Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/p84LOHC5JdL7XM9b7-hZhwJHZRI.roa
File: p84LOHC5JdL7XM9b7-hZhwJHZRI.roa (raw, json)
Hash identifier: i8633f8RMOrH9h0ApGlI50NJa6GzzmXOLTTprWPY3Zo=
Subject key identifier: A7:CE:0B:38:70:B9:25:D2:FB:5C:CF:5B:EF:E8:59:87:02:47:65:12
Certificate issuer: /CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Certificate serial: 018C820E06159D0EEEAB74C289B3354C842D
Authority key identifier: 52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/p84LOHC5JdL7XM9b7-hZhwJHZRI.roa
Signing time: Tue 19 Dec 2023 12:30:06 +0000
ROA not before: Tue 19 Dec 2023 12:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48597
IP address blocks: 2a09:2b80:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:0e:06:15:9d:0e:ee:ab:74:c2:89:b3:35:4c:84:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52502a29ac06b65e932e1bd97d7fcf29c371cb3d
Validity
Not Before: Dec 19 12:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ce0b3870b925d2fb5ccf5befe8598702476512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:8b:d2:8b:4d:7f:01:16:df:79:9a:a6:d9:
4c:46:75:ad:0c:99:cf:b3:c0:0c:6f:aa:b2:af:8b:
e3:c6:30:86:56:69:41:45:3d:84:0b:26:ea:bc:d0:
2d:79:02:a4:d6:2f:0b:03:61:59:a7:ec:f9:af:f1:
20:db:98:bf:5c:f4:03:26:aa:aa:16:55:41:69:6d:
70:8f:7e:cc:c4:a0:7e:85:65:6d:50:f4:52:ec:cc:
ad:8a:02:9c:32:42:05:41:9b:b6:f1:ab:8b:35:35:
fe:6e:ff:54:0a:a2:ac:a2:1d:20:79:25:14:ae:04:
8a:ac:c6:8a:1e:b7:90:96:b9:ab:56:34:a6:f4:51:
57:2d:78:9c:51:7a:1e:63:d4:38:81:aa:21:0e:a7:
48:bb:f0:5c:c8:e4:32:3b:77:fb:e4:22:b3:34:b3:
01:76:81:3b:80:e1:dc:4b:35:ca:4d:95:72:5e:70:
b8:b8:dc:e8:f5:e4:1a:e5:9c:44:3f:8a:15:b4:92:
fb:3a:bc:c4:44:6d:04:68:85:8e:0a:d7:c4:1d:7e:
e4:52:d4:f4:b9:01:c1:71:ee:8b:a2:3a:a0:9b:ce:
e6:57:d8:29:1a:3b:45:88:3e:6c:ad:ed:30:f0:32:
1b:eb:0d:39:4e:76:9f:39:31:60:3c:41:ba:53:b3:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:0B:38:70:B9:25:D2:FB:5C:CF:5B:EF:E8:59:87:02:47:65:12
X509v3 Authority Key Identifier:
keyid:52:50:2A:29:AC:06:B6:5E:93:2E:1B:D9:7D:7F:CF:29:C3:71:CB:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlAqKawGtl6TLhvZfX_PKcNxyz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/p84LOHC5JdL7XM9b7-hZhwJHZRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d03109-e2dc-4bc9-ba2e-d649e227097f/1/UlAqKawGtl6TLhvZfX_PKcNxyz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
43:03:c0:e5:72:cd:de:61:22:6f:4b:3e:94:93:4f:33:24:1e:
e6:77:b5:c8:72:1d:34:61:a6:32:28:56:b3:9a:6b:8a:06:be:
cb:62:dd:ca:a2:d6:69:8a:e3:2b:b8:83:eb:41:c2:88:54:de:
d2:68:c1:41:e2:4b:9d:a9:8c:7f:4e:00:7b:32:24:92:91:20:
a0:90:76:7f:11:5e:c1:ff:f0:80:80:55:b0:25:f3:7a:6f:7b:
88:35:1b:a4:77:fc:42:12:ec:a4:d1:24:06:16:cb:7b:73:93:
24:64:6d:c4:08:ff:ce:2c:c1:d2:aa:e9:25:c6:f6:d9:f6:4e:
d4:97:95:74:eb:e4:14:54:53:f9:30:ca:a8:0e:fb:86:e6:30:
31:83:cf:ab:26:cc:c1:8b:2d:09:49:eb:65:af:6f:4a:1d:ee:
f2:a8:fd:7f:b7:0e:79:18:86:82:9d:28:3c:23:c6:c0:eb:15:
a3:50:a1:1f:43:c0:bc:ed:05:d6:30:8c:fe:43:a3:df:bb:01:
b2:7c:f7:f2:60:59:62:44:a3:2e:fd:25:79:bc:55:f5:c4:71:
c1:ab:98:2b:58:4e:03:fc:a3:14:eb:40:8e:95:33:a0:88:34:
af:be:1f:36:f6:3e:1c:10:57:92:64:58:d1:4c:ec:ff:6e:5f:
d8:81:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:38 2024 by rpki-client on console-ams.rpki-client.org