Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/4uB3m7Kxn7jXRnTubzHsjKOrEaA.roa
File: 4uB3m7Kxn7jXRnTubzHsjKOrEaA.roa (raw, json)
Hash identifier: LXl9XFJ/aLzHlAZ8OR2Ejh3b5K/b2CNe9jV+lZfCgvI=
Subject key identifier: E2:E0:77:9B:B2:B1:9F:B8:D7:46:74:EE:6F:31:EC:8C:A3:AB:11:A0
Certificate issuer: /CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Certificate serial: 018801D5CF980CDB8DB32289E7215ADA1EB7
Authority key identifier: 84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/4uB3m7Kxn7jXRnTubzHsjKOrEaA.roa
Signing time: Tue 09 May 2023 18:46:09 +0000
ROA not before: Tue 09 May 2023 18:46:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a0d:6540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:01:d5:cf:98:0c:db:8d:b3:22:89:e7:21:5a:da:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8400880cc499b2ba2f0db7da48ebb7b30aa2a762
Validity
Not Before: May 9 18:46:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2e0779bb2b19fb8d74674ee6f31ec8ca3ab11a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:09:c5:9d:4c:ae:75:1c:78:c5:1d:6c:4d:
50:1c:69:99:80:bb:38:7d:0c:3d:93:e5:b6:46:a9:
14:5a:4b:cf:35:2c:02:6a:61:91:35:e9:75:4d:01:
4f:b6:94:29:0b:f7:37:c3:cc:e2:7e:67:9c:79:7b:
51:63:a2:71:1c:9c:d1:1c:1c:f4:6c:8a:de:d9:0b:
0c:4a:18:1a:a1:b0:b9:28:f2:8d:3d:76:c3:bc:b2:
6d:fd:c3:24:b6:34:28:cf:12:dd:cd:44:a0:16:f0:
30:50:2f:e3:0b:f6:00:fc:95:dc:2d:2a:42:75:03:
49:2d:8f:bf:71:25:53:92:dd:13:e4:1e:a0:14:32:
1d:83:80:8d:5c:61:65:98:94:15:b3:04:f6:7f:b1:
24:5a:2b:b7:43:62:0c:e3:cc:28:f9:a4:09:03:69:
3b:80:b9:89:77:83:1a:0a:2f:3e:10:b1:67:52:09:
a4:a3:b2:06:92:b2:93:97:09:09:20:be:71:30:f8:
4b:47:1d:35:c6:74:b7:0d:ae:fd:20:89:0e:8d:72:
16:2d:10:a1:bf:ec:a5:cd:42:81:b1:b4:7a:a1:07:
08:51:c5:ec:9b:94:cc:f7:ed:fe:81:41:b5:ef:81:
cc:19:31:f4:da:65:1a:8f:e0:57:15:e7:ba:99:dc:
2a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E0:77:9B:B2:B1:9F:B8:D7:46:74:EE:6F:31:EC:8C:A3:AB:11:A0
X509v3 Authority Key Identifier:
keyid:84:00:88:0C:C4:99:B2:BA:2F:0D:B7:DA:48:EB:B7:B3:0A:A2:A7:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hACIDMSZsrovDbfaSOu3swqip2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/4uB3m7Kxn7jXRnTubzHsjKOrEaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fb4451-d931-430d-b858-7a3440433efc/1/hACIDMSZsrovDbfaSOu3swqip2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6540::/29
Signature Algorithm: sha256WithRSAEncryption
6b:33:f6:66:50:b4:70:76:a4:4f:ec:8c:b5:e3:d0:53:04:db:
46:c4:8d:49:6c:58:30:9c:0d:0f:54:75:47:77:28:74:2a:05:
99:00:f5:74:5d:39:02:90:ae:ab:a8:4b:7d:5d:28:3e:9c:59:
3b:cc:8b:9f:dd:59:dd:b2:cf:9c:da:87:65:44:ab:11:c6:38:
ca:ee:b6:78:2e:fc:68:e7:3c:f9:46:fa:79:b4:d0:66:44:98:
34:60:a1:e1:46:54:ca:3f:ea:62:7b:de:97:07:b8:66:57:ce:
c3:26:4d:59:e8:8b:41:5a:d1:1b:5e:8f:d4:ac:6e:b2:91:13:
c2:47:35:67:66:f4:ee:40:44:e8:dd:b3:f6:98:15:18:6e:3e:
7c:10:e7:d7:46:fd:79:7a:4e:3c:a3:6f:62:96:13:da:19:14:
17:32:5e:28:3f:c0:88:13:7e:15:9f:9f:5c:25:65:bd:a6:2c:
40:be:b7:7f:36:09:1c:15:6c:24:2c:af:60:cc:10:f4:b0:7f:
78:d3:3d:54:d4:d9:4d:f1:40:70:79:9c:a8:24:50:4e:69:26:
43:c1:9e:85:8c:8e:dc:cf:8f:6e:1a:92:26:08:ae:ef:d0:a4:
48:1f:39:38:43:9d:2f:37:95:c2:32:46:70:54:36:02:a2:26:
28:49:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 13:49:48 2023 by rpki-client on console-ams.rpki-client.org