Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/1-mP89YW-nN7tr8Xn5gjF9fZaq5A.roa
File: 1-mP89YW-nN7tr8Xn5gjF9fZaq5A.roa (raw, json)
Hash identifier: oGC7m+mLqw6HyVKvQMf4NQplERjpd48b2EtKIrKW2O0=
Subject key identifier: FA:63:FC:F5:85:BE:9C:DE:ED:AF:C5:E7:E6:08:C5:F5:F6:5A:AB:90
Certificate issuer: /CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Certificate serial: 01856F5DD1D6F84F00A8C2AC0B8CC42E8289
Authority key identifier: 94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/1-mP89YW-nN7tr8Xn5gjF9fZaq5A.roa
Signing time: Sun 01 Jan 2023 22:04:57 +0000
ROA not before: Sun 01 Jan 2023 22:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:7880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d1:d6:f8:4f:00:a8:c2:ac:0b:8c:c4:2e:82:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=947e4676545658de09aa778f8b00e9a4fda0d00f
Validity
Not Before: Jan 1 22:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa63fcf585be9cdeedafc5e7e608c5f5f65aab90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:b2:0b:58:3e:5b:70:92:c1:2b:5e:71:6a:
e8:34:37:0f:cc:62:bc:e1:46:a7:28:9a:9f:a1:7f:
f6:16:d4:d7:ce:c0:87:f9:8d:90:b7:c2:04:30:e3:
32:b3:81:eb:c4:bf:8a:e1:e2:53:18:ea:62:c3:f4:
25:59:32:4c:05:ec:7b:93:a5:9b:81:a1:c6:34:7d:
13:4a:7b:df:f6:3a:99:ab:e8:f3:1d:ea:1b:90:ad:
e1:66:fb:1f:38:dc:bf:36:39:1a:f2:58:16:9e:bd:
5a:75:81:61:2a:fc:3f:64:21:f7:d3:d3:96:d6:65:
2b:8e:7a:3a:70:6d:aa:4d:a6:6c:5b:c3:f5:ec:8e:
f2:d2:50:6d:0c:13:d8:fb:a5:77:3f:34:36:71:3b:
23:83:d0:f4:1d:4c:9d:20:df:1d:30:e9:17:b9:49:
b9:bc:f6:e5:70:c5:30:18:56:cf:97:29:59:b0:1c:
93:61:f7:b9:98:b0:6c:e0:dc:49:d2:6e:f3:10:16:
ca:83:ed:5b:cf:53:17:f6:c6:7c:a7:60:ac:ad:ff:
dc:21:6e:e1:11:56:ea:cc:2d:c2:26:c9:d3:81:2b:
f2:3f:75:4e:13:53:0a:9a:a0:da:be:1e:d0:f2:94:
fe:41:f7:9d:9f:89:bf:39:6e:ff:38:97:3e:99:f2:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:FC:F5:85:BE:9C:DE:ED:AF:C5:E7:E6:08:C5:F5:F6:5A:AB:90
X509v3 Authority Key Identifier:
keyid:94:7E:46:76:54:56:58:DE:09:AA:77:8F:8B:00:E9:A4:FD:A0:D0:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lH5GdlRWWN4JqnePiwDppP2g0A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/1-mP89YW-nN7tr8Xn5gjF9fZaq5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/565aed-610a-44ab-91c8-7dd5ed0e70d6/1/lH5GdlRWWN4JqnePiwDppP2g0A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7880::/29
Signature Algorithm: sha256WithRSAEncryption
84:30:9e:2f:2b:af:6a:7d:f1:6b:2e:52:f3:85:4b:d6:9c:af:
ed:73:a9:f3:38:f2:c0:45:cf:d2:c2:06:02:c0:3d:c8:fc:c3:
06:ce:13:ae:1a:25:9d:82:76:5c:86:d4:aa:df:d5:38:de:31:
d2:d5:01:2e:0e:f7:96:6e:32:a7:01:fd:60:e5:a9:e7:0b:24:
cd:4b:b8:3f:71:84:3c:44:65:55:45:06:9e:1c:9b:d1:99:5c:
c4:7c:dc:77:4a:b7:85:59:7f:b6:9e:be:ca:23:e7:c3:a3:d3:
73:a3:a5:46:73:b4:74:56:e1:69:ed:f3:9d:f6:cd:3c:2d:dc:
33:be:b1:37:cb:30:e9:6a:a8:07:f3:98:9a:9e:9c:f2:5e:6f:
c6:1b:c0:c1:2d:65:70:b2:92:f1:dd:9b:e6:0b:66:3b:a5:a7:
44:ca:1e:94:61:66:3d:73:25:78:b2:cf:e0:78:8f:6c:38:1d:
6b:9f:51:b8:03:ed:ee:0c:e7:d2:35:8d:a3:3b:b2:5a:94:a2:
1b:94:b5:4b:48:de:95:c7:89:19:d1:2d:59:13:9e:77:a5:e1:
b1:2f:6f:0c:b6:fc:4e:25:88:fc:da:29:1b:1a:c6:ed:76:ad:
41:89:86:28:7a:5a:92:71:f4:ee:17:c6:e7:48:22:bc:2b:71:
3c:10:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:59 2024 by rpki-client on console-fra.rpki-client.org