Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/N4HlmtfUx4kZ-dVDTPzU17klXJw.roa
File: N4HlmtfUx4kZ-dVDTPzU17klXJw.roa (raw, json)
Hash identifier: 1jZp4NPxWELR4Wye3qbnWXGj+k2zjR8tKdIrOzD4lDE=
Subject key identifier: 37:81:E5:9A:D7:D4:C7:89:19:F9:D5:43:4C:FC:D4:D7:B9:25:5C:9C
Certificate issuer: /CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Certificate serial: 018572F1342AFE33700537B7D5AD0DB3EEF8
Authority key identifier: 4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/N4HlmtfUx4kZ-dVDTPzU17klXJw.roa
Signing time: Mon 02 Jan 2023 14:44:48 +0000
ROA not before: Mon 02 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a0c:e500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f1:34:2a:fe:33:70:05:37:b7:d5:ad:0d:b3:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f291acf209af43dd883d4a0a1f6bc89bb86a3b5
Validity
Not Before: Jan 2 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3781e59ad7d4c78919f9d5434cfcd4d7b9255c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:a9:b6:01:29:e4:18:2d:b7:53:69:09:81:
f1:27:8b:15:d1:d7:b3:77:80:05:25:c6:d0:57:b5:
0e:23:39:43:e5:36:93:02:4d:39:c1:e9:2f:c0:24:
f6:7d:8e:3f:6b:b2:01:23:6a:3d:0d:96:3c:b2:83:
45:ba:66:1c:13:3e:62:af:e9:c2:a1:d6:bd:59:95:
61:07:7c:7b:b6:e2:a0:10:9a:53:b1:c1:16:e6:e2:
65:e5:0a:23:97:a3:1e:33:3c:b7:17:2c:ad:43:78:
27:6d:4b:19:18:bd:4d:d2:4d:77:9a:17:7d:5d:71:
22:c4:8f:e5:52:66:37:07:df:91:8b:81:0f:df:e2:
07:31:43:35:76:06:8b:f0:36:1b:51:7f:54:2e:a0:
8f:1c:d8:84:3e:79:af:73:5c:d4:4c:c8:b7:38:12:
cc:85:bf:91:f1:f4:77:8a:83:b3:b0:47:9b:b1:22:
4f:9a:c6:0b:12:44:eb:1a:02:2d:62:4c:2a:2e:83:
c3:a9:36:4f:60:30:06:0c:6b:1b:3e:fd:f1:2a:c8:
6b:f8:14:57:eb:ae:76:dd:92:63:b1:1d:64:31:05:
98:3e:1f:2c:12:a1:ac:58:bb:ef:5e:45:bc:f9:b6:
d0:97:8b:85:19:a4:5e:79:d8:d9:27:95:d0:e2:b0:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:81:E5:9A:D7:D4:C7:89:19:F9:D5:43:4C:FC:D4:D7:B9:25:5C:9C
X509v3 Authority Key Identifier:
keyid:4F:29:1A:CF:20:9A:F4:3D:D8:83:D4:A0:A1:F6:BC:89:BB:86:A3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TykazyCa9D3Yg9Sgofa8ibuGo7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/N4HlmtfUx4kZ-dVDTPzU17klXJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f84d54-564b-42e5-a929-209415b917d4/1/TykazyCa9D3Yg9Sgofa8ibuGo7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e500::/29
Signature Algorithm: sha256WithRSAEncryption
3d:c3:3b:e1:0b:c0:0b:f9:2b:5b:1f:67:35:75:07:85:78:6b:
74:fb:a8:d6:39:5a:16:f0:e2:90:59:fd:69:52:f0:12:71:34:
98:06:4f:c6:69:f6:5a:db:b2:89:d0:5d:dd:a0:0f:8a:d0:87:
4f:ac:64:84:4e:f2:04:50:da:8c:18:bd:9e:fa:8c:77:ae:7c:
3e:85:1a:c1:c0:79:94:18:c1:ec:8a:c3:5e:6a:bd:9a:ce:87:
c0:3c:0f:74:93:ef:1f:94:de:bd:ad:c1:c3:d9:de:ee:49:dc:
a1:00:68:83:12:89:e2:d6:60:dc:e1:d4:31:99:1b:83:f3:18:
31:6f:fe:8f:06:73:8c:9c:35:64:f2:4e:8c:d8:5e:d8:d4:a3:
da:0b:2f:a2:bb:9f:49:3c:94:8b:da:8d:b8:59:78:a2:81:45:
19:3a:d8:3f:25:7d:de:cd:ab:40:1f:be:16:21:3b:1b:f4:53:
83:24:c0:5b:3a:ea:4e:cb:2d:11:e3:7f:ab:03:60:6c:29:9b:
41:f3:90:81:b2:55:d1:1b:43:4b:d1:c2:df:a4:56:8a:cf:4c:
d5:92:09:b6:40:5b:76:80:ce:ec:72:74:c1:9d:95:74:13:6d:
44:70:6d:f1:5e:e9:25:17:93:ef:75:aa:1d:f3:21:9a:fd:45:
f4:51:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:29 2024 by rpki-client on console-fra.rpki-client.org