Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2TzlwLgMP5V7CpzOk1ABQBIK1wA.roa
File: 2TzlwLgMP5V7CpzOk1ABQBIK1wA.roa (raw, json)
Hash identifier: KtmbyLSt1J8H0C1tS9aCCY/JAgir22Sq/UGUAsd6vfY=
Subject key identifier: D9:3C:E5:C0:B8:0C:3F:95:7B:0A:9C:CE:93:50:01:40:12:0A:D7:00
Certificate issuer: /CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Certificate serial: 018CC500811C394CBD8F9519EDC8A7E690C5
Authority key identifier: DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2TzlwLgMP5V7CpzOk1ABQBIK1wA.roa
Signing time: Mon 01 Jan 2024 12:29:53 +0000
ROA not before: Mon 01 Jan 2024 12:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:fc80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:81:1c:39:4c:bd:8f:95:19:ed:c8:a7:e6:90:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0cae6dc3c918c7ea8cd278f497f854dca3dc8
Validity
Not Before: Jan 1 12:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d93ce5c0b80c3f957b0a9cce93500140120ad700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:8a:b4:02:ca:b9:24:a6:b1:02:ca:2e:4b:
77:6b:56:df:8e:e1:e1:69:b1:f5:85:09:bc:4d:a3:
f1:6b:54:5d:2a:e2:32:21:48:bb:48:34:c9:75:24:
fe:ba:96:bb:ec:48:d7:fc:37:4a:5d:3b:39:7f:e4:
7f:7e:d6:f4:ad:bf:40:11:42:eb:e9:db:8f:d4:7a:
8b:74:2d:51:ad:bf:16:93:28:68:cd:cf:be:ef:4e:
59:cc:b8:70:08:36:97:58:22:ac:94:cd:1b:47:e8:
c5:e9:63:a9:20:64:ef:68:d5:37:54:21:25:5b:4d:
5c:9a:43:9a:3a:34:66:cf:f4:c5:35:c5:3b:ee:f8:
e9:06:61:5b:ce:0f:9f:39:a8:51:a2:a1:94:96:9b:
11:92:a1:93:5f:9e:6c:44:43:57:df:38:4f:84:c2:
2a:b8:5f:f5:2c:21:6c:69:c8:06:4b:ad:c1:65:10:
24:0b:16:94:d1:8c:18:2e:0b:03:24:8c:8f:57:7e:
83:3e:ff:1b:1a:c3:49:29:91:6b:64:9d:df:84:f2:
0c:6a:92:e6:f7:6e:42:35:f5:12:59:85:06:4b:29:
0c:4f:a6:66:2e:69:89:2f:db:11:09:e4:bd:b0:11:
c4:cb:80:fd:f9:49:57:c3:63:28:e0:ad:ff:23:fc:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:E5:C0:B8:0C:3F:95:7B:0A:9C:CE:93:50:01:40:12:0A:D7:00
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:E6:DC:3C:91:8C:7E:A8:CD:27:8F:49:7F:85:4D:CA:3D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DK5tw8kYx-qM0nj0l_hU3KPcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2TzlwLgMP5V7CpzOk1ABQBIK1wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a05d91-e14f-4bdf-8f99-2849eb7334b6/1/2-DK5tw8kYx-qM0nj0l_hU3KPcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:fc80::/29
Signature Algorithm: sha256WithRSAEncryption
39:51:92:55:e8:5f:2d:27:01:f6:7e:51:cb:2c:7c:64:60:13:
c5:b6:68:35:5c:30:c3:e4:d3:56:ff:3e:84:b2:36:da:06:3b:
c8:e2:ce:aa:3c:c6:ef:3d:5a:84:df:c0:43:87:04:4d:d5:01:
8c:72:05:a9:b2:9b:55:fe:15:dd:75:d3:98:50:d7:48:8a:06:
54:1f:30:50:a0:8a:e9:eb:11:66:2c:9b:21:1e:81:b9:2d:06:
33:c1:cc:01:e8:d8:94:ae:e2:a7:7d:e8:52:79:ae:4e:6b:43:
bf:23:e4:66:5b:bb:db:73:01:68:74:f7:17:55:6d:a1:e9:90:
61:e5:2a:ea:a2:b4:9a:08:72:df:c0:2b:16:a6:9b:ed:8a:38:
62:43:70:cb:bb:cc:c3:49:09:59:cb:a3:f0:86:99:37:63:e4:
2d:c4:25:f3:e1:21:74:67:6a:95:b7:05:f9:cd:6f:60:5d:7e:
51:3b:38:ba:8a:ba:8e:1a:fd:c8:94:a7:47:e0:4c:72:c3:55:
30:1e:de:1c:a2:df:d8:11:b8:d9:2e:45:6f:ae:08:3f:52:b4:
9b:8d:d9:15:5b:63:b9:77:33:37:1b:ab:2b:29:a2:6f:0d:9e:
98:c7:6a:96:4e:d7:4c:16:49:f0:0e:d9:2c:9f:1c:6f:25:09:
ab:4e:be:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:42 2024 by rpki-client on console-fra.rpki-client.org