Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1-5YorSFkGHRfBbjaAcfxAIilgOA.roa
File: 1-5YorSFkGHRfBbjaAcfxAIilgOA.roa (raw, json)
Hash identifier: Ifes7zbP+Rk0jYEepRPRAftRdNqDPMAN8OsaSpUDeRU=
Subject key identifier: FB:96:28:AD:21:64:18:74:5F:05:B8:DA:01:C7:F1:00:88:A5:80:E0
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018A902DB8FC6B41E22FFF76CC9EA525B8A6
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1-5YorSFkGHRfBbjaAcfxAIilgOA.roa
Signing time: Wed 13 Sep 2023 20:13:50 +0000
ROA not before: Wed 13 Sep 2023 20:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:2d:b8:fc:6b:41:e2:2f:ff:76:cc:9e:a5:25:b8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Sep 13 20:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb9628ad216418745f05b8da01c7f10088a580e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:72:0f:18:05:d9:e5:09:49:72:85:61:c3:
2c:6a:e2:59:f7:00:14:45:05:85:30:82:d8:1f:64:
c9:71:cb:13:e4:c6:21:5e:13:17:0a:b0:5f:28:9b:
b9:90:7d:f1:2f:b8:6e:9d:a4:3c:f7:35:99:d1:2c:
e4:3e:a7:e9:4c:50:c7:7a:aa:c8:0d:62:84:37:24:
8b:4a:f3:8d:f9:d9:ba:08:60:b5:22:b9:aa:a3:02:
63:ad:ee:aa:44:26:64:9e:18:a9:d2:30:82:9b:55:
73:2e:55:8f:d3:1d:d8:bc:b2:cf:8a:62:c9:6c:56:
63:79:fa:db:8f:90:c3:09:8c:dd:1f:8f:b9:e3:9f:
d0:1e:42:c4:bd:1d:61:6b:72:8e:da:61:1e:83:26:
81:53:0e:32:9e:27:6f:61:be:58:9f:a4:d3:93:60:
93:c5:b3:53:63:e4:3c:2d:9d:c3:01:b6:02:a3:5a:
2e:99:1a:39:4c:ed:bc:59:dc:2c:a7:89:8d:2c:fe:
d0:46:73:a5:7b:ac:17:e9:58:07:35:ad:d9:fc:57:
de:06:e6:3f:8e:66:5a:7f:e2:b7:70:77:c5:e9:e8:
26:54:ec:87:82:7e:99:c3:80:af:32:d5:d4:71:e1:
61:da:79:48:8c:e5:79:26:69:dc:7b:37:f3:94:69:
7e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:28:AD:21:64:18:74:5F:05:B8:DA:01:C7:F1:00:88:A5:80:E0
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1-5YorSFkGHRfBbjaAcfxAIilgOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
41:07:db:cf:a4:6a:44:6c:8a:54:eb:c0:ab:df:ed:be:ae:76:
6c:7e:2a:73:d9:7b:65:cf:3f:51:d8:27:6b:2b:00:88:74:65:
74:27:d2:9e:d1:7f:e1:fe:31:52:db:92:ce:ff:74:c0:9d:90:
0e:39:ab:ac:d2:78:13:41:d3:a1:db:c2:f1:f7:5a:15:0b:ea:
5c:36:3e:58:78:02:16:d2:45:02:38:71:92:23:7a:7d:f6:3b:
82:58:9e:93:8a:28:96:34:94:1c:9e:c7:6f:0c:20:29:7f:ef:
a7:1b:e0:a2:50:b7:87:d7:8f:a0:7c:cc:b7:a5:c8:0b:d7:33:
d3:2d:92:17:fd:a0:16:e6:67:a2:53:a4:a0:37:1e:21:dc:aa:
3b:36:fe:42:f4:67:c2:46:61:5b:e2:cd:d3:7e:55:a7:64:21:
ab:00:68:27:78:fc:20:1f:37:97:dc:aa:36:09:ba:e6:e2:65:
73:53:32:45:68:36:0c:5a:31:e6:07:a8:43:b0:c9:56:7a:d1:
42:f2:5c:15:bf:94:7e:12:d6:a8:52:66:ee:bc:a1:6d:53:69:
e7:f7:56:82:db:4c:3e:c0:cb:e6:3b:e5:63:d6:d9:e9:78:fc:
31:1e:96:da:07:32:52:86:7e:b4:55:75:54:86:ca:e5:ce:65:
f3:e9:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:34 2024 by rpki-client on console-ams.rpki-client.org