Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/p1p0uOueazAwJLEOwymsfC-QHoE.roa
File: p1p0uOueazAwJLEOwymsfC-QHoE.roa (raw, json)
Hash identifier: og4JhBrLhdeX8yWXtS798i91L1hF8eASq+Fi0q7XcyE=
Subject key identifier: A7:5A:74:B8:EB:9E:6B:30:30:24:B1:0E:C3:29:AC:7C:2F:90:1E:81
Certificate issuer: /CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Certificate serial: 01856F5DFC1F0765B9430EC57AF502FEB24E
Authority key identifier: 90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/p1p0uOueazAwJLEOwymsfC-QHoE.roa
Signing time: Sun 01 Jan 2023 22:05:08 +0000
ROA not before: Sun 01 Jan 2023 22:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35407
IP address blocks: 2001:678:b90::/48 maxlen: 48
2001:678:b88::/48 maxlen: 48
2001:678:b80::/48 maxlen: 48
2001:678:d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:fc:1f:07:65:b9:43:0e:c5:7a:f5:02:fe:b2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b608549223928c69e7dd3fc1258da7a4cba7
Validity
Not Before: Jan 1 22:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75a74b8eb9e6b303024b10ec329ac7c2f901e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:9e:72:11:99:1b:46:48:ac:c4:c6:98:83:
16:be:9f:79:13:32:ec:c7:27:fe:8b:1d:e2:0a:99:
37:2f:78:c3:02:05:40:45:4f:df:11:0b:ef:51:ab:
86:e0:c0:4d:1b:59:ae:9d:3d:14:d3:54:6a:aa:fe:
fe:b9:e7:b4:f3:f5:e0:d6:08:42:89:b5:bf:1e:ff:
bb:71:55:b1:d6:2f:6b:b3:2b:f0:1c:37:2d:74:fe:
58:71:de:0c:dc:6e:73:f6:a0:fd:f9:14:16:76:d0:
99:5b:ec:94:0a:bd:82:5d:bc:df:08:35:2f:c7:f5:
b6:10:57:51:68:42:05:6b:85:90:18:e9:3c:99:c8:
28:fc:87:f1:85:1f:d1:15:a2:74:77:7c:e5:d1:09:
d4:c3:54:eb:3f:9d:c4:34:61:b8:99:b7:fd:e8:0a:
8c:fa:87:75:24:26:c4:9d:ee:f4:3b:dc:85:1e:21:
d0:2a:91:91:5a:96:67:a8:87:5a:bb:bb:0a:cf:e8:
e9:3b:24:23:04:c7:9d:67:da:10:39:eb:8f:c6:20:
9b:a3:93:c9:77:bf:00:28:79:75:47:36:70:89:b1:
ee:c5:84:ef:0b:33:af:54:91:d0:2e:c4:31:ba:8e:
df:fa:2a:5f:e5:75:b8:84:ca:4b:47:51:65:24:e5:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:74:B8:EB:9E:6B:30:30:24:B1:0E:C3:29:AC:7C:2F:90:1E:81
X509v3 Authority Key Identifier:
keyid:90:64:B6:08:54:92:23:92:8C:69:E7:DD:3F:C1:25:8D:A7:A4:CB:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGS2CFSSI5KMaefdP8Eljaeky6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/p1p0uOueazAwJLEOwymsfC-QHoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/038fe8-0055-4e23-bcf7-06799803365c/1/kGS2CFSSI5KMaefdP8Eljaeky6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d8::/48
2001:678:b80::/48
2001:678:b88::/48
2001:678:b90::/48
Signature Algorithm: sha256WithRSAEncryption
71:97:3a:36:b5:fa:9a:dd:5d:85:b1:b0:ac:fc:48:e2:67:50:
39:c1:a8:ba:58:b2:bc:3a:ce:13:45:61:4e:7b:13:be:df:38:
a9:02:42:82:38:3a:79:a5:73:a7:a4:95:12:02:7b:73:22:9b:
92:63:5f:29:f9:56:7a:77:21:b3:77:2c:3f:05:9a:e3:89:5d:
10:a0:76:ed:45:36:b1:92:ef:f5:82:de:2f:a6:c6:73:77:b7:
3e:a5:7e:67:67:47:e9:f7:c8:7a:49:e6:4a:2d:a6:ad:2a:60:
65:81:33:87:12:81:80:29:33:55:8b:b3:8e:c2:bd:89:7c:b8:
06:87:28:f9:df:a6:82:65:f4:f8:70:0c:5a:ce:8a:89:9a:f7:
f3:5d:4f:e5:54:91:f8:4c:99:36:23:4d:c6:f0:e1:a6:3c:66:
15:94:5a:72:db:f9:4a:fa:28:16:cf:36:f3:6e:ba:cb:fe:6e:
c8:dc:a3:e0:39:35:3f:db:a7:f5:52:f2:f7:95:c7:28:ac:01:
eb:ca:25:72:d2:c4:b6:97:80:97:8e:70:5d:7d:a6:49:d3:ce:
68:62:f2:ea:ba:6b:dc:56:a5:5a:18:5c:c1:25:0b:33:71:1f:
0f:37:c7:1c:5e:81:6e:ed:4c:a8:92:4d:6e:07:9a:d3:08:15:
6b:5b:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:28 2024 by rpki-client on console-fra.rpki-client.org