Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa
File: ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa (raw, json)
Hash identifier: An6NxEH4Gy1tdsLpWghymCBFCDnYQxT94KoiHT8wnhM=
Subject key identifier: 65:3B:0D:0B:95:44:85:99:9F:D4:55:A1:0C:CC:F6:DD:2E:14:35:2C
Certificate issuer: /CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
Certificate serial: 01856C6F037456B2CE9B705D8C7C98DABF78
Authority key identifier: A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa
Signing time: Sun 01 Jan 2023 08:24:52 +0000
ROA not before: Sun 01 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39080
IP address blocks: 2a0d:f47::/32 maxlen: 128
2a0d:f40::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:03:74:56:b2:ce:9b:70:5d:8c:7c:98:da:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
Validity
Not Before: Jan 1 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=653b0d0b954485999fd455a10cccf6dd2e14352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:ea:c2:48:0d:24:7d:81:a5:19:15:2c:93:
cc:33:7c:80:f3:c7:d4:b3:ac:af:ca:ec:78:24:ed:
86:02:50:91:85:98:1f:1f:dc:68:c5:3f:2e:88:b8:
6b:f8:13:0f:69:d6:6b:bf:ab:b2:9f:18:0a:56:f5:
30:d4:bc:6f:e9:95:8b:a4:0a:0a:92:5c:a2:c5:b7:
08:09:dc:d6:03:98:dd:af:a5:3d:0a:93:94:e2:66:
db:48:fa:11:8d:ec:e1:a7:ce:71:84:83:83:0e:65:
d8:a7:07:3e:40:ae:44:e3:0d:b2:4e:91:3d:6a:4e:
b0:70:fb:de:bc:c0:1f:cb:ff:13:2a:a5:9f:fd:58:
29:59:df:82:1f:1f:9e:32:ef:59:d5:96:fe:98:fa:
39:4f:6f:80:26:15:f7:ff:aa:fb:f5:db:e9:a8:e1:
79:26:10:1a:73:70:38:43:5c:69:33:b5:e9:0f:fc:
24:92:29:8b:e5:54:40:19:01:34:1e:5c:e1:47:de:
4a:b9:5a:1d:d5:c9:69:23:6e:ad:4c:e9:90:27:f9:
52:52:ab:1a:54:73:5d:26:ad:4f:5a:d3:13:06:93:
df:d8:a1:5e:c5:c7:4e:6b:e5:c6:b5:86:6b:5b:da:
f4:c0:4a:a0:a5:cb:88:49:5d:12:84:70:0a:70:6a:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3B:0D:0B:95:44:85:99:9F:D4:55:A1:0C:CC:F6:DD:2E:14:35:2C
X509v3 Authority Key Identifier:
keyid:A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/ZTsNC5VEhZmf1FWhDMz23S4UNSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/pPCloPFpOpdC1_qvT4_RfoHMKrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f40::/32
2a0d:f47::/32
Signature Algorithm: sha256WithRSAEncryption
07:9d:a1:f1:b1:ca:14:61:08:82:e8:bc:57:aa:ca:d7:66:76:
5b:1b:dd:6a:39:8a:b2:c8:93:4e:85:56:a3:48:7a:4e:12:86:
71:0f:50:a6:75:d6:b7:e0:c9:11:71:4c:af:ef:b9:b0:fc:ff:
08:60:5d:3f:e7:ac:8f:70:8f:5d:58:85:16:9d:e0:10:4e:b3:
a5:b7:0d:43:35:f9:07:cc:11:c7:a1:c6:91:15:c9:53:91:8d:
a3:9b:f6:6a:c6:7c:88:5b:53:9a:bb:e5:d4:53:2c:26:1e:d4:
5b:52:eb:6c:a9:88:2f:76:fa:14:f5:df:52:10:fd:2c:42:1c:
10:5b:db:ec:ea:cd:00:ea:ed:f6:66:99:08:18:64:fd:71:2e:
9a:f2:eb:63:7f:6b:c3:0d:ff:fc:62:49:f5:34:00:2c:26:2d:
64:67:cd:2f:a0:a0:4b:ea:df:81:1b:91:2b:58:9f:22:7b:7f:
f3:f3:36:b1:91:07:88:ce:b8:44:9f:92:aa:6c:a9:4e:73:50:
0a:1a:00:a1:f0:c4:0a:c6:5a:91:85:7e:9d:7c:3f:3a:2c:c0:
d2:78:23:03:dd:cb:ce:e9:67:ad:06:0a:10:f1:33:73:1e:1c:
71:11:8f:e6:6d:67:ae:94:36:65:b2:8a:dc:37:ad:86:67:fa:
4c:52:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:20 2024 by rpki-client on console-ams.rpki-client.org