Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/rMjh7OIhGyncPXj0UIarEO3B-EU.roa
File: rMjh7OIhGyncPXj0UIarEO3B-EU.roa (raw, json)
Hash identifier: rGJvuIWrUZnilWSNaFLMjX9pr/5w4TW+rLWCwZnnIRU=
Subject key identifier: AC:C8:E1:EC:E2:21:1B:29:DC:3D:78:F4:50:86:AB:10:ED:C1:F8:45
Certificate issuer: /CN=672b4a95678d98d408e3788e822f84a74d7738ef
Certificate serial: 01856B81068DF99EFA91B6CD5E5BB3D086FD
Authority key identifier: 67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/rMjh7OIhGyncPXj0UIarEO3B-EU.roa
Signing time: Sun 01 Jan 2023 04:04:56 +0000
ROA not before: Sun 01 Jan 2023 04:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200774
IP address blocks: 2a00:58c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:06:8d:f9:9e:fa:91:b6:cd:5e:5b:b3:d0:86:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672b4a95678d98d408e3788e822f84a74d7738ef
Validity
Not Before: Jan 1 04:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acc8e1ece2211b29dc3d78f45086ab10edc1f845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:60:5d:9b:12:65:bb:5f:fc:d0:99:8a:98:
f5:57:ef:41:7a:4b:71:ad:52:b4:bb:09:8d:c3:a9:
69:d4:94:69:7b:fd:4a:47:79:4b:1f:c6:fe:17:c0:
49:cb:be:05:22:3d:13:52:af:d7:e7:c7:2c:e2:78:
b4:4d:15:d5:f3:02:57:33:0c:ce:9d:8e:33:d8:58:
ae:33:80:fa:97:99:ff:8b:5c:7f:f1:88:ac:e6:7a:
b6:8f:81:93:3b:b5:18:a2:1d:13:f7:71:a1:1c:5e:
1e:af:2c:26:28:a1:4b:bd:f0:a0:f8:4a:45:ab:9d:
62:77:b9:32:46:36:ea:9e:9f:93:33:ac:b1:13:2e:
20:1f:ac:4f:8a:55:2e:06:8e:8d:bb:d3:bd:94:e2:
22:79:6e:3f:f4:b7:20:83:f8:53:87:96:b3:bf:27:
f8:ed:f1:da:43:04:59:03:60:23:b4:06:4b:f7:59:
91:68:70:d6:f5:52:dc:1c:c9:a5:8c:93:7c:06:ea:
d5:98:e1:6b:ec:e4:b7:99:48:c9:c5:65:77:bc:b7:
ec:ee:29:40:a6:da:5f:f0:61:39:8c:e4:67:57:9d:
77:7d:cc:97:90:8f:af:fa:00:11:8d:78:7d:dd:cc:
85:20:8e:8b:1a:97:61:c1:ec:ba:ed:7c:83:f3:25:
83:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:E1:EC:E2:21:1B:29:DC:3D:78:F4:50:86:AB:10:ED:C1:F8:45
X509v3 Authority Key Identifier:
keyid:67:2B:4A:95:67:8D:98:D4:08:E3:78:8E:82:2F:84:A7:4D:77:38:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZytKlWeNmNQI43iOgi-Ep013OO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/rMjh7OIhGyncPXj0UIarEO3B-EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4bd35c-1e0f-45dc-a419-86014b064a63/1/ZytKlWeNmNQI43iOgi-Ep013OO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:58c0::/48
Signature Algorithm: sha256WithRSAEncryption
9a:58:8b:63:f1:02:fa:5e:c0:97:32:1b:e6:51:a1:7a:57:4d:
91:f9:22:f9:69:15:b6:83:34:cd:0d:4b:c4:2e:1a:5c:1e:c0:
a0:b2:0e:c4:e9:35:5d:9c:ff:d6:5b:e3:62:27:cb:71:5d:f9:
fc:e9:64:06:d7:60:7b:4c:8b:29:c3:15:59:54:3b:bb:e0:64:
22:4f:16:b4:08:ec:dd:fd:14:c9:a6:bc:fc:d8:5d:6a:c7:e6:
cb:f9:2a:20:6c:89:56:f6:bf:d0:d0:77:87:1a:0d:52:ae:75:
e1:61:ce:64:38:39:93:20:d2:10:3b:80:76:de:50:e8:8a:70:
89:d3:35:8c:5e:22:95:73:ce:b2:7e:3c:2c:8c:a7:94:2c:be:
49:84:e9:4c:15:47:c3:8b:05:b3:da:55:d3:d3:7c:91:8c:c7:
47:a5:c1:65:1e:fb:4b:e5:b2:e0:74:3a:86:fb:6b:55:d8:84:
6e:97:8f:ec:a5:81:20:0e:4c:43:f7:0e:8c:2b:13:24:73:b5:
b4:74:a9:9c:96:35:90:31:9e:39:0b:e0:22:be:8a:c6:e8:08:
77:a1:9e:bd:a0:71:36:bc:b3:4a:17:ef:88:40:5c:ab:cc:e6:
65:92:5f:9e:52:46:96:db:c6:73:75:2c:8f:01:94:68:f3:a0:
84:39:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:02 2024 by rpki-client on console-fra.rpki-client.org