Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/USqVwgKaYG3kEZh122GRr2USdkg.roa
File: USqVwgKaYG3kEZh122GRr2USdkg.roa (raw, json)
Hash identifier: 6eF4W+UOkU6RRsMaYTVJEPx3a8PvEkxjlj7PVgUAU+c=
Subject key identifier: 51:2A:95:C2:02:9A:60:6D:E4:11:98:75:DB:61:91:AF:65:12:76:48
Certificate issuer: /CN=e7b8ff67db276b3635f7ac78521a78f70ec80870
Certificate serial: 01856F42B63461E09581EF49174DCAC348DA
Authority key identifier: E7:B8:FF:67:DB:27:6B:36:35:F7:AC:78:52:1A:78:F7:0E:C8:08:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57j_Z9snazY196x4Uhp49w7ICHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/USqVwgKaYG3kEZh122GRr2USdkg.roa
Signing time: Sun 01 Jan 2023 21:35:21 +0000
ROA not before: Sun 01 Jan 2023 21:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60557
IP address blocks: 2001:678:cf0::/48 maxlen: 48
2001:678:ce8::/48 maxlen: 48
2001:678:cec::/48 maxlen: 48
2001:678:ce4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b6:34:61:e0:95:81:ef:49:17:4d:ca:c3:48:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b8ff67db276b3635f7ac78521a78f70ec80870
Validity
Not Before: Jan 1 21:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=512a95c2029a606de4119875db6191af65127648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:46:26:32:23:fc:a6:d1:c8:94:c6:59:c8:
dd:b7:94:e1:c7:f1:23:b6:29:4e:69:59:20:f2:e2:
af:98:af:f1:72:ce:65:d2:11:61:ea:a6:21:3f:c3:
98:75:cd:38:54:fb:7f:5f:f3:29:b2:61:09:db:6b:
36:8a:1e:53:20:e6:70:a1:4c:ce:85:5c:a4:a6:da:
95:ee:6f:af:28:0d:41:46:91:7c:1c:8a:5d:83:b5:
32:b2:80:0b:c3:2b:87:64:fe:af:ea:41:70:a1:98:
e6:84:8e:7a:a8:9c:45:5c:6e:c1:55:86:3b:09:1c:
7d:6f:60:d0:25:1a:91:47:be:e8:83:7a:b1:21:93:
fb:1a:14:5a:d5:2e:f7:57:70:52:2e:3d:b0:f1:fd:
2a:a9:52:88:6a:fd:dc:af:84:62:70:9c:83:cc:56:
01:e4:3f:5a:5e:53:58:b6:8f:10:14:ef:fa:18:2e:
b4:9c:1c:24:a5:1e:c4:6a:40:85:8a:4a:d3:2d:cf:
8c:ea:73:f9:b4:fc:47:fe:25:24:04:bc:9d:e9:bc:
07:84:0a:30:22:e1:74:5f:ad:06:d5:73:14:3c:a9:
da:6d:ea:b0:1c:f3:17:cb:c0:1b:b0:47:27:83:ca:
ad:24:00:bb:5e:17:35:8f:6e:72:c0:67:96:5e:c8:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2A:95:C2:02:9A:60:6D:E4:11:98:75:DB:61:91:AF:65:12:76:48
X509v3 Authority Key Identifier:
keyid:E7:B8:FF:67:DB:27:6B:36:35:F7:AC:78:52:1A:78:F7:0E:C8:08:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57j_Z9snazY196x4Uhp49w7ICHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/USqVwgKaYG3kEZh122GRr2USdkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/986115-4153-47f0-bd84-048b3a67a774/1/57j_Z9snazY196x4Uhp49w7ICHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ce4::/48
2001:678:ce8::/48
2001:678:cec::/48
2001:678:cf0::/48
Signature Algorithm: sha256WithRSAEncryption
c0:f3:2a:55:32:20:68:13:e0:02:34:88:d0:2e:8d:40:e5:03:
63:16:4b:52:8c:49:b2:80:64:66:5e:49:5d:29:03:b5:13:de:
f0:e6:12:2e:5d:a4:93:1e:90:b3:fe:2f:d6:45:9e:14:69:8f:
8d:46:8a:b8:36:68:f1:16:f2:ae:3a:24:ba:7d:cc:92:fa:4d:
cb:a5:cb:07:25:71:b4:3b:ba:7b:50:56:57:5c:48:de:37:0b:
5e:18:87:99:ac:1e:06:66:99:78:9a:ec:e1:a6:26:83:f9:fa:
f5:27:b7:42:e7:07:90:ae:21:8c:b7:3c:76:a8:95:5a:84:88:
bf:75:a8:57:72:94:b8:27:ad:25:30:15:06:ae:d8:4e:cb:a9:
5e:f7:a1:5d:fc:b9:1c:94:73:42:06:d6:c4:ea:a0:97:9d:08:
f4:af:ff:6c:07:16:7d:ef:ca:b0:13:12:a9:ed:23:1d:db:6e:
86:c7:d7:c0:de:dc:21:02:29:4b:5d:d1:1e:df:41:d4:df:17:
7c:5e:32:ac:24:c5:7c:27:62:a4:81:7a:df:a8:e2:84:26:c7:
ac:da:61:fd:98:5e:21:90:5f:29:5b:91:d6:c8:68:3f:46:e6:
48:b3:12:eb:99:9c:40:83:ae:ce:26:95:71:e4:48:d1:74:bd:
b0:18:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:30 2024 by rpki-client on console-fra.rpki-client.org