Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/2PIQrJY_fGNvHDV41yplfOurRzg.roa
File: 2PIQrJY_fGNvHDV41yplfOurRzg.roa (raw, json)
Hash identifier: WGH2qgX7OcVwcjnacbqIYB+ApNzjojtqYGBYCm9yY9g=
Subject key identifier: D8:F2:10:AC:96:3F:7C:63:6F:1C:35:78:D7:2A:65:7C:EB:AB:47:38
Certificate issuer: /CN=bb65142b90774f9092420b1fdf4c67ed737ed8b6
Certificate serial: 01857082CA762B1ADB8A45FCF8768055D910
Authority key identifier: BB:65:14:2B:90:77:4F:90:92:42:0B:1F:DF:4C:67:ED:73:7E:D8:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2UUK5B3T5CSQgsf30xn7XN-2LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/2PIQrJY_fGNvHDV41yplfOurRzg.roa
Signing time: Mon 02 Jan 2023 03:24:57 +0000
ROA not before: Mon 02 Jan 2023 03:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201988
IP address blocks: 2a13:fc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ca:76:2b:1a:db:8a:45:fc:f8:76:80:55:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb65142b90774f9092420b1fdf4c67ed737ed8b6
Validity
Not Before: Jan 2 03:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8f210ac963f7c636f1c3578d72a657cebab4738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:d0:a0:76:02:28:c4:fd:49:20:9e:ca:ea:
56:89:b1:0e:17:b5:74:ec:9b:8c:67:81:99:92:5c:
cf:8f:c2:30:d1:b5:8b:8d:5d:06:7b:33:a3:44:06:
e9:af:31:d9:7b:d2:6e:03:ea:16:fc:78:8f:fd:34:
b1:ee:df:54:e2:38:ab:15:1c:3b:07:17:25:10:5c:
9b:bb:82:f3:2d:11:cd:15:20:75:39:30:c8:4f:a3:
6a:3d:77:89:dd:fa:f0:a7:02:9a:57:85:b6:32:bc:
bd:44:a7:75:80:a2:d3:72:74:4d:c8:99:56:80:0f:
93:68:b8:51:da:fb:58:d3:ee:54:04:85:80:96:6a:
f2:0a:b6:a9:b6:a8:0e:67:bb:05:93:ff:7e:7d:2c:
6b:82:8c:1d:ca:8b:38:54:5b:d8:48:49:03:f2:bf:
82:50:95:0c:7e:58:ed:46:3e:04:34:54:4c:67:f1:
0d:69:ec:4d:c1:32:73:50:72:a4:a2:f0:e7:8f:5f:
2b:6d:76:e5:be:4d:4b:33:62:5a:18:39:9d:20:d4:
32:34:64:c5:94:b0:74:4f:44:d1:6d:8b:35:d5:62:
39:c5:f4:b5:03:64:de:96:d6:9f:a7:50:51:7d:bc:
fa:a5:5a:f1:ce:76:d4:d3:9d:6d:b3:ca:a0:c9:9e:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F2:10:AC:96:3F:7C:63:6F:1C:35:78:D7:2A:65:7C:EB:AB:47:38
X509v3 Authority Key Identifier:
keyid:BB:65:14:2B:90:77:4F:90:92:42:0B:1F:DF:4C:67:ED:73:7E:D8:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2UUK5B3T5CSQgsf30xn7XN-2LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/2PIQrJY_fGNvHDV41yplfOurRzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/u2UUK5B3T5CSQgsf30xn7XN-2LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:cf:79:ef:b9:87:bd:eb:07:de:0e:06:d4:e7:30:12:a5:a2:
b1:0e:a6:35:4b:f6:d3:e0:55:7e:d7:43:d6:09:11:9e:f9:a4:
11:e8:5e:38:78:bc:9d:ef:08:da:a1:db:a6:05:24:11:87:b7:
89:6e:a2:84:4e:18:78:72:8d:e5:c1:25:af:2e:5a:26:51:d7:
85:a3:a2:fe:82:d7:f8:10:c4:a1:ea:97:b2:4a:c3:7c:36:d5:
41:05:85:c0:e8:4b:d2:3f:4b:75:9d:57:45:6b:2a:c9:87:98:
e9:38:2f:de:79:5f:c8:da:c6:ae:70:ba:84:b4:08:86:af:55:
56:04:56:2d:f9:d9:03:43:b8:6c:c6:73:04:3b:60:58:2c:79:
b5:bd:3c:57:c3:ac:28:a7:37:7c:2a:45:9e:db:db:0c:9a:30:
90:b1:d7:79:32:c3:01:fd:8b:49:00:58:a3:13:ab:17:fb:f4:
66:2b:39:77:0f:64:21:dc:42:1f:37:fa:15:fe:1d:0c:66:3b:
b1:6a:ac:6a:fa:33:d0:1f:a6:8c:69:86:28:95:a2:8e:37:a0:
64:5f:f6:33:51:a1:16:bb:39:fc:97:aa:70:51:56:41:8b:8c:
e5:0a:ae:1e:2d:5d:26:61:f9:cd:62:82:91:2f:34:40:f3:51:
c0:ed:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:19 2024 by rpki-client on console-ams.rpki-client.org