Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/icJml-_w4LU0SBkHUStqi1qFF9E.roa
File: icJml-_w4LU0SBkHUStqi1qFF9E.roa (raw, json)
Hash identifier: fdmteF2sN3MjPn4j5OasJpN7FOOY3maD8cp3rp92azc=
Subject key identifier: 89:C2:66:97:EF:F0:E0:B5:34:48:19:07:51:2B:6A:8B:5A:85:17:D1
Certificate issuer: /CN=7694332879b014e040ac4c66e825ee2d6b844330
Certificate serial: 0851BD2A
Authority key identifier: 76:94:33:28:79:B0:14:E0:40:AC:4C:66:E8:25:EE:2D:6B:84:43:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpQzKHmwFOBArExm6CXuLWuEQzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/icJml-_w4LU0SBkHUStqi1qFF9E.roa
Signing time: Sat 01 Jan 2022 08:55:02 +0000
ROA not before: Sat 01 Jan 2022 08:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204675
IP address blocks: 2001:678:5dc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139574570 (0x851bd2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7694332879b014e040ac4c66e825ee2d6b844330
Validity
Not Before: Jan 1 08:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89c26697eff0e0b534481907512b6a8b5a8517d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d3:24:c3:e3:62:19:3f:e7:6f:be:7e:26:c2:
dd:44:b0:45:99:1c:ea:38:68:8e:23:54:9f:b9:ba:
cb:c3:46:3d:e7:c9:b0:4a:43:43:45:13:a8:8f:06:
8a:df:bb:1b:90:d3:8c:b6:e1:b6:2c:34:84:83:15:
0c:2e:72:f4:34:bf:75:b2:37:22:44:e4:ad:36:65:
da:ac:de:54:0b:26:b9:6d:a2:c9:d3:04:f1:87:c6:
ff:20:bb:12:48:4d:aa:c2:3d:48:d1:e7:81:ad:65:
13:51:8e:a2:3a:d8:89:a0:aa:1e:39:a2:bb:b8:89:
8b:de:8b:c8:41:89:22:08:71:59:93:05:da:a5:b3:
5b:b0:db:56:d1:6b:26:85:35:cf:fa:ac:e6:86:7a:
10:cd:81:59:f2:85:33:b5:d9:0c:c7:ae:67:30:69:
c0:7b:99:ec:a7:48:56:da:96:96:9a:26:7b:f7:42:
5d:28:59:82:8f:b7:57:ad:ad:b2:0e:7f:33:6e:de:
b2:06:7c:52:57:a3:52:10:3a:c4:92:69:13:9c:02:
ec:7e:aa:5d:64:3a:c2:7c:a0:e2:93:f2:a7:5f:bd:
28:04:05:ed:03:58:26:d1:3d:17:db:80:67:bd:d8:
33:d5:39:1c:a7:e0:bb:34:5e:8c:70:b2:da:1f:a0:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C2:66:97:EF:F0:E0:B5:34:48:19:07:51:2B:6A:8B:5A:85:17:D1
X509v3 Authority Key Identifier:
keyid:76:94:33:28:79:B0:14:E0:40:AC:4C:66:E8:25:EE:2D:6B:84:43:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpQzKHmwFOBArExm6CXuLWuEQzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/icJml-_w4LU0SBkHUStqi1qFF9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/96c836-9cac-4fc8-b138-91ad9dfb67f8/1/dpQzKHmwFOBArExm6CXuLWuEQzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:5dc::/48
Signature Algorithm: sha256WithRSAEncryption
16:d0:8e:27:5e:79:6c:42:33:da:d5:92:56:ab:ad:47:9e:ec:
ac:50:a8:3d:6c:cb:6a:56:96:9e:d0:c5:32:b3:58:eb:16:30:
a4:52:ed:e7:ae:1f:bb:78:12:b1:0b:4f:9f:87:2e:22:f8:c9:
da:33:e0:bf:06:db:d1:2a:c6:f7:1f:1b:e1:08:63:e0:d6:b6:
1f:b4:58:e8:0e:71:64:cc:ef:92:d2:76:39:0d:86:84:79:9f:
54:8d:80:93:a3:a8:f2:eb:a9:73:d2:28:2d:04:1b:47:97:1a:
fb:31:a4:73:19:3f:06:42:07:55:bd:46:94:fc:8d:0b:92:ad:
61:2b:bb:d1:af:03:a9:39:b0:8a:df:af:c7:86:41:6d:ea:bd:
60:ff:db:42:08:69:1e:81:c9:20:78:00:f5:26:6a:72:e7:5a:
fe:57:74:b0:2e:37:fc:0c:53:48:13:8c:27:f6:0d:ad:4d:75:
4c:67:7f:95:e4:d6:f4:f4:be:53:8f:18:70:19:6e:8b:7c:37:
0e:d0:0a:73:c0:25:3e:71:c9:a8:d7:85:bc:26:78:08:c4:07:
f5:ba:09:01:47:20:90:34:1e:90:53:e7:f7:f6:60:1a:cb:d2:
66:02:85:62:fa:34:42:0e:88:8c:3d:86:0b:79:67:3e:7c:4b:
68:63:73:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org