Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/FyzHBF5iz3Q2myjfTbPWCD8zQuo.roa
File: FyzHBF5iz3Q2myjfTbPWCD8zQuo.roa (raw, json)
Hash identifier: rqnVHPJQfXSvPCJVjipM8CYaJmvuFaJ9ZEZw+t5bx+Q=
Subject key identifier: 17:2C:C7:04:5E:62:CF:74:36:9B:28:DF:4D:B3:D6:08:3F:33:42:EA
Certificate issuer: /CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Certificate serial: 018CC8DE31DB7A23C3A467813AA9412ACBEA
Authority key identifier: F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/FyzHBF5iz3Q2myjfTbPWCD8zQuo.roa
Signing time: Tue 02 Jan 2024 06:30:54 +0000
ROA not before: Tue 02 Jan 2024 06:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21155
IP address blocks: 2001:67c:2390::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:31:db:7a:23:c3:a4:67:81:3a:a9:41:2a:cb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e8f1c662cc8b4d8f7a606512099eab7e1d3879
Validity
Not Before: Jan 2 06:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=172cc7045e62cf74369b28df4db3d6083f3342ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0e:49:c1:b2:c2:2d:28:7e:55:6c:78:6a:78:
e7:a9:a8:20:6f:80:a9:90:37:28:16:f3:3c:55:f9:
94:9f:f1:b0:d0:ec:ec:af:e2:2c:5c:46:3e:89:a1:
04:80:7b:6f:ef:5e:d1:6f:e8:bb:99:8f:62:ef:14:
e4:3d:23:d0:0c:94:fa:cc:ae:90:ec:8c:88:7f:38:
11:fb:1e:ef:3a:37:3b:18:f8:1e:cb:8a:a1:49:bd:
73:68:09:07:17:01:21:8e:e2:c5:97:fc:50:db:22:
2d:c3:61:67:6c:96:24:37:df:8a:74:10:5a:7b:ba:
9f:a6:d2:8b:c1:e5:cb:4b:ef:6e:e2:d0:4b:8d:8d:
82:76:17:27:65:a7:2a:9e:75:a6:55:d9:fc:33:c0:
81:88:5a:cd:64:20:37:e9:be:69:71:91:37:f5:ac:
d3:24:da:e5:76:1b:92:28:45:20:6e:df:a0:8f:f2:
e7:a5:f6:e1:6d:67:23:5d:a5:d0:ac:44:4d:ad:1e:
b8:1a:ba:09:71:9b:e9:a3:d1:8c:d8:fc:11:49:40:
8c:1b:c1:1f:b0:ec:10:3a:49:ef:41:5c:83:db:9c:
22:1a:19:b0:98:09:77:f0:76:23:cd:8e:be:29:90:
a2:ad:99:0d:cf:66:0e:24:f1:e8:95:87:20:83:6e:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:C7:04:5E:62:CF:74:36:9B:28:DF:4D:B3:D6:08:3F:33:42:EA
X509v3 Authority Key Identifier:
keyid:F3:E8:F1:C6:62:CC:8B:4D:8F:7A:60:65:12:09:9E:AB:7E:1D:38:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-jxxmLMi02PemBlEgmeq34dOHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/FyzHBF5iz3Q2myjfTbPWCD8zQuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/84f73a-409e-4126-a75c-c6c87de3704f/1/8-jxxmLMi02PemBlEgmeq34dOHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2390::/48
Signature Algorithm: sha256WithRSAEncryption
64:9e:01:ad:50:fe:eb:0e:fc:41:e1:10:e7:51:d7:1d:47:c0:
91:c1:f2:9f:91:9d:36:1a:69:93:c3:aa:80:46:cd:94:72:ff:
a2:2a:0f:33:e9:41:61:1d:b3:60:bf:88:36:21:7d:72:b4:8a:
80:b0:3a:5e:60:6e:51:0b:e6:42:00:7b:cd:80:c8:15:ed:ba:
89:ee:1e:ce:9b:70:95:66:64:4f:22:33:9d:f4:fb:23:31:7e:
e5:e0:3c:37:b3:69:d4:2e:b1:a6:21:01:40:94:fe:8f:b0:1f:
fc:72:41:bb:a9:4a:7d:b0:63:8a:c3:ac:37:34:9b:9e:6f:d4:
cf:34:32:c3:30:ba:8a:2f:1c:d2:06:91:80:55:d1:90:d7:73:
37:da:42:8b:5c:57:ac:b5:af:08:47:f0:af:49:57:4f:96:06:
ef:36:b1:9f:d4:f9:6f:da:a5:94:7d:2d:60:cf:0e:fd:75:4b:
1d:9f:6b:c8:d3:36:63:3a:a5:11:85:db:45:93:30:1e:a3:45:
70:ce:02:b0:47:92:3b:fa:7b:43:ae:b4:d2:ab:18:63:5c:52:
c8:a8:00:36:eb:4c:f4:48:27:ea:26:f0:1e:67:a7:55:98:be:
61:90:15:e7:0f:a5:1e:9e:8b:85:9f:b5:79:17:0b:c1:32:18:
2e:b2:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:18 2024 by rpki-client on console-ams.rpki-client.org