Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/IfY5G4tNdHuYP5JYOG1Nv_6WDWI.roa
File: IfY5G4tNdHuYP5JYOG1Nv_6WDWI.roa (raw, json)
Hash identifier: t7y5HXnZnKnbolkA3HpzNzxmxtq87q9quMMhkNx8XTc=
Subject key identifier: 21:F6:39:1B:8B:4D:74:7B:98:3F:92:58:38:6D:4D:BF:FE:96:0D:62
Certificate issuer: /CN=246d5c913452997968c721cca0c3ce0847c5c7db
Certificate serial: 018512E593A44A893DDF6606FBBF5DD18F54
Authority key identifier: 24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/IfY5G4tNdHuYP5JYOG1Nv_6WDWI.roa
Signing time: Wed 14 Dec 2022 23:08:33 +0000
ROA not before: Wed 14 Dec 2022 23:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57844
IP address blocks: 2a11:3c02::/32 maxlen: 32
2a11:3c03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:12:e5:93:a4:4a:89:3d:df:66:06:fb:bf:5d:d1:8f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246d5c913452997968c721cca0c3ce0847c5c7db
Validity
Not Before: Dec 14 23:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21f6391b8b4d747b983f9258386d4dbffe960d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:49:46:20:b5:1d:e4:6d:03:de:56:68:ee:
3e:aa:ed:bf:7b:45:6f:fc:26:0d:40:91:dc:97:64:
62:72:cc:56:ad:56:67:ac:bc:4f:ab:27:a8:d3:62:
45:c3:8d:8a:b9:ee:d0:61:48:b3:34:44:9f:1c:9d:
7a:4c:59:8e:61:69:93:07:68:4e:53:03:bf:48:44:
3d:78:ad:17:3f:66:b1:f8:28:b5:90:9a:25:ca:c9:
77:cb:92:98:40:ff:f8:b8:78:f2:dc:e1:79:7b:b0:
e0:00:46:d1:18:5b:cf:27:c9:74:83:cd:06:a9:3f:
ec:bb:50:38:15:c8:2a:df:05:28:31:97:6a:6e:a7:
41:ee:67:6d:a7:7f:4b:7c:b0:61:1c:51:2d:1f:c9:
18:f4:4f:d4:bf:37:22:9e:72:d0:41:3f:4b:9b:94:
d9:4a:82:6d:5c:74:78:a5:78:09:8b:9f:d9:97:ca:
68:cc:84:18:49:79:97:1e:6a:d8:3f:d5:1c:75:cd:
be:e9:f6:5b:60:82:30:54:b3:c1:6b:e0:77:66:9f:
71:c3:95:11:77:0c:93:a8:99:d8:34:83:8c:0a:27:
60:a7:ef:6e:73:f1:39:73:91:8a:19:cd:c6:a1:da:
ae:b1:c1:cf:34:6b:67:c6:ab:0b:c0:c8:c0:d1:50:
75:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F6:39:1B:8B:4D:74:7B:98:3F:92:58:38:6D:4D:BF:FE:96:0D:62
X509v3 Authority Key Identifier:
keyid:24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/IfY5G4tNdHuYP5JYOG1Nv_6WDWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/JG1ckTRSmXloxyHMoMPOCEfFx9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c02::/31
Signature Algorithm: sha256WithRSAEncryption
4e:90:6c:06:7f:25:c2:1d:5f:3b:ba:50:43:30:71:5d:01:a6:
73:87:b0:a2:30:bb:a1:85:75:4e:da:f2:62:b5:7b:9a:54:34:
9c:9e:99:ab:8f:44:1c:f5:13:7c:a8:57:ec:f1:83:af:e2:23:
a0:a2:05:8a:75:bb:22:72:e8:23:bd:d1:33:ff:2f:7b:59:43:
bb:0e:1f:7e:63:26:19:3b:b4:ef:30:ce:e6:c7:cb:8d:c6:5d:
e4:24:e5:c8:16:ad:82:3c:65:fe:8d:83:18:25:b9:b5:f9:ac:
b9:d5:d9:a8:df:72:75:d2:cb:22:54:c0:92:88:b4:a8:48:e8:
d4:14:1d:d9:ea:85:c5:bc:a1:38:40:4b:27:42:76:73:8d:62:
01:b3:1d:21:f2:cb:35:d4:4b:f6:ff:ca:c0:01:46:20:3a:b4:
f7:70:45:b6:4b:2e:c0:40:2e:ad:c0:c6:8b:a5:36:93:bd:a6:
06:54:e4:f2:e8:fe:9f:90:82:4c:1d:a2:90:ff:d7:71:9c:c4:
bd:17:66:b6:d1:c8:3f:c4:72:63:45:7a:10:f2:4c:81:57:48:
ba:f3:3c:fb:77:8c:30:b8:59:f1:43:2b:0f:a9:58:fe:fb:a5:
36:b1:05:6e:34:f0:a1:4d:69:99:24:fd:c2:9d:62:50:49:48:
f5:62:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:57 2024 by rpki-client on console-fra.rpki-client.org