Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/mRYAq3kpW2RNcVrKH_ENGqs_4AU.roa
File: mRYAq3kpW2RNcVrKH_ENGqs_4AU.roa (raw, json)
Hash identifier: pYl3iCD7zPjBHCRTRykypcaTwbqEQ76gE3KDmRHcKDM=
Subject key identifier: 99:16:00:AB:79:29:5B:64:4D:71:5A:CA:1F:F1:0D:1A:AB:3F:E0:05
Certificate issuer: /CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Certificate serial: 01856EEFF3174C819F37C419DC8F7ABA6F5E
Authority key identifier: 6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/mRYAq3kpW2RNcVrKH_ENGqs_4AU.roa
Signing time: Sun 01 Jan 2023 20:04:57 +0000
ROA not before: Sun 01 Jan 2023 20:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207358
IP address blocks: 2001:678:c50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:f3:17:4c:81:9f:37:c4:19:dc:8f:7a:ba:6f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b86b72971a41739cddd23c82e63e11bb6ca9cef
Validity
Not Before: Jan 1 20:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=991600ab79295b644d715aca1ff10d1aab3fe005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c2:0b:39:e4:bb:df:47:2c:99:b4:0b:4e:4e:
77:2f:62:55:1d:3d:a6:08:40:55:de:4b:e4:ee:d1:
da:cb:9a:13:6d:ce:df:66:d6:9b:d9:65:cf:a6:d2:
c9:2e:91:5b:96:7b:ca:c9:21:49:8c:45:4e:0b:e7:
96:f0:60:d7:77:1c:dd:81:28:b8:59:9c:cf:ee:3a:
3e:23:79:f8:8a:52:c7:a3:14:da:a4:72:93:e4:fb:
59:01:c1:8a:7f:85:d3:7a:b7:d4:cc:d9:eb:37:b7:
06:e8:d6:b1:bf:7a:ae:c6:36:46:ce:75:df:fa:7f:
fe:67:ba:c4:e1:94:ae:8d:8a:ea:32:db:43:8f:67:
26:81:e3:5a:f1:d3:c7:79:c0:5b:5a:ee:02:f2:60:
36:f4:07:09:3c:b0:23:95:26:6d:95:f8:9d:f3:bb:
a8:64:3a:01:c1:ee:95:86:63:31:ef:7d:32:12:24:
6b:7b:49:ba:8c:43:ad:6b:16:f9:3f:13:85:f3:0c:
cb:59:a0:8d:da:93:f8:11:e6:ee:48:b1:52:78:68:
99:3e:bd:09:21:0f:93:42:e9:a5:64:58:da:93:39:
0e:c3:5a:29:06:42:4b:ea:c4:ba:6f:b7:cb:b2:06:
e6:5c:13:c1:2e:6e:c4:63:e3:ca:1b:7f:c3:ca:ad:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:00:AB:79:29:5B:64:4D:71:5A:CA:1F:F1:0D:1A:AB:3F:E0:05
X509v3 Authority Key Identifier:
keyid:6B:86:B7:29:71:A4:17:39:CD:DD:23:C8:2E:63:E1:1B:B6:CA:9C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4a3KXGkFznN3SPILmPhG7bKnO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/mRYAq3kpW2RNcVrKH_ENGqs_4AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f9430b-7e2c-455c-8b87-34999c2c376c/1/a4a3KXGkFznN3SPILmPhG7bKnO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c50::/48
Signature Algorithm: sha256WithRSAEncryption
56:f1:f3:fe:2e:12:3e:2d:7b:e7:31:ab:ff:5a:10:a1:17:38:
6a:b3:99:fd:ad:01:21:90:68:e8:a2:93:50:f7:2c:6d:cf:95:
5b:d5:aa:19:ad:c2:64:b8:63:36:62:89:d1:6d:30:fe:be:f5:
fc:e4:f4:07:b2:9c:a3:e1:e4:9a:a0:61:85:05:dc:73:24:69:
6b:b4:ef:a6:7e:af:85:18:12:89:3b:2e:1e:c1:f5:92:24:3d:
ba:a1:cf:c0:0d:20:55:04:60:55:b2:8a:b8:f0:5b:a4:ed:4f:
21:af:aa:de:1f:68:9c:2d:dd:e6:49:17:d0:96:dd:7f:c1:5f:
37:c9:2d:23:a8:f7:6d:26:57:3f:46:61:d5:b3:46:05:ed:19:
7c:e7:d7:aa:44:6f:61:26:9e:56:f0:1c:06:70:9a:85:ee:1b:
fb:db:57:d8:19:ec:36:5e:d7:89:87:ae:c0:51:35:79:83:cf:
1a:48:3e:bd:b9:11:05:94:05:e0:d8:a7:ff:a5:60:e2:51:5e:
df:41:c1:ef:6b:2a:78:8e:a1:41:ad:74:0d:bb:18:e6:b6:14:
37:fa:74:fa:e5:8f:55:eb:9f:e7:aa:04:cd:36:00:17:a7:7a:
3a:05:82:12:f8:94:70:75:df:18:a3:b9:b7:62:72:25:76:7e:
11:ec:1e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:10 2024 by rpki-client on console-fra.rpki-client.org