Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/t9iiljiHPx9EV6eNuuU5c0zquNk.roa
File: t9iiljiHPx9EV6eNuuU5c0zquNk.roa (raw, json)
Hash identifier: 5M5Q3TteYbkJoKt++LI6S/iDmBjAwLg36C2Tl3MeX9c=
Subject key identifier: B7:D8:A2:96:38:87:3F:1F:44:57:A7:8D:BA:E5:39:73:4C:EA:B8:D9
Certificate issuer: /CN=246d5c913452997968c721cca0c3ce0847c5c7db
Certificate serial: 0185C61235304CAA43C476B0C1F531C6B2B0
Authority key identifier: 24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/t9iiljiHPx9EV6eNuuU5c0zquNk.roa
Signing time: Wed 18 Jan 2023 18:09:20 +0000
ROA not before: Wed 18 Jan 2023 18:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 2a11:3c02::/32 maxlen: 32
2a11:3c01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c6:12:35:30:4c:aa:43:c4:76:b0:c1:f5:31:c6:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246d5c913452997968c721cca0c3ce0847c5c7db
Validity
Not Before: Jan 18 18:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7d8a29638873f1f4457a78dbae539734ceab8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:60:21:4a:aa:37:02:89:92:9b:57:06:69:27:
5e:ac:21:c2:07:8a:09:f5:5b:99:46:56:ec:bf:69:
67:8b:b9:89:7f:f2:a5:a7:7a:cd:55:66:c2:ad:46:
56:75:73:dd:d6:cf:2c:19:8e:65:4c:2d:ae:7f:c8:
93:3b:dd:35:b8:8a:cd:b3:45:8c:b5:3e:b2:14:d0:
60:1c:c3:11:4b:6c:9b:a3:f7:49:82:ab:1e:de:cb:
9e:95:00:31:dc:c3:3e:13:1e:28:01:84:fa:c0:0d:
eb:bd:e1:60:e0:e3:8e:fa:e4:d7:21:a2:f3:ae:68:
a4:6c:af:e4:49:18:03:93:16:08:0d:79:5b:7d:03:
f1:56:ef:b0:c7:4a:41:3e:9d:07:2e:c0:36:d9:3d:
2d:77:42:00:42:38:3d:7a:cd:81:98:e9:98:2a:9a:
9f:64:12:ef:e7:b4:2f:f2:7c:23:89:98:77:41:74:
c8:2d:93:59:dd:0d:f9:e1:ca:b8:fd:e4:95:f7:85:
ee:65:67:59:6d:2a:57:26:68:9a:d7:90:44:be:74:
f6:4c:d6:a0:ad:e9:ff:77:97:5e:06:96:cc:d8:f5:
0d:e4:42:0e:7b:e8:fa:ce:dc:f5:f9:9e:16:c2:e8:
c2:24:cd:25:20:d8:5f:c0:ff:5d:58:15:35:cd:32:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D8:A2:96:38:87:3F:1F:44:57:A7:8D:BA:E5:39:73:4C:EA:B8:D9
X509v3 Authority Key Identifier:
keyid:24:6D:5C:91:34:52:99:79:68:C7:21:CC:A0:C3:CE:08:47:C5:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG1ckTRSmXloxyHMoMPOCEfFx9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/t9iiljiHPx9EV6eNuuU5c0zquNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f0ca51-3619-425d-88c5-c50183ce42e3/1/JG1ckTRSmXloxyHMoMPOCEfFx9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c01::-2a11:3c02:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
66:66:b3:38:85:2b:d8:28:6a:e4:c3:d4:2b:43:36:f7:11:b9:
a0:5d:40:38:4e:95:c1:fe:85:dc:2c:34:69:6b:8c:fa:41:15:
cf:70:31:2f:12:77:d2:06:cb:1e:19:f2:d8:8d:5b:1c:92:fe:
56:71:0e:db:eb:11:8a:a4:55:e5:ac:f2:e7:f0:35:e1:31:4c:
e6:e0:4b:57:dc:03:89:ea:af:17:6a:6f:b9:be:c8:13:2b:fa:
08:37:57:b0:4a:55:c1:1b:0c:50:2f:44:0f:9d:52:60:fd:e3:
ab:f3:4a:dc:9e:b2:a6:d4:6a:21:62:7c:df:13:88:8e:be:21:
31:85:92:c1:0d:d9:8f:48:5f:4b:bf:13:65:2d:f9:b1:d7:cd:
10:89:a1:71:a7:12:ad:39:2f:f2:8a:05:ee:92:66:6c:71:72:
af:51:a4:b3:fb:a2:00:2a:5b:8e:db:4c:42:4c:fb:1e:71:32:
8a:29:a5:1e:5f:ce:aa:92:9d:4e:c7:23:99:ac:29:43:26:5b:
1f:78:fa:7f:99:db:7e:ed:29:ce:d7:b1:6d:2e:2e:80:6f:7f:
8d:f8:92:57:a5:23:91:02:4c:c0:e2:de:e5:3c:91:7e:5e:43:
e0:94:8a:75:79:10:76:7e:ff:d3:02:f2:67:d2:d8:6e:f0:09:
4c:63:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:49 2024 by rpki-client on console-ams.rpki-client.org