Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/gJOHk1T22BQYM7SIjFT53cgn6fI.roa
File: gJOHk1T22BQYM7SIjFT53cgn6fI.roa (raw, json)
Hash identifier: KhDVAuHvui7E6B8u5I6xQvFdzFDe4qB3zkhZVqHR7pU=
Subject key identifier: 80:93:87:93:54:F6:D8:14:18:33:B4:88:8C:54:F9:DD:C8:27:E9:F2
Certificate issuer: /CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Certificate serial: 01857315F5734A12969708FBFB0E53085A9D
Authority key identifier: 20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/gJOHk1T22BQYM7SIjFT53cgn6fI.roa
Signing time: Mon 02 Jan 2023 15:24:56 +0000
ROA not before: Mon 02 Jan 2023 15:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207487
IP address blocks: 2001:678:c18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:f5:73:4a:12:96:97:08:fb:fb:0e:53:08:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202991b3a0d06f9a5f96d8e77da9f36d9851b6ca
Validity
Not Before: Jan 2 15:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8093879354f6d8141833b4888c54f9ddc827e9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:4b:50:67:29:71:92:db:e1:64:0e:86:37:
98:6f:18:16:a6:ec:4b:ef:78:ea:a8:3c:f4:98:a4:
c6:8f:b2:0e:ae:ff:44:8b:27:51:16:4f:67:01:01:
39:6b:0d:d9:5b:e8:70:d5:b5:c9:41:0c:a7:ad:bc:
9e:73:63:ef:98:f7:9d:35:44:b4:67:91:26:5e:53:
58:ea:8c:cf:d7:c4:1f:0e:cf:c2:e5:95:65:34:81:
61:e6:e9:97:9b:e0:7a:e6:9d:c0:cf:e6:d9:26:0e:
03:d4:83:29:78:32:3f:c8:df:f4:8c:9f:76:d4:78:
26:6f:db:86:0b:0b:1d:b0:9a:f5:fe:0a:0f:09:7b:
59:54:89:97:d2:2a:6f:d3:67:6d:a6:4c:64:c4:22:
e2:98:f7:6d:21:5b:57:fb:c6:dc:53:c3:35:5f:ae:
b8:16:ab:3d:9e:25:e8:ae:47:0c:52:8b:a5:43:92:
c4:e6:bc:ae:ea:cd:65:68:7d:8e:2a:26:4a:e5:09:
0e:1a:bf:21:6d:2b:39:85:33:a6:b0:91:1f:9f:3f:
6b:89:7d:7d:dd:a8:1e:ed:65:c9:f4:5f:72:72:92:
0c:98:ac:2e:2e:5d:64:9a:a4:9a:51:57:f2:42:b3:
fe:23:d9:e8:db:7a:c5:ae:cb:85:7d:78:51:4d:7e:
9a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:93:87:93:54:F6:D8:14:18:33:B4:88:8C:54:F9:DD:C8:27:E9:F2
X509v3 Authority Key Identifier:
keyid:20:29:91:B3:A0:D0:6F:9A:5F:96:D8:E7:7D:A9:F3:6D:98:51:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICmRs6DQb5pfltjnfanzbZhRtso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/gJOHk1T22BQYM7SIjFT53cgn6fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6bb996-960c-4659-973a-6ad7f28f6374/1/ICmRs6DQb5pfltjnfanzbZhRtso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c18::/48
Signature Algorithm: sha256WithRSAEncryption
54:07:9a:e8:36:7c:da:13:0a:c6:df:01:07:09:67:dc:82:fb:
70:e7:ab:13:e5:ab:85:b6:f6:34:55:4f:7e:88:8a:0d:90:cd:
a0:71:ee:4d:63:04:33:a1:ca:44:ca:2c:e1:14:e2:33:2a:65:
17:25:31:b4:92:fa:52:4e:72:9d:62:52:21:89:a4:57:09:e0:
62:1b:cb:9f:3d:37:1d:40:5a:77:ab:43:bb:75:24:d0:8b:eb:
7b:2d:4d:f7:2d:06:a8:dd:d5:1a:e9:a0:09:6c:22:f2:22:ba:
39:3e:f2:0e:ea:f8:85:30:b6:d9:20:4f:a3:b6:9c:66:77:20:
27:07:a1:22:75:9a:b2:94:c4:22:f9:68:14:1b:36:f9:64:8c:
77:97:70:36:a8:44:2a:43:54:66:1a:e2:44:8f:ab:bf:a5:cc:
46:6e:c6:44:23:67:a2:01:30:c1:73:4d:60:a0:58:68:55:16:
c4:a0:08:bb:02:ba:6f:0a:9f:5d:b5:f6:92:f8:c7:b5:11:d1:
ee:fd:fe:6c:86:df:10:c1:f7:06:e0:aa:c9:3c:61:a8:bd:cb:
d0:20:36:69:a8:61:0e:c2:69:ae:26:a8:ff:01:6d:3e:07:e0:
25:41:9c:68:ea:38:23:77:f0:b3:6e:fc:f0:64:26:7d:f4:b7:
0b:10:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:23 2024 by rpki-client on console-fra.rpki-client.org