Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/AtHSZf0jNQU6pKeeBleXMs5qZmI.roa
File: AtHSZf0jNQU6pKeeBleXMs5qZmI.roa (raw, json)
Hash identifier: hVrAuRps/eR8Ua1F+yCVEDHrBWSWXIEPYAOPDhNuczQ=
Subject key identifier: 02:D1:D2:65:FD:23:35:05:3A:A4:A7:9E:06:57:97:32:CE:6A:66:62
Certificate issuer: /CN=5afc91718462e5de210097413199d6ce1365776c
Certificate serial: 01856F391F46ED5CC98E3CE6F20DD4FE8CEF
Authority key identifier: 5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/AtHSZf0jNQU6pKeeBleXMs5qZmI.roa
Signing time: Sun 01 Jan 2023 21:24:52 +0000
ROA not before: Sun 01 Jan 2023 21:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:6800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:1f:46:ed:5c:c9:8e:3c:e6:f2:0d:d4:fe:8c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5afc91718462e5de210097413199d6ce1365776c
Validity
Not Before: Jan 1 21:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02d1d265fd2335053aa4a79e06579732ce6a6662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cb:d6:43:14:44:33:ec:1d:ac:5c:5e:28:81:
41:91:cb:65:1b:26:47:c2:98:ff:a7:1c:0e:a0:fc:
86:2d:f3:7d:74:11:d2:4f:cd:da:1d:11:41:5f:03:
5c:f6:f2:68:e0:da:17:f5:28:9b:14:32:60:d6:39:
9c:e7:6b:ab:98:d2:d3:04:ad:d5:cf:56:e4:8b:5f:
e5:5c:0f:62:d5:9c:77:fe:89:be:0b:8a:65:18:d6:
1c:18:e5:cd:90:23:8d:bd:10:87:43:b0:e9:97:ba:
dc:5c:52:33:91:c8:2b:54:45:54:39:bd:c5:a3:4a:
b8:45:41:9e:d7:14:db:aa:ce:32:e3:34:e7:5e:8f:
a6:c1:2c:7e:b1:41:ec:e0:51:c3:b0:39:87:c9:94:
8b:ac:aa:73:51:87:87:de:38:d5:fb:d9:6e:e1:f2:
7c:25:0d:99:f1:1c:dc:4c:b6:74:43:2a:e5:c7:c0:
49:2d:39:3b:20:c4:46:70:1c:71:c6:1b:88:32:bb:
6a:c6:33:2b:aa:25:75:89:9a:7d:36:a6:2e:c3:cb:
f7:2d:c6:22:7f:d8:c4:64:fc:98:c5:04:20:32:bb:
3c:07:f5:74:d9:0d:63:a4:85:e3:ca:08:a5:57:02:
40:e8:43:46:6a:79:0f:e9:18:3c:af:41:5b:b4:8c:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:D2:65:FD:23:35:05:3A:A4:A7:9E:06:57:97:32:CE:6A:66:62
X509v3 Authority Key Identifier:
keyid:5A:FC:91:71:84:62:E5:DE:21:00:97:41:31:99:D6:CE:13:65:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvyRcYRi5d4hAJdBMZnWzhNld2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/AtHSZf0jNQU6pKeeBleXMs5qZmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7718fe-79a7-4eee-a729-d06d28640d08/1/WvyRcYRi5d4hAJdBMZnWzhNld2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6800::/29
Signature Algorithm: sha256WithRSAEncryption
54:05:a5:77:fd:00:36:69:d3:f0:d0:48:73:d6:a1:fc:06:dd:
98:ea:73:5f:22:f1:40:ed:de:88:fc:5e:1e:fc:4c:6d:19:db:
14:6d:23:7c:ee:62:9f:60:7a:ff:f2:33:7c:46:5e:29:1a:8f:
a9:5a:d1:cb:e0:c3:43:37:53:8b:d4:81:39:08:de:c5:26:d2:
6b:4b:4b:ab:64:7b:1f:f5:71:1d:20:8c:f7:29:de:2c:17:be:
34:81:88:41:98:94:38:2c:6a:f5:bf:de:17:a2:44:1a:a0:d3:
88:e1:95:5d:d4:13:e8:2e:91:c5:53:ee:92:48:74:ab:bb:15:
3a:02:48:53:a8:38:69:f1:60:9a:45:00:18:56:81:8d:2d:38:
76:02:66:ae:0e:ba:a9:c1:93:3d:ce:3e:a5:f9:95:56:6c:42:
6c:95:e3:fb:b5:e6:06:da:f1:5d:86:18:e5:90:c1:82:fd:a5:
c5:6c:63:1f:1e:b8:19:71:1e:27:2d:7b:24:08:52:2f:58:1b:
7c:88:ae:ce:99:21:9e:af:9a:47:56:d0:72:44:db:c2:9b:db:
5d:4d:d5:ed:7a:87:26:5f:c8:98:85:16:09:66:9d:03:c7:ee:
4f:e9:a4:26:e2:e6:58:c7:17:29:71:40:35:82:ee:e1:50:bb:
fc:c0:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:42 2024 by rpki-client on console-ams.rpki-client.org