Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/nDtw5Q8msVjbPYlIc4a_gpyjBBk.roa
File: nDtw5Q8msVjbPYlIc4a_gpyjBBk.roa (raw, json)
Hash identifier: QEzSDJU85pR/NWdUGtNbNnV6Ir9cF8ff5LjbdGGMM18=
Subject key identifier: 9C:3B:70:E5:0F:26:B1:58:DB:3D:89:48:73:86:BF:82:9C:A3:04:19
Certificate issuer: /CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Certificate serial: 01877F77ABC5764D8A1EE5FB6FCF0904DF0C
Authority key identifier: AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/nDtw5Q8msVjbPYlIc4a_gpyjBBk.roa
Signing time: Fri 14 Apr 2023 11:12:41 +0000
ROA not before: Fri 14 Apr 2023 11:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a13:fe80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:77:ab:c5:76:4d:8a:1e:e5:fb:6f:cf:09:04:df:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecdd8bee24b342b039d610ce3c0c0c4719a3bf9
Validity
Not Before: Apr 14 11:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3b70e50f26b158db3d89487386bf829ca30419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:9c:f5:ad:96:a6:44:88:ea:72:84:d1:37:
4b:b0:3a:79:35:ef:88:c2:e4:4f:b8:c8:00:f8:10:
a4:6d:6a:cf:a0:ba:26:ad:2d:b3:ef:ff:3b:30:1f:
5f:13:95:7d:85:ba:ac:7a:a4:5d:7a:ea:d6:9f:32:
3b:b0:b4:76:d7:47:f9:18:48:b1:d0:16:02:11:ab:
df:b9:0e:0d:8d:a5:e2:f4:a5:22:91:aa:f9:7d:28:
4c:32:cc:be:b4:1c:b6:4a:19:86:eb:4c:61:09:d7:
b5:93:a4:9f:b7:85:f3:78:99:59:bb:05:1a:c3:39:
ef:c4:b1:11:b7:a1:c4:5e:a6:dd:12:ad:35:8d:d1:
83:cb:b5:65:e2:8c:d6:43:41:ae:6f:84:aa:f2:17:
2f:4d:2d:19:a2:60:be:60:76:bc:68:28:87:0e:af:
a4:9f:32:d9:8a:bd:e4:f2:46:73:d9:8b:f2:0e:61:
71:8e:0d:54:a1:7a:cd:8b:54:9c:02:27:60:06:b9:
db:c4:33:a0:15:2d:8f:db:db:b8:14:e8:0e:c1:cc:
24:06:52:3d:3b:14:ce:d8:88:17:e6:f6:f0:03:45:
57:78:98:8e:52:d8:97:02:92:0e:38:1b:24:75:85:
63:b5:89:d8:35:f1:bb:80:8d:e4:6c:94:b2:50:5c:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:70:E5:0F:26:B1:58:DB:3D:89:48:73:86:BF:82:9C:A3:04:19
X509v3 Authority Key Identifier:
keyid:AE:CD:D8:BE:E2:4B:34:2B:03:9D:61:0C:E3:C0:C0:C4:71:9A:3B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs3YvuJLNCsDnWEM48DAxHGaO_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/nDtw5Q8msVjbPYlIc4a_gpyjBBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3ce7b6-1539-4d98-96d3-7b8c9f629728/1/rs3YvuJLNCsDnWEM48DAxHGaO_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fe80::/29
Signature Algorithm: sha256WithRSAEncryption
8e:da:ed:18:54:89:47:fa:9e:08:8a:14:54:7a:d8:c5:d3:5e:
7a:fa:f9:11:30:4a:c7:10:1f:0f:a3:36:ec:67:28:df:d7:5f:
5c:e6:30:d4:d5:46:62:3e:4d:d1:61:31:29:9e:da:db:92:db:
50:2b:88:b3:80:29:99:a9:6c:5c:61:f2:67:24:90:57:e4:07:
c2:6d:f1:6e:f4:86:ca:f5:be:8a:05:30:72:42:9d:42:73:ec:
06:94:7a:2a:7e:59:11:27:d3:53:61:59:0f:4a:da:d3:40:45:
f1:4a:f8:6a:b6:95:a6:35:3f:f4:2f:bb:51:13:88:27:1e:08:
36:28:da:2b:15:53:93:32:c5:1f:b0:6c:6e:0e:7f:32:1e:06:
63:31:31:d7:30:76:71:1e:f8:08:db:f5:1d:94:54:e2:04:c4:
3e:b0:1f:45:8a:42:17:3e:91:86:48:fe:f0:b4:e5:d6:52:c5:
b3:15:5c:9f:6a:95:49:d9:f1:40:ca:8f:be:36:86:9b:51:b1:
62:25:f5:5e:d8:c0:02:06:71:07:79:70:a6:d7:c0:f4:a0:3f:
29:5e:99:1a:7f:2d:d0:92:34:3e:fa:54:be:e6:69:43:9c:65:
f6:a4:a9:d7:9b:80:5d:41:e9:79:7e:5c:29:42:d7:3d:74:e1:
84:19:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:00 2024 by rpki-client on console-ams.rpki-client.org