Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/RvHqFaLVsOvsNdvDTz2ttn08HAs.roa
File: RvHqFaLVsOvsNdvDTz2ttn08HAs.roa (raw, json)
Hash identifier: uPDrFZj9SRqPJfQKrVKad4f5qehW5ZjF3FcKeLnxbJU=
Subject key identifier: 46:F1:EA:15:A2:D5:B0:EB:EC:35:DB:C3:4F:3D:AD:B6:7D:3C:1C:0B
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018E4B7865879700A6D8DC21E31D3DDFAC1C
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/RvHqFaLVsOvsNdvDTz2ttn08HAs.roa
Signing time: Sun 17 Mar 2024 08:12:45 +0000
ROA not before: Sun 17 Mar 2024 08:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4b:78:65:87:97:00:a6:d8:dc:21:e3:1d:3d:df:ac:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Mar 17 08:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46f1ea15a2d5b0ebec35dbc34f3dadb67d3c1c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:01:5d:c8:9b:4d:c3:76:c5:f0:7b:6e:38:
10:f0:c4:4f:77:17:f4:d7:98:12:05:84:25:d2:c7:
f5:ba:46:90:a9:6b:d2:ae:7e:3f:e8:62:e0:59:f4:
98:cf:fd:e7:eb:f5:b5:08:ef:d8:2e:7a:d6:66:cb:
45:e9:7d:69:3c:0b:fc:9f:aa:ce:f9:46:ed:d3:39:
fe:0c:64:35:94:d3:61:cc:3a:4c:d2:58:a2:e4:d0:
2a:25:10:54:1d:e4:08:bf:c0:28:3e:2f:b8:9e:19:
db:c1:27:d4:0f:7b:64:62:46:c2:31:96:98:fa:f7:
b5:5d:65:77:7c:3a:9b:27:4d:ab:7f:b9:a1:95:ab:
52:9c:cf:a9:ee:0c:5b:cf:df:a0:10:77:1d:50:00:
4d:9d:fd:31:38:e4:40:58:28:c7:f0:99:e5:5a:73:
28:21:d4:f3:23:12:a4:fe:ef:44:18:d6:a1:33:28:
5f:df:a6:03:ce:e4:ac:55:87:df:0c:c4:4d:f5:03:
74:ce:dd:43:06:d7:cb:fc:aa:be:43:e2:8d:04:21:
1e:bf:aa:ca:c1:8b:7d:5f:81:1a:91:0c:68:2b:20:
91:35:70:0e:10:09:f9:55:5e:76:71:4e:b4:04:26:
33:74:82:74:7a:1c:73:db:f3:a9:6f:a3:b3:e0:35:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F1:EA:15:A2:D5:B0:EB:EC:35:DB:C3:4F:3D:AD:B6:7D:3C:1C:0B
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/RvHqFaLVsOvsNdvDTz2ttn08HAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
8b:77:4e:d7:58:17:ed:64:9f:18:f5:b7:01:f7:b0:b8:6e:a6:
69:64:27:aa:ca:65:0e:02:7b:e8:30:d0:79:f4:3b:f8:a7:cd:
85:70:a0:d0:44:ab:f0:60:a5:b4:3c:27:e5:fa:f4:a7:f7:88:
d5:ab:b2:6f:44:ee:fd:cb:1a:fc:4a:ae:0f:20:7e:e4:35:92:
07:28:c8:4e:02:9f:35:31:47:e2:20:29:51:cb:71:00:0c:55:
c9:eb:77:8d:e1:40:98:09:b1:01:38:24:3c:2f:90:cb:8b:8b:
6d:97:e5:32:a8:be:c8:c0:4a:53:0e:12:3b:fa:21:72:cf:1b:
e8:cc:a9:25:14:08:fc:6d:cf:d2:e4:8d:a8:70:c2:d2:b7:1d:
e1:8f:d0:f8:cb:ce:a3:b3:c7:76:04:3f:25:25:b3:34:1e:b4:
c4:27:d9:94:71:7a:02:62:6b:72:d6:bb:fe:7b:34:59:25:93:
d6:e6:45:36:0e:9f:25:4d:07:2a:c6:5f:22:e5:3b:d9:fb:80:
5f:bb:bf:78:24:05:f4:ef:9f:43:4b:7d:71:13:6a:e8:e5:aa:
1e:5e:2f:52:07:28:6b:1c:95:66:41:f3:04:b2:0a:65:04:dc:
ab:1d:ad:2c:a2:f9:47:c3:42:16:ff:c9:d4:7d:8f:0b:5a:1c:
0a:1a:27:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:34 2024 by rpki-client on console-ams.rpki-client.org