Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/MskdZAFcHR2YmRIranQ4WRQDhH4.roa
File: MskdZAFcHR2YmRIranQ4WRQDhH4.roa (raw, json)
Hash identifier: jlJENmVqJL7Uo+p5rLzxbbGY6mFHXAo2VsXmr4BI2Mw=
Subject key identifier: 32:C9:1D:64:01:5C:1D:1D:98:99:12:2B:6A:74:38:59:14:03:84:7E
Certificate issuer: /CN=b0311619a6764dbf55b5c27f11506a3be2dfcbbd
Certificate serial: 0840BA51
Authority key identifier: B0:31:16:19:A6:76:4D:BF:55:B5:C2:7F:11:50:6A:3B:E2:DF:CB:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDEWGaZ2Tb9VtcJ_EVBqO-Lfy70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/MskdZAFcHR2YmRIranQ4WRQDhH4.roa
Signing time: Sat 01 Jan 2022 11:57:42 +0000
ROA not before: Sat 01 Jan 2022 11:57:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56708
IP address blocks: 2a0d:b980::/29 maxlen: 29
2a0c:2e00::/29 maxlen: 29
2a0d:9080::/29 maxlen: 29
2a0e:9a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138459729 (0x840ba51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0311619a6764dbf55b5c27f11506a3be2dfcbbd
Validity
Not Before: Jan 1 11:57:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32c91d64015c1d1d9899122b6a7438591403847e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bc:29:2b:07:e8:18:7e:25:31:14:e5:13:d7:
7f:44:46:0b:5b:2b:bc:5e:e1:27:a6:8b:af:17:2d:
b3:0d:d4:68:a5:b4:7b:ea:65:1b:f5:72:5e:50:c9:
60:6e:c4:ef:51:08:76:25:b9:a6:3c:30:9f:ff:d3:
38:4b:85:fa:2c:23:02:77:83:b0:6e:0b:34:03:14:
5e:85:c7:55:53:6e:85:8d:61:f2:6c:55:1f:f8:7c:
55:70:41:00:07:8d:e6:bd:c8:82:0f:00:22:ef:a4:
4d:e0:d1:3c:7e:06:3e:0d:f9:80:35:f8:bf:7d:27:
f0:a8:df:14:05:e4:02:77:c9:4f:6a:89:03:48:15:
13:ae:f9:bf:49:e6:76:89:5d:37:d7:df:4b:59:1d:
17:1f:90:ec:dc:3f:03:8d:fa:02:08:05:bf:b7:ab:
07:d2:1d:6a:95:7b:d1:3c:65:91:8d:15:49:3c:20:
02:27:9e:d4:fc:08:5b:9e:96:0b:18:01:9b:a2:bf:
1e:ff:5e:dd:3b:a2:8a:93:a9:bd:76:8c:8d:c7:6c:
48:36:4a:7f:f1:aa:49:f8:6c:a7:ca:c0:36:85:2e:
7b:3b:34:cf:49:ca:71:46:5d:13:9c:4d:5d:8f:82:
f4:bb:ad:6a:e2:ed:d0:bd:cd:9f:e8:51:58:86:fa:
6b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C9:1D:64:01:5C:1D:1D:98:99:12:2B:6A:74:38:59:14:03:84:7E
X509v3 Authority Key Identifier:
keyid:B0:31:16:19:A6:76:4D:BF:55:B5:C2:7F:11:50:6A:3B:E2:DF:CB:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDEWGaZ2Tb9VtcJ_EVBqO-Lfy70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/MskdZAFcHR2YmRIranQ4WRQDhH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/307681-55ae-453a-83fd-1349c4922dd9/1/sDEWGaZ2Tb9VtcJ_EVBqO-Lfy70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:2e00::/29
2a0d:9080::/29
2a0d:b980::/29
2a0e:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
57:52:e3:0a:a2:0b:ca:38:7f:fa:96:a4:64:c7:f2:2f:77:ba:
fa:75:b9:09:33:af:3e:d4:c6:af:99:27:e3:5a:d9:ba:72:fb:
1c:cb:98:bc:fe:91:50:5d:e9:c5:fa:60:cf:25:ac:b8:e7:3d:
d1:b2:f8:28:28:e7:2f:3b:aa:72:e0:56:b6:2b:ef:d1:47:bd:
65:f7:b5:c8:34:70:7b:28:8c:8f:0d:95:36:13:a3:1d:95:0f:
89:cd:f6:8d:35:40:d3:c3:fa:99:c7:3d:d9:2e:6a:9a:da:4f:
d0:16:09:b0:a1:ea:82:e3:1e:88:b8:b9:f4:a2:4b:04:35:f7:
2a:58:d9:d8:e0:fd:4e:7b:87:0c:ef:f9:9f:76:79:d8:fb:dc:
81:f8:77:0d:ca:a8:43:a1:e7:b5:64:df:05:97:88:db:1d:b1:
4e:b3:2a:80:4c:82:1c:ab:69:37:0a:a5:1c:63:f7:91:2f:f1:
be:4c:05:65:db:af:91:c0:36:a2:d8:39:06:e2:3e:d2:ce:ec:
24:36:dd:e6:41:04:24:9b:62:65:ec:26:a9:11:c7:42:2f:6c:
56:6f:fe:da:ad:de:95:f6:1a:8a:85:eb:33:b9:f6:40:03:b5:
34:79:62:b8:d0:28:0a:85:97:c8:76:8c:ad:27:9e:24:12:ae:
2e:46:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:10 2024 by rpki-client on console-ams.rpki-client.org