Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/AY4TCgD-Ewj0baivZnTsxVyfing.roa
File: AY4TCgD-Ewj0baivZnTsxVyfing.roa (raw, json)
Hash identifier: VcL6z2TnqdDDaLN4sPbOL7NflsjVf5Bl1hFShOjwmZ4=
Subject key identifier: 01:8E:13:0A:00:FE:13:08:F4:6D:A8:AF:66:74:EC:C5:5C:9F:8A:78
Certificate issuer: /CN=e7b8ff67db276b3635f7ac78521a78f70ec80870
Certificate serial: 035C6865
Authority key identifier: E7:B8:FF:67:DB:27:6B:36:35:F7:AC:78:52:1A:78:F7:0E:C8:08:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57j_Z9snazY196x4Uhp49w7ICHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/AY4TCgD-Ewj0baivZnTsxVyfing.roa
Signing time: Sat 01 Jan 2022 02:58:08 +0000
ROA not before: Sat 01 Jan 2022 02:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206064
IP address blocks: 2001:678:ce8::/48 maxlen: 48
2001:678:cf0::/48 maxlen: 48
2001:678:ce4::/48 maxlen: 48
2001:678:cec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56387685 (0x35c6865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b8ff67db276b3635f7ac78521a78f70ec80870
Validity
Not Before: Jan 1 02:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=018e130a00fe1308f46da8af6674ecc55c9f8a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:3e:f4:3f:2a:f7:30:22:2d:cc:15:cf:81:
bd:59:71:ec:39:e1:26:b0:be:58:02:57:64:34:41:
8f:67:fb:36:23:78:1c:e9:95:b9:2e:ea:b0:66:9b:
b3:df:3f:78:62:d1:91:f9:dd:e6:18:97:8e:71:44:
fd:e0:6c:74:55:12:a3:49:7c:38:35:e3:6a:2a:fc:
f4:13:fc:21:29:58:e5:41:e9:3b:5c:98:cc:9f:ea:
ca:09:99:ff:42:b9:13:a9:fd:74:ce:a1:46:03:1a:
4b:e8:be:65:cc:5a:08:14:6a:15:2b:96:f9:5e:6c:
36:78:26:af:65:ea:9f:5c:35:38:14:59:da:02:ee:
c1:0c:65:ac:39:e4:4f:27:e0:fb:d9:3a:f3:5f:64:
f5:01:1b:03:cb:27:0b:74:d9:10:21:f2:54:83:a0:
a8:e9:3e:2a:f8:77:b5:f0:f9:18:61:c8:15:3e:86:
e9:27:8d:e2:f8:c6:e5:84:23:62:81:61:82:1d:91:
70:97:23:af:88:b9:4d:e7:e1:e0:3f:c7:42:04:b6:
14:91:85:7a:41:72:d4:4c:d2:bf:fa:40:a8:b0:66:
b5:5d:8d:49:b8:4f:99:de:77:84:fc:5a:e2:ea:a1:
70:39:81:dd:3b:64:39:96:04:8e:69:22:a8:38:1a:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8E:13:0A:00:FE:13:08:F4:6D:A8:AF:66:74:EC:C5:5C:9F:8A:78
X509v3 Authority Key Identifier:
keyid:E7:B8:FF:67:DB:27:6B:36:35:F7:AC:78:52:1A:78:F7:0E:C8:08:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57j_Z9snazY196x4Uhp49w7ICHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/AY4TCgD-Ewj0baivZnTsxVyfing.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/57j_Z9snazY196x4Uhp49w7ICHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ce4::/48
2001:678:ce8::/48
2001:678:cec::/48
2001:678:cf0::/48
Signature Algorithm: sha256WithRSAEncryption
91:dc:bd:ef:e8:13:61:f3:7e:2f:d3:b1:51:76:5e:9c:a9:bb:
a2:da:97:d2:cd:e6:64:9d:75:44:a6:6f:24:62:9a:7f:a3:c3:
03:2d:cf:f1:72:f7:7f:9f:27:45:89:32:4f:7b:cd:85:a7:07:
91:eb:49:fc:80:e2:39:14:40:ba:ad:b0:26:e6:8b:92:68:9a:
ed:76:8b:95:f1:94:99:d3:6d:13:86:13:a7:de:1f:c6:2f:63:
c8:1c:bb:31:0c:ac:ed:47:f3:a4:cf:e8:d2:58:0e:82:11:83:
a8:78:43:b4:d6:63:99:2e:69:c5:cb:c9:4c:b3:80:9b:70:4e:
39:d8:42:71:f4:6b:bb:77:95:ec:7f:45:a7:e2:35:8c:28:89:
c5:1c:cc:70:f0:2a:9e:e6:45:7d:09:69:f5:01:5e:b0:03:08:
39:c1:97:2b:b9:b0:c2:70:d9:84:71:2f:34:fc:c4:70:70:c3:
05:a6:62:4f:ea:69:83:c9:81:46:28:88:31:65:73:27:1c:12:
70:74:1b:25:38:82:2f:5d:39:a8:64:d8:bf:49:3f:af:fa:78:
d5:96:49:83:b0:66:3c:38:c7:af:a4:9b:11:56:8b:d2:99:53:
3f:76:d4:26:ff:de:ea:27:25:0c:4b:f4:3a:e0:82:34:f8:aa:
a3:56:a5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org