Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/jJYRBeujT7uC5HnMMKpqoufX3II.roa
File: jJYRBeujT7uC5HnMMKpqoufX3II.roa (raw, json)
Hash identifier: +TCEMyABoOWCeyfPQykcXiASWpOtxdp0nr6KNpYwTSE=
Subject key identifier: 8C:96:11:05:EB:A3:4F:BB:82:E4:79:CC:30:AA:6A:A2:E7:D7:DC:82
Certificate issuer: /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial: 0753B34D
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/jJYRBeujT7uC5HnMMKpqoufX3II.roa
Signing time: Sat 23 Apr 2022 08:22:07 +0000
ROA not before: Sat 23 Apr 2022 08:22:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201308
IP address blocks: 2a05:5500::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122925901 (0x753b34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Validity
Not Before: Apr 23 08:22:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c961105eba34fbb82e479cc30aa6aa2e7d7dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:e3:63:11:b3:c2:47:d2:d8:e9:a9:b4:35:
0f:97:83:43:5e:9b:d6:93:b9:62:5b:0c:b2:50:8a:
4d:bb:bc:57:11:dc:06:7a:3c:76:80:0b:b3:b4:da:
60:c9:10:4d:3a:b7:e1:be:d4:c7:6d:0a:4e:cb:8c:
8d:61:72:9d:59:48:34:f3:70:51:2b:5c:eb:bb:87:
eb:a8:66:bc:80:9c:68:68:43:9f:22:b1:f1:b1:c1:
29:eb:73:f3:cc:72:c3:03:37:c6:d5:82:b3:c0:f8:
fb:72:09:3c:49:58:ad:13:82:59:b0:86:07:11:b8:
c6:e9:46:13:b0:9a:e1:0e:44:67:c9:02:ec:76:db:
6f:5f:6d:21:53:0c:a0:72:73:f4:e9:12:0f:73:80:
aa:64:a4:9c:9e:55:25:19:a0:0c:8d:67:ea:72:92:
af:00:1c:cd:b2:17:33:89:95:76:71:1f:92:02:3b:
a9:b5:f5:7a:6a:a1:11:12:d5:0b:df:82:b2:e5:42:
1a:52:c5:88:4f:25:74:19:d5:ea:02:da:79:c4:e6:
22:e1:d0:60:1e:56:c7:66:dd:1d:09:93:d8:a9:24:
62:a8:f3:5f:c2:10:3d:08:ab:50:fa:1f:a8:a2:84:
5e:f9:24:c0:b8:f9:7d:c3:6c:17:c3:43:8d:41:77:
97:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:11:05:EB:A3:4F:BB:82:E4:79:CC:30:AA:6A:A2:E7:D7:DC:82
X509v3 Authority Key Identifier:
keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/jJYRBeujT7uC5HnMMKpqoufX3II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:5500::/30
Signature Algorithm: sha256WithRSAEncryption
34:37:18:5e:f6:44:d7:dd:34:57:07:8f:da:69:fa:8f:ed:96:
3c:9a:27:a0:b2:70:ac:b2:37:ae:c4:98:d0:45:96:85:96:44:
d3:c5:69:b4:a0:9a:a4:69:7d:22:b2:a6:a2:57:d4:ba:60:59:
60:18:64:c9:3b:6d:83:34:a6:5a:ea:28:8e:6e:31:95:13:2f:
4b:5c:0c:96:9f:7c:ff:92:b5:a9:ac:4d:5a:8b:1e:80:d5:7e:
4f:12:e2:2e:66:f8:aa:4f:ab:a2:bb:c8:90:52:3f:6b:85:16:
b9:ca:1e:7c:5a:9b:1e:ab:34:76:71:e5:2d:3b:87:15:cf:65:
79:98:69:11:f4:3d:aa:ed:04:b5:14:6f:8f:69:cb:13:a6:fb:
a1:f3:ce:62:bd:17:a3:fb:6d:48:c8:e4:c7:3a:dc:cb:bf:20:
05:21:f6:f2:91:8a:0c:47:3c:88:7b:6b:d8:49:01:90:85:1e:
91:e9:44:af:53:d3:64:34:6e:7d:84:3d:0f:36:af:d8:a4:ee:
ef:66:81:1a:ec:c7:89:5a:16:87:81:92:ab:be:85:96:28:8c:
47:34:64:c1:cc:2d:df:9b:da:59:b5:eb:82:8e:3c:67:94:41:
83:25:52:da:46:af:71:d8:89:43:fd:02:14:d3:2a:b5:97:50:
fb:1f:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:01 2024 by rpki-client on console-ams.rpki-client.org