Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/1-8uCBXuW-dKM4jzKDvsQFKoK6Ws.roa
File: 1-8uCBXuW-dKM4jzKDvsQFKoK6Ws.roa (raw, json)
Hash identifier: H/TGXsSkiT+UBlyJNDe+97qL3wnBC+2/0ehO0QogdSI=
Subject key identifier: FB:CB:82:05:7B:96:F9:D2:8C:E2:3C:CA:0E:FB:10:14:AA:0A:E9:6B
Certificate issuer: /CN=14d4a7766881a4313009b542cc284241982b9e29
Certificate serial: 0184D3598002571076E24736211A56347701
Authority key identifier: 14:D4:A7:76:68:81:A4:31:30:09:B5:42:CC:28:42:41:98:2B:9E:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNSndmiBpDEwCbVCzChCQZgrnik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/1-8uCBXuW-dKM4jzKDvsQFKoK6Ws.roa
Signing time: Fri 02 Dec 2022 14:59:28 +0000
ROA not before: Fri 02 Dec 2022 14:59:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59460
IP address blocks: 2a0d:9540:a02::/48 maxlen: 48
2a0d:9540:a01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:59:80:02:57:10:76:e2:47:36:21:1a:56:34:77:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d4a7766881a4313009b542cc284241982b9e29
Validity
Not Before: Dec 2 14:59:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbcb82057b96f9d28ce23cca0efb1014aa0ae96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:18:8b:d7:1f:c8:ba:37:31:2a:a5:23:92:
3e:ff:b5:49:52:9c:16:31:f7:aa:b0:86:ff:27:07:
54:fb:8d:e5:63:9c:e8:51:1b:6d:df:a6:a3:44:f1:
79:84:8f:98:4a:8a:8f:ba:84:e2:77:23:ac:1b:be:
a2:c6:0e:6d:21:0a:2a:07:45:1f:d7:7c:cd:c5:8d:
7e:da:c7:8a:3c:aa:43:74:30:16:b0:52:48:1d:b8:
d6:3d:fe:4e:1a:24:5e:c5:e9:06:2b:20:f0:28:94:
b5:e5:6a:54:df:9c:c3:bc:c1:b0:90:cd:96:1c:86:
df:4a:0c:2e:4b:17:b1:60:cc:f8:f2:8a:98:f3:27:
3f:2c:a8:6a:b5:de:12:ac:6c:09:36:37:e8:ba:48:
c3:b9:8e:18:d4:49:15:1a:a7:17:c2:01:70:33:8d:
f5:1b:28:d1:03:ae:de:d6:54:2e:88:22:e2:09:e3:
74:82:49:aa:c2:92:a9:ab:42:af:e7:19:40:bd:58:
8b:83:67:90:98:12:bc:29:fe:4e:e2:83:88:b5:b3:
0f:f5:31:c7:87:5a:04:44:41:e4:3f:65:21:65:f3:
dd:7d:3a:d1:be:1f:63:b2:03:5a:b9:66:e8:ee:32:
a5:c8:b2:6d:d8:0c:0f:cc:07:19:74:2b:20:73:88:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:82:05:7B:96:F9:D2:8C:E2:3C:CA:0E:FB:10:14:AA:0A:E9:6B
X509v3 Authority Key Identifier:
keyid:14:D4:A7:76:68:81:A4:31:30:09:B5:42:CC:28:42:41:98:2B:9E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNSndmiBpDEwCbVCzChCQZgrnik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/1-8uCBXuW-dKM4jzKDvsQFKoK6Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dadae6-f1dc-4a17-b2ca-39f7672c615c/1/FNSndmiBpDEwCbVCzChCQZgrnik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9540:a01::-2a0d:9540:a02:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:c8:7c:c2:2f:7c:1a:2f:2e:21:51:a2:09:bd:40:de:4a:ab:
19:95:8e:14:f7:67:d0:ba:06:60:1c:29:ac:ce:d9:3d:30:65:
95:3d:d3:54:de:26:a9:1e:a5:fd:f4:a0:bf:28:ca:51:78:63:
8b:fb:48:65:85:ed:e2:00:d7:ef:dc:4c:84:06:c5:f6:52:e6:
95:3c:73:f7:1e:67:b2:a8:c2:f9:00:02:49:cb:d7:fd:c8:fa:
1e:c3:c1:8b:68:db:98:95:6e:88:65:0f:96:b4:c8:94:2c:c1:
ff:98:3c:2a:03:02:5c:11:49:45:d2:6c:a2:fa:6b:38:03:7c:
6f:5a:77:09:58:6f:83:57:02:61:23:85:4f:dd:9a:af:36:03:
b1:4c:21:42:36:a9:4a:e0:04:f8:03:41:af:1d:c2:98:8a:b5:
09:c1:0d:24:b5:3f:51:1d:c1:3f:a3:b6:6e:9d:70:f3:cc:30:
c5:1e:9a:b6:52:62:df:3e:fb:69:1e:c9:2a:15:54:9c:5e:8c:
f9:70:f8:f7:ef:e6:23:f8:02:51:eb:48:d6:94:48:c1:fa:be:
79:e7:cd:fe:e6:2a:2c:20:c9:cd:3b:ac:07:03:6e:74:e4:44:
8e:1e:3b:0f:7b:66:7c:3f:c0:13:6d:38:89:ed:a6:4b:02:b3:
59:40:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:59 2024 by rpki-client on console-ams.rpki-client.org