Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/n37zMfSsnQJfdwhS79rMT-_4Zfs.roa
File: n37zMfSsnQJfdwhS79rMT-_4Zfs.roa (raw, json)
Hash identifier: DtQfWuXQkFfW6DvvReSKeu74x40RI04DreBiwZjR70s=
Subject key identifier: 9F:7E:F3:31:F4:AC:9D:02:5F:77:08:52:EF:DA:CC:4F:EF:F8:65:FB
Certificate issuer: /CN=451cfb71217c2424d1b4844ff4504e873cbfe33e
Certificate serial: 01856E26915344E390B0A4E8048C5447E9D2
Authority key identifier: 45:1C:FB:71:21:7C:24:24:D1:B4:84:4F:F4:50:4E:87:3C:BF:E3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRz7cSF8JCTRtIRP9FBOhzy_4z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/n37zMfSsnQJfdwhS79rMT-_4Zfs.roa
Signing time: Sun 01 Jan 2023 16:24:59 +0000
ROA not before: Sun 01 Jan 2023 16:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203859
IP address blocks: 2001:67c:2ec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:91:53:44:e3:90:b0:a4:e8:04:8c:54:47:e9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451cfb71217c2424d1b4844ff4504e873cbfe33e
Validity
Not Before: Jan 1 16:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f7ef331f4ac9d025f770852efdacc4feff865fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:cb:21:9e:05:ca:f3:0a:57:86:79:00:b4:
5c:e3:7f:f3:1b:25:d4:c4:41:50:6a:fd:1c:83:79:
49:ae:52:ba:20:ad:1c:38:b3:93:bb:8f:91:c3:f6:
71:40:00:ce:9b:f8:3c:2c:59:34:8c:4a:6c:b6:c2:
a6:f9:3a:d9:7d:0c:2e:9b:35:d9:25:82:be:9c:72:
f0:57:fd:f4:1c:d2:51:a3:a2:47:c9:93:e5:76:53:
a1:e8:2a:ed:3a:f2:94:95:47:14:e6:bb:e3:a3:e2:
19:a4:84:c1:f6:ec:e3:49:f1:91:d1:c1:ab:a0:41:
c8:1b:24:20:e6:cb:dc:94:45:0a:b4:1d:1f:aa:c8:
61:02:7c:05:eb:aa:f4:e5:7a:f3:68:c4:2d:63:60:
6b:c2:bb:e8:66:ec:dd:57:7c:ae:99:11:8c:c8:ac:
73:71:07:df:54:ca:f1:dc:7c:fd:e7:ff:f1:a3:56:
d5:a2:61:a2:f6:2e:0e:b5:82:5a:94:0c:1b:86:6a:
0b:16:34:29:9d:ff:47:c2:1f:d8:eb:ef:ff:ba:28:
b0:08:c3:64:92:29:ce:0b:c5:7c:5a:11:fb:66:68:
f2:8c:d2:fc:da:50:88:2b:33:d6:50:fd:98:47:f6:
c2:0c:53:6b:5b:8d:57:3c:a5:cf:81:43:0a:3e:7a:
3a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:F3:31:F4:AC:9D:02:5F:77:08:52:EF:DA:CC:4F:EF:F8:65:FB
X509v3 Authority Key Identifier:
keyid:45:1C:FB:71:21:7C:24:24:D1:B4:84:4F:F4:50:4E:87:3C:BF:E3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRz7cSF8JCTRtIRP9FBOhzy_4z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/n37zMfSsnQJfdwhS79rMT-_4Zfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/RRz7cSF8JCTRtIRP9FBOhzy_4z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2ec0::/48
Signature Algorithm: sha256WithRSAEncryption
91:ef:f2:23:47:84:00:88:d5:97:9f:90:bc:ee:dd:f4:f8:8a:
15:c6:ce:88:12:dc:12:da:d2:32:ff:b9:7f:f6:7f:58:b1:b9:
dc:65:1c:8b:48:d4:eb:0f:b0:8d:ae:c2:36:7c:ee:ae:5b:20:
2b:69:4f:27:50:1a:98:1d:a4:a7:fe:ce:cc:75:e9:ed:0e:39:
ff:56:d4:8c:72:bb:f6:89:77:b6:a9:4e:49:9e:ff:85:eb:f8:
18:b0:07:a2:9f:3c:9b:d3:c1:3c:a8:62:d8:fa:21:5f:cb:f0:
4b:51:12:a0:fb:a1:69:6f:df:a5:14:65:36:c0:4d:a6:1e:0c:
10:bd:f8:19:9f:84:db:93:00:2e:fe:a7:80:6b:ba:0c:ce:4e:
f1:37:80:65:98:dd:4a:2c:91:46:6c:ff:bd:00:be:db:54:6e:
33:21:69:59:82:27:f0:dc:b3:70:2a:ff:1e:ba:d8:3b:29:e1:
72:aa:8c:af:a5:06:f2:06:9e:ef:09:c8:e4:18:18:8b:67:9e:
7c:b6:63:cd:38:ec:5e:af:34:22:ad:c2:e7:12:35:f8:6a:87:
98:67:63:da:fb:5b:41:ac:cf:e3:78:6c:7d:7d:b4:cf:6e:46:
d8:16:c1:7e:42:18:4a:f2:86:96:5c:51:52:51:8a:c8:3f:a7:
76:65:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:10 2024 by rpki-client on console-fra.rpki-client.org