Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/y06sDkhoYjDgz4wsmJHUJtOrvds.roa
File: y06sDkhoYjDgz4wsmJHUJtOrvds.roa (raw, json)
Hash identifier: mcD5iUFSa8Rd/yAX5YpLrReHwLv4oNYzkOCh8AoZGVk=
Subject key identifier: CB:4E:AC:0E:48:68:62:30:E0:CF:8C:2C:98:91:D4:26:D3:AB:BD:DB
Certificate issuer: /CN=9c378004b2d850fe49a35559e40abf09adee402e
Certificate serial: 0183C65892158D7E492D1CA6CF06CDB38797
Authority key identifier: 9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/y06sDkhoYjDgz4wsmJHUJtOrvds.roa
Signing time: Tue 11 Oct 2022 09:20:36 +0000
ROA not before: Tue 11 Oct 2022 09:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51088
IP address blocks: 2a0f:d440::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c6:58:92:15:8d:7e:49:2d:1c:a6:cf:06:cd:b3:87:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c378004b2d850fe49a35559e40abf09adee402e
Validity
Not Before: Oct 11 09:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb4eac0e48686230e0cf8c2c9891d426d3abbddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:16:5c:ce:d7:43:ec:9f:10:06:bc:d8:31:
ca:4f:7e:6e:bf:48:1d:d8:94:43:a3:9d:55:65:6b:
70:8f:5a:35:e0:ed:aa:d1:34:60:47:98:d7:68:e0:
4e:62:e7:22:25:1a:ad:08:b1:15:c2:01:f6:e3:4c:
45:ef:d4:02:c4:78:a1:7b:1a:8f:ca:ee:02:62:e0:
39:c6:a9:62:e5:07:10:85:8f:31:14:b7:94:e7:70:
a2:12:bd:79:4a:68:91:4d:49:84:83:12:f9:9f:31:
44:4b:74:b9:1f:cf:66:dd:d9:19:28:f7:cd:87:42:
02:fc:a7:55:0e:a6:3f:ab:15:84:37:43:13:5f:2b:
f6:63:2a:30:64:1b:b3:a0:c0:aa:fe:d0:e7:bb:3e:
f4:f5:60:06:83:f5:f3:bc:40:83:8b:1c:63:93:a8:
4e:f7:f0:6d:a3:77:de:ff:e7:13:19:ac:7d:01:6c:
ee:fb:3b:84:c8:25:15:1c:14:fc:14:5e:8b:d6:25:
62:f4:40:8e:3e:f2:59:70:f6:88:e5:89:61:27:04:
70:3d:f1:dc:10:36:ce:4d:dc:4b:3a:5f:e9:91:4b:
f5:5b:24:b1:fc:8c:6a:49:d1:ca:c1:6e:b4:f2:73:
ed:64:07:64:fd:bb:d6:d8:07:e9:f9:a3:ec:0b:05:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:AC:0E:48:68:62:30:E0:CF:8C:2C:98:91:D4:26:D3:AB:BD:DB
X509v3 Authority Key Identifier:
keyid:9C:37:80:04:B2:D8:50:FE:49:A3:55:59:E4:0A:BF:09:AD:EE:40:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/y06sDkhoYjDgz4wsmJHUJtOrvds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/85e970-8a63-47d5-a2ff-994fb6f53b58/1/nDeABLLYUP5Jo1VZ5Aq_Ca3uQC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:d440::/29
Signature Algorithm: sha256WithRSAEncryption
74:c3:8b:6e:a7:bc:53:71:6e:43:50:a3:2b:c7:72:ec:07:a0:
5f:23:8e:83:3b:dd:66:c6:37:18:30:9b:f6:72:b1:93:d4:07:
a2:e9:75:a7:39:17:b4:39:57:cf:b6:41:38:e4:46:e9:7b:0a:
96:2c:eb:5f:88:1e:c1:77:f5:0c:d1:d1:ca:4c:a0:85:fd:cd:
b6:6c:6e:4c:03:67:ff:09:ee:30:b1:d5:74:4e:3b:b2:1d:78:
b2:c7:96:02:6e:36:0c:3a:1e:e6:38:e4:48:29:48:2d:84:6a:
e5:9b:e3:ad:66:45:b2:a0:1f:5c:5e:53:83:17:b0:46:36:60:
d3:59:97:37:ff:08:9e:07:36:47:8f:c0:97:71:47:f0:41:df:
5b:62:43:27:f2:1e:d3:92:47:3a:3a:86:7f:17:e7:90:c4:c7:
f5:fc:e8:c2:1f:f9:d0:65:ae:fd:92:76:80:77:35:57:d9:12:
af:19:20:eb:3a:1d:37:99:0e:a9:53:8f:45:a1:f4:d1:55:2e:
48:96:3e:f5:f0:36:4d:e0:b4:f5:f2:0d:7b:a6:85:bb:d7:c0:
1e:8f:b5:36:91:e6:66:8c:a6:c2:ec:2a:53:e5:e7:9c:5e:cf:
07:43:2d:78:46:51:af:44:ff:fa:a6:3b:73:b5:7b:51:d2:94:
5b:a5:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-fra.rpki-client.org