Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/f2uKHDoC0Y2PVkM4okUjmtRXGHw.roa
File: f2uKHDoC0Y2PVkM4okUjmtRXGHw.roa (raw, json)
Hash identifier: ma6zIPD7tdiquiA0ZnjFZu+iSdshZKiWCnX5PQYpGoQ=
Subject key identifier: 7F:6B:8A:1C:3A:02:D1:8D:8F:56:43:38:A2:45:23:9A:D4:57:18:7C
Certificate issuer: /CN=74fc64a06ee6ae25c2d23d6255ed2542bf51d8ae
Certificate serial: 01856C4A583F1BFF72FDB00B067FD0CF64F6
Authority key identifier: 74:FC:64:A0:6E:E6:AE:25:C2:D2:3D:62:55:ED:25:42:BF:51:D8:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPxkoG7mriXC0j1iVe0lQr9R2K4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/f2uKHDoC0Y2PVkM4okUjmtRXGHw.roa
Signing time: Sun 01 Jan 2023 07:44:49 +0000
ROA not before: Sun 01 Jan 2023 07:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 2a12:1280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:58:3f:1b:ff:72:fd:b0:0b:06:7f:d0:cf:64:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fc64a06ee6ae25c2d23d6255ed2542bf51d8ae
Validity
Not Before: Jan 1 07:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f6b8a1c3a02d18d8f564338a245239ad457187c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:14:ea:c4:d3:34:2c:9c:bb:bc:8a:61:2c:
03:f7:1d:f3:7c:80:fb:b2:d4:40:39:47:4c:0b:ae:
f0:b5:a4:da:39:67:71:08:7e:90:c9:a5:9e:f6:c6:
5b:91:62:e2:b8:97:51:4d:60:7b:45:c8:bc:79:96:
35:f1:5b:6e:b4:08:54:d8:7a:20:18:ee:1d:6d:f9:
fd:68:41:b6:2e:bf:29:7c:70:b4:ae:b4:31:6b:b8:
00:65:bf:c8:4f:93:7a:9e:fb:57:d4:16:54:91:b6:
55:bd:66:f6:ff:df:dd:bf:b0:6e:1e:95:95:14:d0:
9c:e8:03:1e:aa:9d:fa:03:8c:f0:3b:66:2d:88:f4:
29:b2:96:6d:75:2a:9a:00:7b:70:46:ee:49:28:d2:
a9:8a:78:f7:c6:14:65:2a:1a:7f:d5:64:12:47:59:
ae:a0:4e:bb:c7:27:eb:e6:dd:76:c1:1e:6b:9f:95:
1f:af:a9:24:79:0f:0a:99:02:18:f2:8f:b8:88:1e:
65:0a:c1:1b:58:11:66:21:ac:cb:ab:c7:aa:9b:e2:
e8:20:16:3e:1a:06:40:36:e5:04:f7:c7:e9:23:18:
30:1e:9e:79:bf:dc:68:2c:a0:ff:28:eb:63:80:48:
43:bb:12:e3:44:aa:73:06:59:95:75:29:d6:6b:f4:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:8A:1C:3A:02:D1:8D:8F:56:43:38:A2:45:23:9A:D4:57:18:7C
X509v3 Authority Key Identifier:
keyid:74:FC:64:A0:6E:E6:AE:25:C2:D2:3D:62:55:ED:25:42:BF:51:D8:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPxkoG7mriXC0j1iVe0lQr9R2K4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/f2uKHDoC0Y2PVkM4okUjmtRXGHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7f55fd-df97-4564-9a4a-f5138d5d753f/1/dPxkoG7mriXC0j1iVe0lQr9R2K4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1280::/29
Signature Algorithm: sha256WithRSAEncryption
a1:0a:43:05:40:47:f7:db:d6:8f:0e:1f:4b:62:c0:90:f4:57:
ba:56:aa:d1:96:20:d8:08:92:35:0b:14:8b:45:4c:90:e2:33:
8b:57:fa:97:5f:e8:65:b2:ee:34:f9:bf:7d:b6:0d:8d:6a:4c:
64:e5:ae:e3:6a:37:65:c4:cf:c0:23:49:d2:cc:bb:de:98:c2:
d1:44:de:8a:4f:63:31:bd:e1:34:7c:63:6a:bd:6f:5a:b7:0c:
ed:52:26:cb:c0:13:76:04:e1:e9:17:d8:53:62:f6:9b:ca:97:
fc:3c:d3:0f:49:b7:72:9c:24:43:61:e9:4f:07:8f:05:21:3a:
5e:3e:1d:df:c1:df:15:7a:21:19:9e:b6:f4:29:26:75:e8:b2:
7b:a5:02:f7:b9:36:9b:ad:51:0d:c5:a7:91:79:ac:af:b4:0d:
5d:11:13:0c:5d:48:64:8f:fb:66:f3:f0:07:3a:76:4a:11:ed:
67:96:bb:c2:81:b7:e3:74:4c:26:7c:12:41:15:b5:f5:bd:a7:
a7:87:54:d4:57:a3:75:8c:b8:63:aa:29:c2:8b:83:22:36:38:
b9:b4:bb:2d:7c:41:4f:2c:17:fc:53:de:2f:b6:a7:36:6c:e9:
3b:9a:3e:26:e1:9f:44:1e:86:0e:6c:34:7c:48:87:26:45:aa:
4f:a5:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org