Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/MRBsFQf_3Uy5c3VXv3Mvpv_0fnI.roa
File: MRBsFQf_3Uy5c3VXv3Mvpv_0fnI.roa (raw, json)
Hash identifier: 1Bp5gPe2vBhPn6rWcwEHRSXZAxh07WsypcgIoGTuebU=
Subject key identifier: 31:10:6C:15:07:FF:DD:4C:B9:73:75:57:BF:73:2F:A6:FF:F4:7E:72
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018543FFE556DF564640E77A8AD72C635B38
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/MRBsFQf_3Uy5c3VXv3Mvpv_0fnI.roa
Signing time: Sat 24 Dec 2022 11:58:41 +0000
ROA not before: Sat 24 Dec 2022 11:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211703
IP address blocks: 2a12:62c0::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:43:ff:e5:56:df:56:46:40:e7:7a:8a:d7:2c:63:5b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Dec 24 11:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31106c1507ffdd4cb9737557bf732fa6fff47e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:af:20:4a:86:73:48:63:28:b7:5a:c2:4d:
f0:a9:f0:86:d6:05:c6:da:27:b4:dc:3e:97:10:30:
85:61:0c:23:2a:e4:49:90:3a:34:d0:db:15:ab:ad:
9f:b4:f3:27:90:f1:89:11:80:f4:3e:2c:ea:c1:07:
06:68:12:c4:0e:64:43:4a:74:ec:82:ba:79:2f:bb:
57:ab:e0:3a:40:fa:50:dd:02:ac:fc:a3:0a:23:85:
99:fe:c8:92:5d:cf:91:cf:ac:fc:57:8f:0c:48:45:
6d:51:48:bf:84:b3:95:4f:53:19:9f:89:6e:9e:49:
8e:1a:b1:67:d8:36:e6:f6:bc:8c:47:0e:ed:5e:24:
51:3d:37:04:94:33:fd:fb:d1:c0:b4:f5:e9:6b:16:
02:9c:7b:06:51:bf:7b:10:a0:9a:41:b7:d0:8f:7a:
c0:0a:4c:60:63:93:90:3e:cf:28:26:aa:c4:a4:f2:
78:c0:bc:10:c4:fc:f6:1c:2a:11:b5:f2:de:dd:f7:
d4:fc:b8:0b:0b:48:78:69:a8:33:2d:57:db:68:00:
8e:50:b1:b0:e3:a2:6f:63:81:96:38:ac:09:ed:1a:
d2:ea:27:ee:1c:45:16:d3:a7:ed:52:f4:5a:92:7d:
fa:40:8c:e6:7e:82:6f:06:8e:75:87:5c:d6:53:84:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:6C:15:07:FF:DD:4C:B9:73:75:57:BF:73:2F:A6:FF:F4:7E:72
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/MRBsFQf_3Uy5c3VXv3Mvpv_0fnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:a3:b1:a2:0a:2d:6a:28:a5:0d:e9:01:a9:c9:f4:cd:3f:b0:
bd:3d:02:5c:fd:eb:fa:6f:59:d3:52:04:b6:6a:2e:04:0d:05:
9a:b6:0c:fe:a9:7a:ac:05:77:e4:1d:47:ef:69:fb:b0:ed:9c:
85:67:e9:94:26:bb:6f:63:23:62:d7:34:36:d5:42:2f:6a:98:
cc:50:8a:15:b2:a4:39:7d:6d:5a:c4:85:ab:e4:8f:a5:43:0e:
43:2a:c8:70:26:58:97:88:c5:ff:63:54:fb:da:c5:62:0e:b9:
6a:6e:07:cb:40:7a:8e:87:38:59:88:e9:37:7a:2a:b6:45:a2:
bc:55:3d:77:8a:64:1e:32:ec:6a:eb:42:11:41:6f:72:f8:ea:
ad:57:33:c1:b1:42:e3:5a:68:f8:ba:ac:ec:ab:8b:bb:76:2f:
5d:a0:90:66:23:93:63:33:0f:ba:7e:e9:76:f7:f4:26:0f:10:
fa:0e:6b:82:8c:83:95:a4:f1:12:ad:39:8f:6c:5c:8c:ed:fe:
c0:11:51:70:ab:a5:00:f4:90:80:e6:0d:3e:9a:98:a1:08:48:
ad:7c:2a:c5:76:d3:77:a0:6a:60:e0:d9:19:70:a6:53:7d:44:
13:92:98:0e:e4:31:07:41:4a:81:c8:96:bc:86:c3:43:33:70:
d4:9f:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:34 2024 by rpki-client on console-ams.rpki-client.org