Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/7gGzfX31Gr7fvHDrEwDT5zfK9eY.roa
File: 7gGzfX31Gr7fvHDrEwDT5zfK9eY.roa (raw, json)
Hash identifier: RFpxWW12Tqki/w8xWvS9KEVmoIejSyucWJ7q0DD8ufM=
Subject key identifier: EE:01:B3:7D:7D:F5:1A:BE:DF:BC:70:EB:13:00:D3:E7:37:CA:F5:E6
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 0185EF14FC346D3964058C0CBA2CED2B837E
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/7gGzfX31Gr7fvHDrEwDT5zfK9eY.roa
Signing time: Thu 26 Jan 2023 17:16:47 +0000
ROA not before: Thu 26 Jan 2023 17:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 2a13:8e00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:14:fc:34:6d:39:64:05:8c:0c:ba:2c:ed:2b:83:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Jan 26 17:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee01b37d7df51abedfbc70eb1300d3e737caf5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:94:d1:3a:28:16:cb:94:12:08:75:e1:66:4b:
a0:ea:f4:43:b5:df:1d:ba:51:69:91:da:f1:0e:5d:
d8:84:b3:c8:30:a3:f2:9f:14:be:cf:02:fe:e5:0e:
6c:aa:96:4c:f0:44:8b:60:a8:38:a9:20:0c:42:7e:
33:65:a4:f9:39:dd:9c:89:02:12:54:4a:28:e6:18:
ce:2a:6c:fb:24:40:46:9e:f8:21:5e:42:d6:dd:10:
9d:61:85:51:dc:e3:83:81:89:22:23:d0:67:e6:b7:
a1:a2:9d:97:c2:ef:5a:c6:11:ec:46:9c:2d:89:9a:
a9:20:ff:85:f1:e3:7d:2c:ee:c5:19:f1:08:a6:12:
ea:44:ae:bb:f4:ea:98:27:d7:28:8f:74:2a:e5:b6:
d3:36:61:97:b8:b4:38:3b:7a:81:67:84:23:69:f4:
a7:cd:ae:f1:79:6f:af:94:9e:73:06:a4:4b:32:42:
37:50:df:8d:68:86:19:b3:0e:0f:a5:4a:50:a5:f0:
4a:b2:64:09:ef:d9:a1:a2:12:d7:e7:bd:00:b5:80:
73:bd:5f:e1:d8:7f:e3:bb:f4:49:95:0e:8b:67:12:
85:97:00:2f:db:9f:34:16:94:e1:79:67:56:9c:7f:
5f:b5:54:99:3a:4d:8f:71:3b:70:4f:83:b5:2b:dc:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:01:B3:7D:7D:F5:1A:BE:DF:BC:70:EB:13:00:D3:E7:37:CA:F5:E6
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/7gGzfX31Gr7fvHDrEwDT5zfK9eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
64:b0:27:e3:b7:13:64:6f:d9:e1:28:14:c0:31:ab:96:bb:9c:
b5:ff:ec:b8:82:a2:5f:be:9d:35:f1:d4:90:90:19:31:be:22:
87:5f:98:1e:11:28:0c:eb:cc:40:a4:8c:85:0a:f8:82:f4:a5:
0a:fe:e9:e5:18:ed:a3:c2:6e:e5:e5:06:7c:81:ca:a9:6b:3f:
a5:cd:7d:44:41:75:09:ec:08:19:e0:bf:a5:2c:29:5c:3f:e3:
15:f7:c4:54:da:db:4d:18:e4:a0:40:07:ca:a6:74:02:e0:0f:
e3:8c:6e:81:c8:d0:ed:0e:89:30:89:6d:a2:77:cf:fc:06:db:
47:11:4a:5e:d3:97:f2:ab:d7:d2:ca:55:24:06:f0:3d:0b:f1:
d6:2b:d9:c2:1c:26:e7:b0:14:d8:c9:f5:40:67:36:fd:bc:6b:
c3:eb:28:f5:df:e1:b2:dd:59:c5:2f:79:e8:3d:77:eb:e6:99:
c3:05:cc:cb:f4:a8:cf:b6:3a:d0:df:67:9b:da:9e:f1:a5:d7:
7d:f7:ae:3d:a8:90:62:37:24:17:41:45:72:25:2a:b0:ac:ac:
b8:54:4e:d0:98:07:d4:c1:b4:f3:fb:2a:5a:45:fe:07:34:29:
b9:6a:8f:5e:75:3b:08:2f:3b:63:48:19:23:c3:81:93:0f:27:
02:dd:37:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:51 2024 by rpki-client on console-ams.rpki-client.org