Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/YwWJKiJlEEeU7ngcT1pSXAFPvKo.roa
File: YwWJKiJlEEeU7ngcT1pSXAFPvKo.roa (raw, json)
Hash identifier: OGsafoc0Q5Bq2oIRTunxoRbj/zDFjheqZxJDzutTn7o=
Subject key identifier: 63:05:89:2A:22:65:10:47:94:EE:78:1C:4F:5A:52:5C:01:4F:BC:AA
Certificate issuer: /CN=df4657812435bb1af4802f96032f91c57cbcc933
Certificate serial: 018486AA63975D8BBE62E219DFB2AE7C5245
Authority key identifier: DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/YwWJKiJlEEeU7ngcT1pSXAFPvKo.roa
Signing time: Thu 17 Nov 2022 17:37:04 +0000
ROA not before: Thu 17 Nov 2022 17:37:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a0f:ff80::/29 maxlen: 29
2a0d:fb40::/29 maxlen: 29
2a09:cb00::/29 maxlen: 29
2a09:3c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:aa:63:97:5d:8b:be:62:e2:19:df:b2:ae:7c:52:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df4657812435bb1af4802f96032f91c57cbcc933
Validity
Not Before: Nov 17 17:37:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6305892a2265104794ee781c4f5a525c014fbcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:76:47:ef:a8:75:cf:a2:53:82:f6:a3:b6:
38:75:1f:02:fd:66:78:d0:51:0b:7f:36:1d:0a:c5:
92:a5:eb:94:a2:e7:29:8e:51:27:63:4a:35:57:64:
e2:01:d4:7f:5c:af:0c:90:8e:4e:30:ac:c2:6a:8b:
22:fa:e3:a9:e8:84:53:12:38:16:d4:22:4c:18:b9:
0c:bc:b1:78:7c:4b:ac:7e:b5:61:29:de:a2:f9:10:
4b:69:71:ae:b6:b1:1d:f0:00:a0:91:9e:0f:5f:aa:
d8:33:9d:b5:b8:c6:da:aa:2d:20:91:a3:3c:bf:c7:
f9:9f:61:97:7d:7e:a8:e3:75:37:97:b3:b9:45:04:
4b:b3:64:b9:31:0a:6d:94:34:8a:41:b9:c2:1d:c2:
43:bb:5a:88:44:cf:5f:53:b5:95:31:ed:5c:8d:49:
58:c9:39:28:45:8c:1c:61:dd:e3:a8:ee:95:44:f4:
7a:75:af:c0:f1:13:37:e1:09:bc:21:13:12:d7:41:
08:b5:94:b7:1b:a5:21:27:00:74:cd:fa:22:29:07:
6b:10:2f:e1:48:48:40:dc:68:b0:32:51:a9:48:91:
ed:34:ab:7f:d7:83:fa:1d:c4:dd:3d:c0:ae:21:1b:
be:34:cb:02:88:64:09:85:8d:8b:a3:10:e5:4a:27:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:89:2A:22:65:10:47:94:EE:78:1C:4F:5A:52:5C:01:4F:BC:AA
X509v3 Authority Key Identifier:
keyid:DF:46:57:81:24:35:BB:1A:F4:80:2F:96:03:2F:91:C5:7C:BC:C9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/YwWJKiJlEEeU7ngcT1pSXAFPvKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/47012a-e1cf-43d7-9351-0edf2c4f7ec0/1/30ZXgSQ1uxr0gC-WAy-RxXy8yTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3c80::/29
2a09:cb00::/29
2a0d:fb40::/29
2a0f:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:fb:78:68:25:6a:69:b2:af:ec:33:bc:e4:91:09:dc:8f:00:
ee:7f:03:50:87:08:aa:3c:34:fd:41:30:80:ab:3b:79:85:65:
0c:16:60:e0:d7:f9:7c:75:1d:45:14:8b:4e:ee:da:90:ed:e4:
2d:68:85:71:25:a6:5d:1e:3d:08:56:fe:91:ac:35:9d:75:77:
49:28:e6:28:73:12:58:bf:d6:30:c9:51:83:17:c3:91:df:58:
d7:ad:d9:35:b4:58:2c:05:7e:9a:e9:cc:f5:e7:c1:53:d8:ad:
12:92:0e:ad:24:70:6b:d0:86:b7:7f:ef:f8:ed:9f:7e:97:ae:
c8:3b:a0:91:3c:f5:e0:c6:1b:f1:61:74:80:6a:07:d0:b5:5f:
c1:94:cf:da:d6:73:11:35:d8:a7:f6:45:26:bf:29:27:e6:45:
7d:0d:48:42:56:87:ca:10:d0:d9:84:58:94:a3:b0:fc:0a:06:
69:9b:d7:4f:71:48:84:dd:3a:c9:3d:ca:42:60:ef:47:6e:4a:
5f:31:41:54:62:5b:56:c3:08:04:37:b7:14:ea:b2:68:bf:76:
9c:bd:76:8f:bf:25:80:77:ad:37:6c:6c:d0:aa:a1:4f:85:f5:
58:5d:84:5f:7b:3b:d4:1f:d0:64:c3:39:98:60:a5:6b:0c:c6:
2e:1a:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:31 2023 by rpki-client on console-fra.rpki-client.org