Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/D4s7beJ5AZYDp_uzydFrZNl37XI.roa
File: D4s7beJ5AZYDp_uzydFrZNl37XI.roa (raw, json)
Hash identifier: kyn6MC+Y6lBZk5xIrdJjckU8oS4Re2eGsgFWaj8CwIs=
Subject key identifier: 0F:8B:3B:6D:E2:79:01:96:03:A7:FB:B3:C9:D1:6B:64:D9:77:ED:72
Certificate issuer: /CN=650309a6c618c718bd369f561fff0dccbf320b48
Certificate serial: 018CC7273297DB666AD15A9F7A9BF0AA61A1
Authority key identifier: 65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/D4s7beJ5AZYDp_uzydFrZNl37XI.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205593
IP address blocks: 2001:678:e40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:32:97:db:66:6a:d1:5a:9f:7a:9b:f0:aa:61:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650309a6c618c718bd369f561fff0dccbf320b48
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f8b3b6de279019603a7fbb3c9d16b64d977ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:52:ec:84:e7:c3:77:6f:59:b4:82:99:7c:
b4:ec:bc:c5:72:57:b0:e5:41:bc:90:d8:5e:3a:aa:
ef:f9:51:c5:6c:00:63:70:5d:63:68:45:cb:6c:07:
db:c5:9d:85:20:98:82:37:79:f9:2e:e4:f5:21:2c:
44:ae:da:2e:36:78:e9:2f:c9:4c:65:3f:0c:be:7f:
6a:1b:69:a6:be:af:45:8c:ef:0c:1e:e0:90:08:d1:
75:65:51:10:b4:9e:92:2d:0a:61:59:3e:4b:50:50:
5b:85:78:83:a6:dc:5c:a5:5e:78:64:ec:5f:e4:f0:
4e:ca:ca:da:4b:52:7d:05:e6:25:97:3f:e7:aa:6a:
7f:36:f4:d1:65:5e:af:ff:c4:77:3a:c9:72:49:96:
dd:03:e9:61:7e:52:61:8a:26:cd:5c:33:30:f5:06:
33:82:ce:f6:bc:53:78:27:b2:b4:90:1a:94:be:9a:
ea:90:5a:7d:2b:03:3f:ac:91:77:c1:96:87:ba:28:
c7:a8:a9:44:1f:3e:ba:63:c9:d2:eb:6f:be:b1:54:
36:40:c2:2d:e4:d3:f8:22:6e:37:2a:63:e4:b7:b2:
55:e3:99:cb:e8:08:81:76:21:0b:bd:be:84:8e:f6:
8c:1d:c9:d0:bc:dc:22:21:b0:3e:b1:75:a9:f6:8b:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8B:3B:6D:E2:79:01:96:03:A7:FB:B3:C9:D1:6B:64:D9:77:ED:72
X509v3 Authority Key Identifier:
keyid:65:03:09:A6:C6:18:C7:18:BD:36:9F:56:1F:FF:0D:CC:BF:32:0B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/D4s7beJ5AZYDp_uzydFrZNl37XI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ab68e5-14c9-4123-8226-fe26d41ce7cb/1/ZQMJpsYYxxi9Np9WH_8NzL8yC0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e40::/48
Signature Algorithm: sha256WithRSAEncryption
37:a1:ba:61:be:d5:15:ad:cc:54:8d:36:30:92:85:a8:e1:87:
dc:94:85:5b:82:56:b3:cf:25:26:93:72:ce:5d:ca:e9:a9:2a:
9a:5f:e6:53:3c:63:e0:3b:b8:26:08:b1:5c:3c:02:7c:ea:7d:
62:9b:1f:5f:28:7c:c7:68:aa:dc:1b:48:a6:9a:ad:49:e9:98:
b3:6d:72:b7:f5:4d:cc:85:81:06:3d:ca:c0:51:62:f5:7a:bd:
35:82:b8:26:a4:3a:96:16:f2:bd:d0:7e:13:97:74:14:a1:ba:
71:5e:90:ee:db:f3:41:ea:6e:ee:0f:3b:55:55:98:82:be:60:
a9:56:a6:b0:cf:23:5b:1d:04:5d:59:2c:47:86:4b:6c:1b:7e:
c5:fc:95:2d:61:55:6c:30:33:1d:3e:3a:a8:13:56:0f:60:5a:
95:55:95:c9:af:f2:59:56:cd:dc:58:86:76:42:19:dc:fa:15:
8e:ce:03:69:c7:21:ec:0e:c4:f8:8b:ac:60:ac:a9:1d:5d:4e:
2d:d7:aa:29:61:06:65:fe:5d:2d:c4:83:33:43:de:ff:46:bd:
99:82:aa:08:6a:2c:c0:17:4d:e2:44:89:0a:da:55:7e:fb:ab:
cb:f1:4f:1d:67:00:71:3f:a6:a1:a8:19:41:05:d3:c1:f9:73:
31:e4:90:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:57 2024 by rpki-client on console-fra.rpki-client.org