Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqtnqFL1JzTvN3sBuMeHY1Unpgg.roa
File: lqtnqFL1JzTvN3sBuMeHY1Unpgg.roa (raw, json)
Hash identifier: gSg+bGLIZznEIO0VtohrNRFcVHxo/O1BbJxyiIUgnFo=
Subject key identifier: 96:AB:67:A8:52:F5:27:34:EF:37:7B:01:B8:C7:87:63:55:27:A6:08
Certificate issuer: /CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Certificate serial: 081AA4A0
Authority key identifier: 4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqtnqFL1JzTvN3sBuMeHY1Unpgg.roa
Signing time: Sat 01 Jan 2022 13:04:49 +0000
ROA not before: Sat 01 Jan 2022 13:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 2a0d:ba40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135963808 (0x81aa4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7d2c9ad36d9f881fa81fd475387fb870b5b4fb
Validity
Not Before: Jan 1 13:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96ab67a852f52734ef377b01b8c787635527a608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:c9:e7:2f:a7:f5:70:d0:b4:be:f9:dd:a4:
d2:4b:28:c0:63:3b:34:40:f9:d4:0a:93:9e:09:a7:
81:cf:f5:f3:35:45:0f:4c:cb:c3:6f:59:10:d6:7f:
d8:9e:88:be:c6:d9:25:db:3f:d7:7c:eb:21:79:97:
a5:48:00:1f:13:11:64:75:b4:11:67:6b:e0:81:a4:
34:8d:b3:67:9b:3d:5f:0a:a1:12:bd:43:e9:8d:5b:
fa:6b:c9:1e:72:12:f4:e9:c7:5b:c3:94:f8:a6:e5:
84:bd:aa:ec:37:65:30:e0:fe:64:a6:7e:96:a9:ce:
32:aa:cb:16:e4:af:08:89:0c:d3:7f:ae:e1:0c:37:
8e:13:01:74:85:98:f3:55:65:80:d7:56:4a:eb:b9:
4e:65:f3:bf:f8:85:79:1e:54:48:f4:f2:dd:ac:65:
f8:25:66:87:e5:6f:bd:2e:50:c4:7e:b8:81:8b:eb:
2b:ea:51:28:3f:3c:fc:82:2b:61:d5:f3:17:9c:ed:
02:e3:32:7f:27:0b:bd:14:3c:84:20:7d:57:d4:02:
a8:29:94:db:d5:ac:04:1b:7d:4e:0c:c4:ac:aa:7a:
b5:47:2d:8a:f2:aa:32:37:a6:97:9c:f6:54:a0:04:
14:8b:9a:8b:d4:b8:84:a4:34:59:f3:97:10:79:de:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AB:67:A8:52:F5:27:34:EF:37:7B:01:B8:C7:87:63:55:27:A6:08
X509v3 Authority Key Identifier:
keyid:4B:7D:2C:9A:D3:6D:9F:88:1F:A8:1F:D4:75:38:7F:B8:70:B5:B4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S30smtNtn4gfqB_UdTh_uHC1tPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/lqtnqFL1JzTvN3sBuMeHY1Unpgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/930882-44b4-42e3-924f-f71c43daa59b/1/S30smtNtn4gfqB_UdTh_uHC1tPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ba40::/29
Signature Algorithm: sha256WithRSAEncryption
89:a6:f4:40:4d:3f:d0:5e:92:29:45:23:eb:53:f3:a6:f2:ed:
9d:61:e5:b3:fc:39:74:b3:67:b9:08:83:26:32:9d:1c:b8:28:
37:4b:16:f4:d5:86:2b:5f:2d:37:61:fc:62:ed:ae:4d:9e:56:
c8:3a:b5:00:c1:3e:05:6c:56:61:62:d7:57:58:74:bd:2b:6b:
5e:0a:a1:e0:f3:2b:54:4b:16:ee:06:87:a5:bb:c9:37:fb:59:
7a:de:03:b3:0d:d0:dd:83:cb:f2:5b:01:47:79:06:61:d8:e7:
6a:fb:a7:48:c4:08:c8:88:26:b4:6c:1d:f6:d6:58:d9:43:d9:
09:56:40:39:ce:a8:e9:6d:99:22:e4:13:c0:d4:45:bf:33:c6:
44:03:35:32:96:73:e4:e1:7d:ce:46:da:61:2b:5f:81:7b:20:
67:46:38:a7:71:b1:03:ab:93:1f:7a:59:16:51:df:03:eb:cf:
db:ef:81:5a:0e:c9:26:58:b3:45:19:78:29:05:36:91:a1:1f:
c0:43:74:d6:76:43:13:f4:3e:5c:27:c6:48:ec:22:20:b0:7d:
c4:91:d5:00:5c:f1:e9:8c:b5:88:20:16:0a:04:52:db:4e:57:
42:6f:68:82:5a:9b:3a:61:e8:77:2d:01:e5:64:19:f4:35:6d:
20:90:4f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:50 2024 by rpki-client on console-ams.rpki-client.org