b:42:37:
71:96:a8:99:fd:3a:d9:77:7b:89:ed:6c:d7:1a:32:df:dd:bf:
d8:9f:b1:b1:ad:58:4f:49:7a:7d:1b:0a:e2:79:bd:9b:9b:47:
2c:85:74:0b:77:81:38:74:fe:4b:a4:50:ff:8f:3b:d2:06:1d:
26:10:32:8a:b8:07:3e:3c:a3:14:be:90:09:05:6d:5c:57:06:
d6:d6:d9:92:88:1b:25:0e:f6:cf:d7:58:ff:7d:cc:e5:a9:ac:
5e:c5:5f:dc:82:11:ca:0d:fe:c5:26:11:68:6f:29:6c:bd:bd:
fd:05:1d:27:6b:ae:e1:e4:aa:df:fb:88:97:57:b5:a3:7a:32:
ba:83:14:79:8c:64:7e:d8:02:f5:b6:46:ed:a9:60:29:c6:b4:
70:e9:19:1c:53:05:f5:90:0c:6f:af:0b:f9:65:f2:11:fd:a4:
03:2e:48:8d:fa:cf:c1:74:88:9a:7b:85:c9:49:26:a0:99:25:
f6:18:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:57 2024 by rpki-client on console-fra.rpki-client.org