Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/y4XyX_hkWnhXFd0TnDSW4J7-wpo.roa
File: y4XyX_hkWnhXFd0TnDSW4J7-wpo.roa (raw, json)
Hash identifier: XATEqXb6+AipygLjp4TpZ+ZsAPM2IGMrk/BbX6aoPpo=
Subject key identifier: CB:85:F2:5F:F8:64:5A:78:57:15:DD:13:9C:34:96:E0:9E:FE:C2:9A
Certificate issuer: /CN=3d9f9be20560347813141749a1795333999652eb
Certificate serial: 01856D78690670E21A0D37D3C1AF0FDE43FA
Authority key identifier: 3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/y4XyX_hkWnhXFd0TnDSW4J7-wpo.roa
Signing time: Sun 01 Jan 2023 13:14:45 +0000
ROA not before: Sun 01 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25424
IP address blocks: 2a0a:3340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:69:06:70:e2:1a:0d:37:d3:c1:af:0f:de:43:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9f9be20560347813141749a1795333999652eb
Validity
Not Before: Jan 1 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb85f25ff8645a785715dd139c3496e09efec29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4a:32:1e:db:10:73:b0:29:53:5d:43:0e:4b:
8f:49:9a:d5:aa:a2:18:66:c8:e4:52:b3:0c:9e:8b:
1b:1a:05:c7:3f:58:4a:3d:d7:b0:3f:a5:53:26:e5:
6e:bf:c6:5d:0a:8d:71:ea:5b:87:7d:3d:a4:d5:25:
b0:6c:04:8f:e2:9c:36:ea:bd:c5:28:a5:7c:49:19:
1f:73:5a:27:c3:cc:74:45:5a:a9:cd:83:85:bb:3a:
28:90:89:1e:a1:86:b8:b1:86:c9:ee:c8:ad:cb:fd:
09:0b:9c:e3:20:03:ae:4c:ef:9b:d5:a9:13:c3:03:
9c:11:98:27:5a:f6:61:92:45:25:2d:cd:aa:7e:94:
05:ab:68:41:a4:c2:1a:4f:d9:50:fd:07:cc:2a:cb:
67:d8:0e:05:2a:9f:62:c5:57:3b:bf:8a:de:07:ee:
e6:62:6d:f3:b2:3b:62:5e:dd:a5:2b:32:08:21:69:
1e:5f:67:cd:95:dd:a6:91:8f:43:a0:53:28:1d:cc:
57:9a:8d:99:c0:b9:d4:30:e3:8d:9e:44:99:ee:66:
79:51:df:c4:e5:86:b8:18:3c:46:72:29:3a:be:8e:
9c:f9:3f:6f:2c:77:e5:e2:e4:95:cf:37:08:df:f1:
2d:bc:fd:ea:e5:5f:b1:a1:d8:df:7e:f6:59:79:0f:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:F2:5F:F8:64:5A:78:57:15:DD:13:9C:34:96:E0:9E:FE:C2:9A
X509v3 Authority Key Identifier:
keyid:3D:9F:9B:E2:05:60:34:78:13:14:17:49:A1:79:53:33:99:96:52:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ-b4gVgNHgTFBdJoXlTM5mWUus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/y4XyX_hkWnhXFd0TnDSW4J7-wpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/098059-4692-4e58-bdea-a731cb13f01e/1/PZ-b4gVgNHgTFBdJoXlTM5mWUus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3340::/29
Signature Algorithm: sha256WithRSAEncryption
a9:57:9c:77:39:8f:1d:a0:81:a1:c9:95:ac:91:13:0a:d3:bf:
d7:ac:e2:76:f7:13:e7:05:df:1e:e8:a9:7a:15:61:6d:98:2c:
46:28:0e:3e:84:c5:2c:37:de:a4:c0:e6:b2:4e:da:fa:1e:62:
9b:04:6d:63:0b:73:46:5e:c4:ca:54:5d:a3:37:02:a5:28:6d:
71:ba:2f:68:35:d9:aa:50:be:86:ac:51:6d:46:18:86:a5:c9:
c7:c3:52:8b:ee:41:2d:1f:83:a3:8f:12:7c:03:47:6f:a8:99:
f2:6c:cf:d6:e2:b7:be:d2:97:8a:73:78:40:22:ae:a9:4b:54:
36:37:05:3f:fc:42:0f:01:f7:ac:a0:b9:77:0e:68:be:d4:ec:
a6:14:37:e9:96:1b:67:fe:c8:e9:11:12:f2:2e:eb:27:08:25:
d4:a3:77:66:7d:71:fb:74:1a:94:b8:c4:1c:e0:e4:2c:5a:cb:
09:35:c5:6d:f8:38:e9:08:78:2c:ab:a0:d2:da:6e:80:9e:4b:
1b:71:21:4d:41:ed:da:82:92:a8:c1:0e:76:41:f1:f6:66:f3:
a6:4b:c9:c0:fe:34:c9:e1:21:9a:ad:cb:5d:bc:d8:cb:19:d6:
38:ec:9c:8e:b7:1d:9a:ff:20:3b:c5:44:8c:c1:fc:0e:c9:cd:
a0:f7:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:41 2024 by rpki-client on console-ams.rpki-client.org