Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/JPmVFZTL-N8N8Y9vRXd0UoNvmWU.roa
File: JPmVFZTL-N8N8Y9vRXd0UoNvmWU.roa (raw, json)
Hash identifier: v/L1/hQ1yC9RCGDT3DjR567p/AxPzMYVF380j8dUQ0s=
Subject key identifier: 24:F9:95:15:94:CB:F8:DF:0D:F1:8F:6F:45:77:74:52:83:6F:99:65
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 018784A0C51C223DC64E61919594F5786788
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/JPmVFZTL-N8N8Y9vRXd0UoNvmWU.roa
Signing time: Sat 15 Apr 2023 11:15:41 +0000
ROA not before: Sat 15 Apr 2023 11:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a11:4380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:a0:c5:1c:22:3d:c6:4e:61:91:95:94:f5:78:67:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Apr 15 11:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24f9951594cbf8df0df18f6f45777452836f9965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:b9:7d:76:6e:cc:89:cc:ab:e8:a6:52:c3:
a8:27:30:18:19:75:8a:1d:bb:3a:b3:3d:18:51:22:
36:f6:28:d0:19:09:92:a5:07:67:ed:1c:26:9d:10:
3e:83:b5:5e:9a:0c:11:73:b8:0b:b7:e8:d9:cd:68:
40:00:73:43:ff:3a:a6:ed:13:e5:fe:53:0e:4b:8b:
a6:77:1c:cf:be:1f:99:6a:16:29:63:36:21:7f:e6:
74:9b:de:1b:0f:5c:28:90:fa:f4:0d:78:46:4a:80:
13:ad:47:9f:48:8f:e0:9e:2b:1c:41:6b:56:9f:57:
61:d6:f8:03:5b:de:47:90:c4:b5:0c:ee:5b:7b:34:
28:e1:21:f7:00:5c:57:d7:d7:b8:17:9c:48:cf:70:
13:45:54:5d:a7:43:7c:d9:e4:ac:6a:f8:3b:29:ec:
77:28:a7:61:d7:41:24:c6:e1:91:19:c5:67:db:aa:
7b:19:4b:d7:ab:da:65:dc:33:ad:02:65:61:c9:3f:
65:6f:2d:8c:31:80:84:c3:7b:1e:34:d0:8a:d0:e5:
6b:3d:ee:07:f1:2f:fe:a1:f6:8f:cf:04:f3:7d:11:
6a:ee:36:e4:91:98:f7:6d:42:9b:49:a2:a8:cc:4d:
15:d2:64:84:0e:05:72:05:da:cf:18:45:45:bb:04:
72:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:95:15:94:CB:F8:DF:0D:F1:8F:6F:45:77:74:52:83:6F:99:65
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/JPmVFZTL-N8N8Y9vRXd0UoNvmWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4380::/29
Signature Algorithm: sha256WithRSAEncryption
c4:ba:97:b6:28:ac:c5:b1:a8:6b:0c:20:e9:aa:40:40:9d:13:
36:10:41:48:96:ee:77:87:80:d9:30:af:8a:9b:13:3f:c5:65:
ef:a1:d3:fd:d9:ee:2f:14:e0:db:59:1b:8c:19:d9:94:52:c5:
4f:74:d1:da:2d:09:0d:79:11:4f:04:bf:e2:4d:8b:d6:e3:1c:
e2:22:67:6f:fc:40:31:8b:fa:1f:e1:b1:ed:bb:38:1f:8d:c4:
28:b4:7f:7d:ec:36:87:4a:ac:89:01:9a:cc:96:e8:58:2f:3d:
02:68:9b:67:2d:5f:ab:9c:cf:e0:5b:f4:e8:bc:18:35:a2:d8:
5c:2f:ae:34:90:eb:94:fd:82:15:5a:9e:8b:cc:34:10:7b:a6:
0d:f6:67:9b:72:ce:da:22:9e:41:9b:e3:35:9e:47:44:96:3c:
1e:28:a6:b6:2a:dc:c7:e4:4d:31:8f:e2:c1:fe:17:d4:80:cb:
18:4e:76:2a:1f:7a:7d:cb:6a:46:da:a3:c6:a8:b7:fb:87:46:
48:99:d4:e2:ec:4e:46:18:4e:5d:72:63:36:6c:9d:f0:68:c6:
18:58:f5:eb:17:36:55:d7:c6:d7:01:86:9b:a3:e5:6c:cd:f1:
90:7c:06:72:1b:22:50:30:c7:ae:33:dd:bd:f4:e7:be:45:a5:
78:39:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:02 2024 by rpki-client on console-ams.rpki-client.org