Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IZ4pVe5XJ21KM22FO2HmC9CDj7o.roa
File: IZ4pVe5XJ21KM22FO2HmC9CDj7o.roa (raw, json)
Hash identifier: hHAb1e5vmE/EI3nGX2+gvUKxuj8WA3b4u10fCCDVA4A=
Subject key identifier: 21:9E:29:55:EE:57:27:6D:4A:33:6D:85:3B:61:E6:0B:D0:83:8F:BA
Certificate issuer: /CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Certificate serial: 018572D5DAF7F51018E58827153A6DF1D1EC
Authority key identifier: B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IZ4pVe5XJ21KM22FO2HmC9CDj7o.roa
Signing time: Mon 02 Jan 2023 14:14:55 +0000
ROA not before: Mon 02 Jan 2023 14:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a12:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:da:f7:f5:10:18:e5:88:27:15:3a:6d:f1:d1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b760d60d705eeedf3f54c02fd11e7c18de904d2f
Validity
Not Before: Jan 2 14:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=219e2955ee57276d4a336d853b61e60bd0838fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b6:31:81:85:fb:71:ae:65:d8:6d:eb:76:3b:
ba:77:da:a4:0d:9b:25:15:82:d3:3b:b1:2f:6c:52:
16:ff:80:a4:40:3e:dd:e3:47:b6:79:8d:05:de:82:
65:af:35:72:4e:21:58:da:e3:23:5f:ad:41:30:68:
d6:10:31:68:ce:2e:ca:19:66:00:8c:a2:f3:0f:61:
a0:5a:83:ea:26:45:61:b0:9c:e1:35:fb:b9:d4:5d:
bb:5b:dc:ed:86:21:ad:0e:48:a9:aa:08:e5:fc:86:
5e:4b:a4:e5:39:68:d3:eb:0b:b9:c8:cd:87:c5:c6:
17:f0:6d:32:cd:ef:57:0c:ed:9e:9e:bf:cb:b9:30:
53:fb:9c:fe:0c:53:e9:b5:ec:cd:94:27:43:1d:3c:
53:4e:e8:92:28:a4:cf:54:75:eb:3a:55:66:de:d0:
b4:e6:df:a7:5c:d0:68:0b:aa:ef:eb:64:1f:70:ef:
3a:b0:0e:47:58:8f:37:2d:56:6b:04:cb:91:ac:ad:
ed:e7:14:5e:f1:cb:ee:bc:8f:ef:db:ac:25:0a:96:
04:6e:0d:98:91:83:91:c3:d5:48:4c:cc:d3:0e:f1:
e5:4f:d8:21:9a:1a:53:f0:51:27:08:f6:a4:a1:76:
80:dd:88:35:7a:96:aa:2f:66:d4:e2:67:c9:67:e4:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:29:55:EE:57:27:6D:4A:33:6D:85:3B:61:E6:0B:D0:83:8F:BA
X509v3 Authority Key Identifier:
keyid:B7:60:D6:0D:70:5E:EE:DF:3F:54:C0:2F:D1:1E:7C:18:DE:90:4D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DWDXBe7t8_VMAv0R58GN6QTS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/IZ4pVe5XJ21KM22FO2HmC9CDj7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5da1dc-f4b5-4528-8caf-454f499e3107/1/t2DWDXBe7t8_VMAv0R58GN6QTS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:280::/29
Signature Algorithm: sha256WithRSAEncryption
9e:83:31:78:26:9a:27:ee:62:5b:aa:96:99:2f:ee:bd:2c:a6:
ed:3d:92:d3:ae:18:83:0c:5c:7c:c3:94:70:36:60:59:7d:1b:
85:e1:8f:34:81:f0:7e:f6:69:1a:48:18:9a:66:f6:90:a9:57:
5f:6c:d7:c8:49:e2:d9:c0:40:3c:f9:65:19:6d:cf:6c:ad:71:
90:67:6d:c7:99:aa:95:6d:34:ff:c4:71:82:39:b7:18:22:73:
a9:78:8d:fc:6b:d2:9a:e1:7d:13:ea:20:71:f7:72:58:f5:08:
2e:71:23:96:d5:70:ce:97:89:82:09:d5:7c:ed:b7:60:ca:b2:
97:7b:63:67:cd:8e:48:6d:68:b8:2c:2d:b0:d2:9a:21:08:b9:
88:d9:d7:a6:20:ea:9d:37:02:07:2f:f0:d4:64:d5:2b:ad:a1:
2c:a2:68:6d:ad:e1:b0:8a:f9:22:3f:3a:97:84:5d:c2:12:c1:
4b:a5:e9:6e:a1:0a:7d:3b:c1:8c:fb:15:92:c4:b2:cc:d9:7e:
fd:a6:b2:d0:b7:f2:80:3b:06:33:87:35:86:73:20:d3:da:89:
05:7a:fd:24:a9:4c:c1:b9:b9:9d:4e:40:92:40:a5:f7:4f:1b:
8c:e9:33:65:c6:df:57:8c:35:1f:5f:c2:77:f8:e6:43:80:fa:
4f:d0:4a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:14 2024 by rpki-client on console-fra.rpki-client.org