Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/ij44GqHTRFXmIycFlU0mSl7sLac.roa
File: ij44GqHTRFXmIycFlU0mSl7sLac.roa (raw, json)
Hash identifier: Gx0YJRA6l4ftSFRxcyo7Sko459FJpjyUfjT4m5pbERg=
Subject key identifier: 8A:3E:38:1A:A1:D3:44:55:E6:23:27:05:95:4D:26:4A:5E:EC:2D:A7
Certificate issuer: /CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Certificate serial: 0526E85B
Authority key identifier: 3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/ij44GqHTRFXmIycFlU0mSl7sLac.roa
Signing time: Sat 01 Jan 2022 13:07:08 +0000
ROA not before: Sat 01 Jan 2022 13:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34907
IP address blocks: 2a0d:f3c0::/29 maxlen: 29
2a0c:a400::/29 maxlen: 29
2a0d:3280::/29 maxlen: 29
2a09:9000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86435931 (0x526e85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d86ea38e021f0a960152cfb7010b4b0e2e9f9e7
Validity
Not Before: Jan 1 13:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a3e381aa1d34455e6232705954d264a5eec2da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:da:9c:6c:11:02:75:94:5b:e5:5c:13:3f:
f3:ec:15:34:43:92:e4:51:dc:a9:2a:16:df:11:5d:
1b:94:95:09:84:f9:6b:ff:db:8a:96:c4:86:9a:45:
e5:fb:2e:0f:cf:ca:20:c5:25:ba:1e:89:5c:fb:8a:
78:e6:d1:13:c2:38:0c:0d:be:fa:33:34:b3:51:6d:
32:82:d4:7d:73:12:d7:c8:f9:46:97:f9:b3:6e:ac:
b6:34:15:34:d7:e8:2d:ba:06:11:a2:12:44:dc:81:
35:a5:be:47:7f:b5:24:9f:65:fa:59:b5:7f:90:3c:
d5:c1:d0:b2:2f:e9:0b:7b:cd:80:27:a1:4d:ff:8d:
bd:61:59:b5:e2:3e:e4:7d:78:5e:f1:31:a8:b4:9d:
ee:eb:c0:e0:ee:05:78:0a:c3:9a:72:15:2a:c2:92:
16:69:9d:67:c5:57:fa:f5:ab:c4:b9:f3:b9:df:eb:
90:75:65:72:00:e8:a8:dd:c8:45:ba:e0:79:33:51:
b0:14:73:1f:e7:4d:bc:ff:04:8e:83:23:51:bd:04:
77:7e:01:fb:3b:f4:2d:96:20:04:de:50:85:5f:ae:
b8:fc:5b:99:ac:09:37:c2:65:7b:b1:d1:7b:72:5c:
ef:9f:4e:9b:fa:c9:c7:8e:8b:31:6a:e7:b9:0f:a2:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:38:1A:A1:D3:44:55:E6:23:27:05:95:4D:26:4A:5E:EC:2D:A7
X509v3 Authority Key Identifier:
keyid:3D:86:EA:38:E0:21:F0:A9:60:15:2C:FB:70:10:B4:B0:E2:E9:F9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYbqOOAh8KlgFSz7cBC0sOLp-ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/ij44GqHTRFXmIycFlU0mSl7sLac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ec6b-b9b5-463f-81a1-389669483cce/1/PYbqOOAh8KlgFSz7cBC0sOLp-ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9000::/29
2a0c:a400::/29
2a0d:3280::/29
2a0d:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:90:62:00:a0:fc:d1:a8:10:e6:ba:6f:ee:74:e3:f0:11:50:
33:d1:f4:4e:2d:a7:d2:c0:df:f4:e3:57:5e:e9:1a:8a:0a:1c:
88:b5:02:f2:23:63:3c:ba:c6:46:c7:c6:3a:7a:a2:40:30:69:
14:5d:81:7e:29:c5:6f:74:45:f7:9e:d4:78:51:5a:db:5d:99:
e7:66:3e:ad:da:43:6a:65:68:80:be:52:1b:8c:0f:e0:1b:5b:
0c:4d:02:ff:96:c2:2e:0c:da:fb:0d:68:b8:fe:bd:b2:4d:84:
0f:31:fd:f1:8b:ec:1f:4b:2c:cc:0f:45:ae:13:d5:de:3d:84:
4c:36:ea:2d:25:5d:df:df:c8:81:13:81:59:bc:9d:b0:cc:c3:
e1:94:87:79:9b:28:53:cb:be:04:5b:d1:3c:1a:6e:9d:af:f4:
21:00:69:26:86:59:f3:9d:15:c8:5f:5f:64:55:ad:0b:c5:bb:
3d:60:ac:df:1d:dc:bc:32:f8:83:fd:4b:d9:ee:b4:ef:14:90:
6e:ae:0d:04:0e:76:c7:36:09:b2:02:5f:95:79:c8:ed:75:fc:
e7:63:c8:2d:7f:78:14:06:0d:88:31:54:14:c4:62:f5:84:a9:
83:61:a7:0e:79:8d:62:95:16:98:7c:77:ed:9f:a4:36:b9:7f:
90:2f:11:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:16 2024 by rpki-client on console-ams.rpki-client.org