Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/3uBMrD1rI4GvW20ANURk2Gykau0.roa
File: 3uBMrD1rI4GvW20ANURk2Gykau0.roa (raw, json)
Hash identifier: w4cj6RvBfvxsAhwLv0L0Wno3DestB0nQFvDCscc6yAM=
Subject key identifier: DE:E0:4C:AC:3D:6B:23:81:AF:5B:6D:00:35:44:64:D8:6C:A4:6A:ED
Certificate issuer: /CN=a84233ad498882a916f223956b585e5bb409c2c5
Certificate serial: 019F85
Authority key identifier: A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/3uBMrD1rI4GvW20ANURk2Gykau0.roa
Signing time: Tue 28 Jun 2022 15:29:02 +0000
ROA not before: Tue 28 Jun 2022 15:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47638
IP address blocks: 2a0f:cd40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106373 (0x19f85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84233ad498882a916f223956b585e5bb409c2c5
Validity
Not Before: Jun 28 15:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dee04cac3d6b2381af5b6d00354464d86ca46aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:d7:7c:56:ae:ee:e7:18:af:65:7d:06:87:
e1:51:d0:10:21:d5:12:78:be:3d:3a:08:9c:ce:80:
ac:b8:06:76:32:b9:56:93:57:cb:ad:49:ba:24:01:
76:1f:72:a1:b3:f3:d1:53:69:3d:73:44:c3:d2:ad:
19:8f:bc:39:69:ca:60:7c:13:44:5d:d2:62:e5:64:
79:0c:8a:f2:31:7f:fd:4b:a6:5e:03:c4:1d:71:98:
16:10:28:16:f8:d2:ea:53:56:d5:03:49:17:e5:41:
8b:ad:29:bc:ed:b1:3f:38:77:37:20:3c:8c:db:ab:
99:0d:b3:bc:b2:49:ba:18:30:16:f6:b0:7d:2e:78:
f5:50:b5:ba:9d:74:17:46:6a:5b:41:61:18:55:a7:
99:63:d1:9d:fd:66:af:f2:8f:af:4c:ad:08:a0:66:
cf:db:4e:0d:63:a9:e7:d5:f0:f9:aa:f3:15:dc:20:
87:be:64:29:27:23:b9:61:62:93:03:db:e2:55:26:
e3:e0:a4:ae:bf:d0:84:b6:45:46:48:24:f6:a6:cf:
0d:54:0a:68:c6:9a:e9:74:8c:69:3d:17:a5:65:9f:
13:44:79:f4:16:1c:c0:2e:b2:ca:f4:b6:69:2e:f3:
af:0f:24:ff:94:3d:de:7c:ae:6d:be:47:eb:1b:0b:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E0:4C:AC:3D:6B:23:81:AF:5B:6D:00:35:44:64:D8:6C:A4:6A:ED
X509v3 Authority Key Identifier:
keyid:A8:42:33:AD:49:88:82:A9:16:F2:23:95:6B:58:5E:5B:B4:09:C2:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIzrUmIgqkW8iOVa1heW7QJwsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/3uBMrD1rI4GvW20ANURk2Gykau0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c29057-7eb2-4ec0-b227-02cddbd2e190/1/qEIzrUmIgqkW8iOVa1heW7QJwsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:cd40::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e1:a9:f0:f6:d4:e6:1c:d7:55:8f:1d:1e:ca:fb:b0:dd:50:
b0:71:d6:fc:f0:a2:94:0e:f9:83:66:aa:3f:d3:56:3d:3e:02:
5e:6f:ad:ea:8e:01:00:23:98:23:ac:d3:08:73:77:67:cd:2f:
3d:7e:1e:36:31:db:c1:64:44:83:d5:d6:43:bc:3b:ee:df:20:
09:62:92:f2:8a:4a:78:b0:50:99:02:7f:14:4c:ec:2e:c7:87:
c4:75:32:77:4e:32:55:a6:93:84:66:5d:4d:dd:54:7a:80:31:
0f:f3:23:ce:13:bb:d5:3e:ab:e4:47:d0:6b:aa:69:c5:28:0a:
c2:ee:4c:aa:d1:c4:ef:d9:22:23:f2:54:08:4a:49:ed:5b:46:
db:a7:be:ca:b6:b4:a6:83:7f:61:19:cb:29:e7:4e:1d:4c:d3:
fb:04:68:f1:4f:31:bd:4b:c5:93:69:36:e8:86:d0:68:b9:fd:
1a:52:2e:74:85:fa:22:52:2c:32:17:c1:01:b3:e7:dd:2b:ae:
e6:45:1d:a2:01:b9:f0:12:a4:e5:c9:f4:de:1f:46:74:8c:6d:
2e:8a:a1:db:86:19:d9:50:a7:f5:a2:7d:11:9d:54:9e:83:1d:
58:c7:fe:fa:65:f4:79:08:a1:76:49:b9:08:7b:d4:54:2f:97:
ff:2e:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:13 2024 by rpki-client on console-ams.rpki-client.org