Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/7YARPQdaOfAfP7z49sWifiPjIb4.roa
File: 7YARPQdaOfAfP7z49sWifiPjIb4.roa (raw, json)
Hash identifier: oDKL9sSNMsir8IssQMT/GhxAdUizw+2YGT6nm9dI+lg=
Subject key identifier: ED:80:11:3D:07:5A:39:F0:1F:3F:BC:F8:F6:C5:A2:7E:23:E3:21:BE
Certificate issuer: /CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Certificate serial: 018B89FAEDCBBFF8781570BBE57AF0717F1C
Authority key identifier: 2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/7YARPQdaOfAfP7z49sWifiPjIb4.roa
Signing time: Wed 01 Nov 2023 08:23:25 +0000
ROA not before: Wed 01 Nov 2023 08:23:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 2a0c:4182::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:fa:ed:cb:bf:f8:78:15:70:bb:e5:7a:f0:71:7f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cd9516db9417952dedd9252fe5d83f09a3d99f5
Validity
Not Before: Nov 1 08:23:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed80113d075a39f01f3fbcf8f6c5a27e23e321be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:b7:94:0f:8b:74:f0:03:d5:ec:0f:9f:c5:
3b:43:43:a6:6a:af:91:a8:08:e8:9e:58:c1:8f:a4:
02:b9:3e:09:9f:00:ee:80:b1:bf:b8:a7:1b:96:37:
5e:38:b6:37:ae:17:9e:d1:7b:35:20:24:b4:81:cf:
02:bb:09:15:b5:04:43:c8:fc:1d:d8:5f:46:ff:ae:
12:d4:47:4c:f4:5c:b6:9a:58:f3:00:c9:41:10:7f:
72:5b:51:37:05:8c:ba:75:c7:0f:65:e6:e1:af:39:
ec:6b:c1:1d:46:1d:f6:87:78:c3:ca:d3:31:3a:ba:
92:4a:b0:50:a5:81:ab:31:c5:af:34:56:16:86:0b:
a6:31:b9:12:54:76:db:bf:82:da:fa:85:ca:67:fa:
68:b8:35:59:ae:2e:bf:ec:58:56:30:c4:ac:97:57:
08:84:26:42:20:bf:32:66:08:ca:86:ae:dc:4d:66:
a3:73:7e:50:42:42:5a:16:3a:e9:14:4d:40:2b:b9:
07:61:98:4d:38:61:e3:b3:62:f7:1a:64:6d:4b:19:
98:50:23:5b:ec:29:77:66:b9:f6:4b:13:7e:79:4b:
32:1a:2a:6b:da:ce:17:7d:cc:b1:fd:cf:35:e8:d1:
2d:7a:7d:f1:c2:43:ec:bb:61:a7:02:57:07:d8:84:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:80:11:3D:07:5A:39:F0:1F:3F:BC:F8:F6:C5:A2:7E:23:E3:21:BE
X509v3 Authority Key Identifier:
keyid:2C:D9:51:6D:B9:41:79:52:DE:DD:92:52:FE:5D:83:F0:9A:3D:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/7YARPQdaOfAfP7z49sWifiPjIb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bab53b-3115-41c5-87ea-c00454e0b12a/1/LNlRbblBeVLe3ZJS_l2D8Jo9mfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4182::/32
Signature Algorithm: sha256WithRSAEncryption
0b:1c:15:10:33:47:28:35:23:20:8b:05:ab:b8:1c:05:1c:48:
e9:c6:41:1e:46:60:63:42:dd:f6:61:6c:1e:4f:39:42:f9:03:
80:f6:41:cd:3b:b2:26:4a:cb:29:5c:0c:69:92:1d:8b:1f:29:
e2:cf:78:6f:3f:c9:b2:be:da:3d:90:2b:ba:50:01:9e:16:d8:
54:10:3d:b1:bf:2d:e7:01:7b:a3:eb:d9:4d:b6:08:0e:96:ee:
c3:3e:c8:c9:04:d5:2c:78:0e:c7:cd:4e:8e:a4:c9:34:60:c8:
ff:01:01:f8:e4:ae:a6:aa:fb:b1:38:76:a4:31:ec:68:23:af:
46:98:f4:7f:8e:2b:97:7d:0e:72:77:41:fd:54:91:a2:d1:78:
92:e7:4d:44:81:14:94:90:4f:b1:67:ba:8b:50:b9:4a:5e:f8:
e7:e9:d9:30:f8:c6:a8:66:0d:b6:78:40:e1:4d:6e:08:12:b8:
17:4f:a3:bb:78:8a:3f:7b:0e:cb:6f:06:1d:98:8f:96:9c:0c:
d0:66:1e:30:e4:fc:a0:29:db:b2:94:6a:4d:f9:53:d4:c8:4d:
78:d5:cf:7c:1c:1f:b0:6d:fa:2e:91:27:49:55:cf:cb:7f:ae:
83:17:be:e7:4f:43:c4:56:3c:3b:56:a8:b3:6f:a2:68:50:8b:
46:44:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:37 2024 by rpki-client on console-ams.rpki-client.org