Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/0RbDpQvE8C-O_x075nJjlqCRrag.roa
File: 0RbDpQvE8C-O_x075nJjlqCRrag.roa (raw, json)
Hash identifier: sPq8wa8iFcA06C2ao2Pw0tLHLPYv78oF3F5U7RNS+7M=
Subject key identifier: D1:16:C3:A5:0B:C4:F0:2F:8E:FF:1D:3B:E6:72:63:96:A0:91:AD:A8
Certificate issuer: /CN=91afcc05df02f27470df8381140b95aaec1f35bd
Certificate serial: 01856F66FCFE6E4B84D5F023106BA5F3CD31
Authority key identifier: 91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/0RbDpQvE8C-O_x075nJjlqCRrag.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16247
IP address blocks: 2a12:e900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fc:fe:6e:4b:84:d5:f0:23:10:6b:a5:f3:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91afcc05df02f27470df8381140b95aaec1f35bd
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d116c3a50bc4f02f8eff1d3be6726396a091ada8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:17:88:8a:50:30:e3:67:6f:b9:61:17:76:2b:
cb:2b:44:14:f4:27:32:b1:67:c7:c3:be:d0:98:8e:
f6:b3:66:e3:e5:5c:c4:85:ed:a6:64:8a:10:86:9b:
ed:06:95:ee:a3:5d:8f:26:51:7d:63:3d:d0:a1:40:
8e:43:31:05:65:0c:b3:15:21:6e:27:ab:af:cb:96:
ee:52:db:da:cb:e8:c6:2b:2b:84:97:4b:3d:b9:9b:
23:4b:bd:c9:27:ed:a2:8f:aa:df:05:76:16:e9:b9:
d5:71:78:02:07:2c:40:1d:fe:30:41:a4:7d:f1:57:
bd:f1:b2:30:1e:40:af:a1:fb:8e:4a:7f:64:b0:8e:
45:a0:ec:c6:1b:40:6a:0e:95:d0:4c:9f:a7:c4:12:
f3:4f:b4:75:c5:10:9f:49:3d:42:7f:e9:22:45:ba:
b9:89:22:a3:47:3f:49:54:2a:3c:09:dd:63:0b:69:
28:69:46:f7:5c:81:e0:91:14:45:bf:04:33:97:aa:
b6:d8:f1:88:23:7b:c0:86:2e:91:18:9c:13:f0:3b:
cc:73:27:41:78:e6:19:38:50:0d:54:18:14:f9:c5:
a9:63:56:98:4b:aa:9c:67:06:97:05:68:2b:cc:7d:
e7:dc:69:6b:c6:57:fd:59:7e:63:83:8b:11:da:06:
c5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:16:C3:A5:0B:C4:F0:2F:8E:FF:1D:3B:E6:72:63:96:A0:91:AD:A8
X509v3 Authority Key Identifier:
keyid:91:AF:CC:05:DF:02:F2:74:70:DF:83:81:14:0B:95:AA:EC:1F:35:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ka_MBd8C8nRw34OBFAuVquwfNb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/0RbDpQvE8C-O_x075nJjlqCRrag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/dccf7b-a7fd-4238-b1f5-fbaf7d1dac8c/1/ka_MBd8C8nRw34OBFAuVquwfNb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e900::/29
Signature Algorithm: sha256WithRSAEncryption
06:2e:c6:bd:82:88:fe:bf:f6:2b:5f:6f:21:01:f9:a2:0d:41:
0f:bb:02:22:53:63:77:43:90:a9:28:5d:48:23:ed:c5:01:66:
12:60:ab:09:74:22:bb:40:14:19:f0:7b:8e:d4:62:3c:78:d4:
b0:e1:ed:0f:5b:13:80:5b:27:01:21:b4:82:ad:3c:92:06:4c:
f4:f2:f5:c8:1d:0b:2b:26:11:2e:ea:44:f7:8d:9f:25:09:05:
45:78:41:f8:8c:ce:c0:66:a3:5c:61:e8:1e:69:ff:29:83:1e:
bd:00:c5:1e:f9:c0:34:22:3e:ab:51:0d:9c:f9:49:cb:dd:a7:
61:75:69:a0:72:b9:01:5e:14:15:c0:05:41:9b:06:5a:9d:e5:
9e:f5:ee:35:97:8b:28:25:cb:0a:ff:cf:06:3a:77:9a:df:c5:
71:64:36:14:36:e4:d7:3f:4e:74:45:ed:bb:0d:0d:06:06:c7:
f8:06:ba:c1:ae:cb:5a:df:6c:56:a6:ac:f1:c5:9c:8f:46:7b:
8a:41:9f:5c:2a:70:84:ae:13:40:b4:44:3c:fc:8c:c0:c1:8a:
22:7e:8d:7e:9d:ff:38:32:99:14:8d:9e:29:f6:88:7f:e4:39:
47:3b:6e:ce:74:37:95:eb:10:ac:3d:4e:b2:e4:5e:62:74:1c:
c3:f3:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:31 2024 by rpki-client on console-ams.rpki-client.org