Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/B0_1LneUfwPox5JpoXP_TCqaVs4.roa
File: B0_1LneUfwPox5JpoXP_TCqaVs4.roa (raw, json)
Hash identifier: +YqRKmNkwqx8MGLz4uDmXX79VrvDouNpjFnOaPql3fA=
Subject key identifier: 07:4F:F5:2E:77:94:7F:03:E8:C7:92:69:A1:73:FF:4C:2A:9A:56:CE
Certificate issuer: /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial: 018CE2EACE4276742C1CD25B573ECE2473AB
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/B0_1LneUfwPox5JpoXP_TCqaVs4.roa
Signing time: Sun 07 Jan 2024 07:54:48 +0000
ROA not before: Sun 07 Jan 2024 07:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210761
IP address blocks: 2001:67c:81c::/48 maxlen: 48
2001:67c:b88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:ea:ce:42:76:74:2c:1c:d2:5b:57:3e:ce:24:73:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Validity
Not Before: Jan 7 07:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=074ff52e77947f03e8c79269a173ff4c2a9a56ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d0:e1:b0:76:3f:25:f9:81:de:7b:33:59:07:
23:0e:8a:d3:2f:62:bd:05:39:a6:5d:65:46:ed:3e:
d3:b1:ec:01:3c:91:df:c6:4b:e4:4d:3e:43:a3:d4:
6a:49:de:5a:c8:0b:d1:8b:f3:e8:62:80:4d:e1:88:
2b:4c:d2:4b:79:be:3e:c0:dc:34:72:2b:41:0d:ee:
b5:84:4b:00:11:a6:d7:37:da:9a:39:96:12:41:08:
e7:36:5e:e2:3a:ac:82:94:6c:5c:34:fc:47:ff:ee:
70:e5:73:e5:8f:13:85:b5:09:8c:ce:bf:9a:3b:6f:
7e:49:a8:10:6c:4c:bd:9a:6f:fc:4a:1d:03:37:b6:
d4:3f:55:d0:58:41:83:4f:7f:96:83:0a:87:8b:d6:
9b:94:cc:16:a5:41:1a:a1:e8:ee:03:c7:2b:b3:3a:
6a:08:3c:cf:02:e8:c1:05:92:fc:bb:10:3b:3d:11:
e4:8f:e6:35:3b:2f:4e:24:e8:c5:50:4c:11:f8:48:
95:d6:ca:58:22:45:19:18:91:9c:a5:c6:59:09:f5:
71:7d:e8:3c:6d:18:c1:72:42:8a:9e:63:57:54:45:
85:47:87:69:ac:51:3c:ac:6c:c4:ac:8d:4c:c2:64:
fe:ad:c0:d4:3c:9d:f7:90:ca:8e:83:4f:6b:c3:b2:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4F:F5:2E:77:94:7F:03:E8:C7:92:69:A1:73:FF:4C:2A:9A:56:CE
X509v3 Authority Key Identifier:
keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/B0_1LneUfwPox5JpoXP_TCqaVs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:81c::/48
2001:67c:b88::/48
Signature Algorithm: sha256WithRSAEncryption
90:15:03:a5:87:b3:55:17:98:30:7e:7b:dc:5d:cd:b9:e5:e8:
f7:d0:8d:60:3a:de:9e:8f:e6:ed:6e:b5:f7:cd:89:aa:11:12:
ea:da:2f:65:86:77:82:51:c4:92:53:bb:19:a8:f5:93:79:b7:
73:83:e5:62:0a:88:df:85:14:be:de:63:c9:ee:7a:f9:be:f9:
6c:5e:c3:1e:e0:99:af:c3:1a:0e:ab:89:20:ce:9b:ea:57:fa:
27:3f:59:e5:a1:dc:a0:f6:2e:08:5f:0a:82:5c:ac:ce:b2:af:
d1:f9:b6:36:1f:84:24:24:38:74:ba:41:4c:d9:1d:c3:e7:6a:
86:98:69:90:be:ff:fc:c7:23:cc:b2:aa:9a:5f:42:d8:25:c4:
aa:79:3d:2d:b2:19:81:c8:27:f1:bb:ba:8b:b0:3d:df:06:14:
21:15:a5:64:c3:c9:a6:49:2f:9b:17:2f:bd:7a:a3:77:f0:d2:
41:40:53:70:04:aa:7f:f0:f0:1e:a4:93:e0:98:e1:88:22:1c:
a2:19:f5:87:bd:3a:df:6e:3d:f2:58:5c:00:83:4c:53:1c:09:
89:14:08:eb:dd:91:a1:e8:36:d3:20:c4:a2:c6:94:5d:89:fa:
27:bc:8d:bf:5c:f5:b6:a4:95:d8:55:53:09:d2:00:53:40:be:
2d:71:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 06:34:52 2024 by rpki-client on console-ams.rpki-client.org