Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/W0qLRHOE5k24kl98ujtEhbjHGLw.roa
File: W0qLRHOE5k24kl98ujtEhbjHGLw.roa (raw, json)
Hash identifier: wVFLEE+htopApzZykaDFo8mO0zMpvnT5Q/dNg5W9xsE=
Subject key identifier: 5B:4A:8B:44:73:84:E6:4D:B8:92:5F:7C:BA:3B:44:85:B8:C7:18:BC
Certificate issuer: /CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Certificate serial: 018CC64B48E91E388D6DD3D5464AD2903061
Authority key identifier: CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/W0qLRHOE5k24kl98ujtEhbjHGLw.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:f880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:48:e9:1e:38:8d:6d:d3:d5:46:4a:d2:90:30:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb4d7a7928d81f0e5f6c491ea5f2b7c587b9d9d
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b4a8b447384e64db8925f7cba3b4485b8c718bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b8:8c:96:7f:ed:bf:0f:c1:57:e8:6b:24:fa:
d4:53:bd:79:ee:16:70:ed:a8:53:ab:20:7e:7c:d3:
d3:3d:6c:ba:b3:6e:2a:b6:ec:c1:68:30:53:19:6e:
26:a0:d1:44:ff:28:9a:e3:91:34:e0:d6:ca:73:8a:
63:43:48:40:b6:b0:d5:d3:ac:f2:58:5c:f0:c1:ac:
de:ff:9f:cb:69:c9:24:b6:6c:86:1e:30:74:de:df:
35:23:15:81:1a:ef:03:d6:ee:73:c7:16:0a:f2:fc:
26:b6:c1:1c:02:2a:38:94:db:02:ea:e1:68:bd:d3:
a5:0d:08:ed:fe:9e:99:bd:3d:fc:bc:d3:41:21:86:
eb:00:74:44:9a:a5:15:34:b1:7c:0f:75:08:d9:18:
7e:38:ba:3e:13:30:f3:38:52:e3:87:86:92:e2:dc:
fc:7e:67:64:4f:93:34:c9:95:f8:a8:94:7f:df:2f:
73:ab:78:07:68:0f:58:7e:88:eb:13:dc:81:58:0b:
ed:4a:61:e2:2b:a7:37:b0:24:70:52:57:90:5b:a5:
f2:03:e4:e8:c0:26:06:e9:44:68:29:18:54:2b:39:
69:9b:1f:da:ab:46:07:12:38:1f:4b:8b:1b:2b:15:
c2:ca:ad:6b:24:4d:53:11:3a:fa:cf:a9:f9:e3:ad:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:8B:44:73:84:E6:4D:B8:92:5F:7C:BA:3B:44:85:B8:C7:18:BC
X509v3 Authority Key Identifier:
keyid:CD:B4:D7:A7:92:8D:81:F0:E5:F6:C4:91:EA:5F:2B:7C:58:7B:9D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/W0qLRHOE5k24kl98ujtEhbjHGLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/cc1041-e57d-4703-974b-cd2d8865edc5/1/zbTXp5KNgfDl9sSR6l8rfFh7nZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f880::/29
Signature Algorithm: sha256WithRSAEncryption
7a:50:83:d9:2a:cf:6a:16:b2:e7:9f:0a:c3:42:30:d1:46:b0:
b3:2f:4f:f8:89:76:81:5d:03:1c:58:49:49:96:4a:e4:95:66:
7e:c4:0b:b9:6b:26:20:a8:02:92:aa:60:5f:a5:34:e7:6e:e5:
36:9c:74:c1:eb:b4:b4:e6:65:02:37:4d:57:8d:72:d0:5a:87:
4b:0a:d0:dd:dc:14:ca:01:7a:c8:78:35:3e:55:e4:2c:b4:55:
2f:aa:e6:60:fe:99:14:81:5b:d7:59:b0:4d:a0:fa:f1:86:74:
3e:31:ec:ab:5d:1c:88:fd:85:ff:e8:49:cf:a4:11:03:69:6a:
24:20:90:3b:a1:fe:f1:72:59:82:f9:ec:af:4f:e2:cc:79:96:
a1:3b:71:4d:3c:5c:18:28:5c:ee:df:8b:84:cf:2d:36:45:15:
1e:bd:a8:3b:b5:7d:0b:d8:a7:d7:8c:c6:f7:39:4d:8c:fe:d8:
d9:a1:ec:08:5d:31:1a:31:a8:45:ce:d1:78:ce:97:a1:16:eb:
49:d9:54:75:af:a8:e0:07:83:cd:65:42:49:d8:d7:9e:4d:2d:
23:77:36:20:c6:25:20:4e:72:2b:ce:91:2f:25:4a:86:d8:54:
df:c9:e5:09:5b:c1:9a:41:fd:f2:90:45:04:4e:c5:ee:49:a9:
98:3d:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:02 2024 by rpki-client on console-ams.rpki-client.org