Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/WhiNxaeHSzUUFJxdsMpW279rDeI.roa
File: WhiNxaeHSzUUFJxdsMpW279rDeI.roa (raw, json)
Hash identifier: 9kvu0vwyoBMES93F0g8Rq9TAWRjOXE5gyYi4uhvXIhE=
Subject key identifier: 5A:18:8D:C5:A7:87:4B:35:14:14:9C:5D:B0:CA:56:DB:BF:6B:0D:E2
Certificate issuer: /CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Certificate serial: 0188909E46AB40555FD305677189BAD713B6
Authority key identifier: 27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/WhiNxaeHSzUUFJxdsMpW279rDeI.roa
Signing time: Tue 06 Jun 2023 12:11:11 +0000
ROA not before: Tue 06 Jun 2023 12:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8893
IP address blocks: 2a0d:51c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:9e:46:ab:40:55:5f:d3:05:67:71:89:ba:d7:13:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2770ca5cf0fcb3e1823d33d0cd9825aa1a98a107
Validity
Not Before: Jun 6 12:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a188dc5a7874b3514149c5db0ca56dbbf6b0de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:dc:cb:c1:72:47:42:2d:58:e4:d6:ea:6b:
03:c6:86:08:57:8b:94:49:e8:5e:b2:69:21:71:90:
2e:e3:bd:73:06:8e:79:ba:53:6d:78:de:a3:50:4b:
fc:94:b7:56:a5:fb:7b:ee:a4:dc:49:83:3f:8b:2a:
bd:40:0f:3f:31:4f:15:a2:40:8c:f8:85:27:bc:2d:
a9:b9:92:37:63:ac:df:44:27:10:85:15:40:8b:c2:
35:58:bb:67:64:9c:b9:3e:e2:78:57:a5:08:13:bd:
6b:e7:e1:76:54:59:9b:e1:13:6a:43:51:c2:56:fb:
49:43:4d:20:bd:03:18:c8:e0:46:5a:cf:18:66:91:
83:f9:3f:2e:43:03:5f:6b:d7:56:d3:43:99:7c:4d:
99:a1:41:bc:ef:1a:84:07:1d:da:99:e5:83:e8:59:
e1:a1:3a:fa:c0:2f:67:eb:a7:af:1c:ac:e6:b2:9b:
01:0e:4e:a4:35:b6:b7:55:b1:02:67:67:1f:e7:42:
8c:a0:d7:79:7a:ce:fa:bd:c8:70:4e:5c:4e:e2:bf:
10:a7:70:43:18:a2:d4:a1:57:a1:73:fb:a2:e3:87:
88:9d:5e:58:d5:ec:69:c9:49:9f:71:b0:14:28:0c:
28:93:43:4d:91:58:85:89:65:9b:ba:50:6c:06:f4:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:18:8D:C5:A7:87:4B:35:14:14:9C:5D:B0:CA:56:DB:BF:6B:0D:E2
X509v3 Authority Key Identifier:
keyid:27:70:CA:5C:F0:FC:B3:E1:82:3D:33:D0:CD:98:25:AA:1A:98:A1:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3DKXPD8s-GCPTPQzZglqhqYoQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/WhiNxaeHSzUUFJxdsMpW279rDeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/f6cb73-974f-4d11-baa7-52878eacdbf3/1/J3DKXPD8s-GCPTPQzZglqhqYoQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
5c:90:3a:4a:3d:57:75:c0:87:51:9d:74:2e:eb:e5:b4:43:01:
d2:5f:5b:ea:d7:00:c1:cd:b8:42:6c:f2:59:39:81:ed:53:a0:
cc:8d:86:79:d3:8e:cc:53:5a:a3:41:40:dc:52:be:38:85:c0:
27:79:b8:4c:c6:13:c6:52:71:0f:8b:5d:ab:d5:95:a9:54:dd:
03:35:b7:f1:f6:fd:d5:0f:53:a0:d3:c8:87:2c:97:44:2a:23:
0d:53:6c:85:06:5e:40:20:31:06:c1:ba:44:c5:44:f3:75:19:
2a:99:e9:71:ec:13:6d:8e:13:a9:84:f5:74:9a:93:18:9e:56:
ec:a9:e5:85:94:87:17:38:ab:25:f9:0f:2f:94:cf:ae:fd:3a:
f8:78:dd:ef:f2:fc:bc:b8:cf:e8:75:91:6d:e8:82:5e:87:5e:
98:89:43:ac:80:71:1c:0f:71:65:10:93:72:93:af:00:95:65:
9d:cc:ad:b9:0a:3a:37:e4:34:5d:ab:ec:df:b2:94:35:60:d7:
b9:87:d8:74:3b:ce:f9:c3:9c:37:37:b8:3b:3b:a0:0a:7d:31:
95:d2:6d:b2:ab:a6:b5:b6:8b:f2:04:79:e6:1f:c2:92:a9:03:
30:ec:1f:43:c6:34:bc:c9:39:6b:fd:3a:30:ba:04:c0:5d:79:
10:b2:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org