Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/TwAPHaiohs4GQx_GwUQqpKGuZg4.roa
File: TwAPHaiohs4GQx_GwUQqpKGuZg4.roa (raw, json)
Hash identifier: f4qlTFEL59qdyuBQcIDIbA/X79SWQskcO+ONu3x5A3g=
Subject key identifier: 4F:00:0F:1D:A8:A8:86:CE:06:43:1F:C6:C1:44:2A:A4:A1:AE:66:0E
Certificate issuer: /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial: 018237125C1B13FECBD6878542C3B209784B
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/TwAPHaiohs4GQx_GwUQqpKGuZg4.roa
Signing time: Mon 25 Jul 2022 20:35:26 +0000
ROA not before: Mon 25 Jul 2022 20:35:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:f880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:37:12:5c:1b:13:fe:cb:d6:87:85:42:c3:b2:09:78:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Validity
Not Before: Jul 25 20:35:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f000f1da8a886ce06431fc6c1442aa4a1ae660e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:b1:c0:9e:f8:f2:7d:33:24:18:ad:f2:fe:
ac:7a:4f:94:c6:8a:a0:81:3c:c2:f8:0d:27:05:d3:
6e:48:1f:73:07:f8:70:19:f4:fb:c1:94:37:ba:da:
e3:e6:cc:17:bc:e7:21:90:ac:ba:fc:4c:3d:80:a3:
09:12:7f:87:75:0c:6f:5a:4c:ad:55:27:e7:9b:a7:
f5:3d:d3:68:a5:f5:8a:f5:05:26:44:02:0c:18:d0:
9f:58:9b:8e:d5:de:33:bc:ce:a6:af:cf:c1:b7:f3:
d3:d6:d0:eb:06:a4:2c:fa:73:91:16:43:ed:ca:fc:
74:91:94:ca:e7:1d:c3:62:ae:3f:95:5c:c5:1e:f3:
33:ba:94:d8:20:8a:8b:e0:ba:d4:b8:e4:ca:13:70:
c8:c0:7c:60:a1:f0:a2:d3:9d:7c:47:9b:4b:f0:64:
fa:4c:46:19:5b:2f:68:aa:20:04:13:16:d3:9e:9f:
63:01:2e:ba:bd:5e:0d:92:11:b3:b0:79:5f:9e:47:
0a:49:0c:da:d0:3d:29:d8:6e:a4:0c:a6:b4:e8:d0:
67:07:d9:1f:cf:8b:3a:25:3a:dc:3c:01:09:e1:6a:
9f:7c:53:00:7c:ff:26:14:de:85:42:e1:4b:e1:42:
fc:50:b2:e9:3d:45:f1:3f:2a:98:d7:1f:15:15:b6:
9f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:00:0F:1D:A8:A8:86:CE:06:43:1F:C6:C1:44:2A:A4:A1:AE:66:0E
X509v3 Authority Key Identifier:
keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/TwAPHaiohs4GQx_GwUQqpKGuZg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
34:20:30:02:10:c6:5c:64:29:e7:d2:6e:97:06:bd:ef:ea:08:
dd:de:1f:ce:a6:70:89:21:27:93:ff:d4:59:ba:e6:f9:be:df:
21:98:d0:bd:8b:24:aa:08:d8:b4:fc:f5:ed:81:93:9d:97:49:
c6:55:21:40:3f:f8:e3:dc:05:7f:07:89:92:b2:2d:e0:3c:e7:
08:5e:24:9e:ef:57:88:1c:25:1a:fc:2b:71:56:7a:36:c9:b4:
97:a0:48:d0:a4:07:bd:8b:59:d3:34:0b:71:7e:bc:af:82:14:
b2:e2:82:82:61:4e:eb:1b:d7:0e:bd:34:ef:2f:34:c9:2e:f3:
b6:3b:96:0e:c5:5b:48:92:b3:c3:47:12:fa:ff:e4:c8:05:df:
fe:aa:2a:d3:ab:ec:a3:d3:c0:e0:2b:f6:9c:f0:d6:fa:4e:4b:
ef:fe:7d:b5:86:a4:2a:4f:bc:3e:55:54:7f:0f:b0:f4:f5:96:
bf:9c:39:6d:32:92:b2:9b:7f:11:79:92:db:78:89:69:a6:3c:
05:37:a5:a1:b7:53:b2:5b:81:4a:b6:51:3d:73:17:29:d7:6c:
f2:45:23:41:e0:5c:aa:0d:7b:99:f2:c9:10:c2:49:b7:d4:c0:
35:1b:83:22:d2:e4:ea:15:5e:f5:bc:57:da:1c:5f:aa:90:cc:
4c:b8:0b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:48 2024 by rpki-client on console-fra.rpki-client.org