Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa
File: rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa (raw, json)
Hash identifier: sxhP6zWRGLyuoj2ORGdbDe+0TiaXoHuwKGaGrp5TK0U=
Subject key identifier: AF:1F:59:65:E4:D8:5A:00:41:7F:AD:19:8C:40:BF:11:9F:42:EA:D1
Certificate issuer: /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial: 0187E84F1F6DD0B8E4023E815B039B6013F6
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa
Signing time: Thu 04 May 2023 19:48:32 +0000
ROA not before: Thu 04 May 2023 19:48:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a0b:ad00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e8:4f:1f:6d:d0:b8:e4:02:3e:81:5b:03:9b:60:13:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Validity
Not Before: May 4 19:48:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1f5965e4d85a00417fad198c40bf119f42ead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:90:12:bb:c2:ae:4c:d2:32:18:d1:6b:24:
e8:ef:8f:36:a4:b0:b2:b9:ce:a9:aa:a1:60:ec:f1:
d2:7c:dd:ae:a5:50:45:90:af:1c:e8:50:6a:8c:54:
58:93:04:53:62:1d:41:a6:7a:a0:9c:6f:3a:9b:77:
24:21:a5:d0:2b:41:3d:90:87:13:c3:15:6e:6d:b4:
cd:76:42:cb:17:96:1f:54:2d:e6:4c:3a:d8:95:58:
f0:45:d0:4d:98:5c:c0:46:05:ff:94:1b:ab:01:dd:
8b:c4:35:8f:be:ee:00:fc:f0:d0:4c:46:c7:49:a0:
16:99:4f:46:4a:75:39:00:60:db:fd:a2:53:8c:19:
33:02:b1:2b:55:5e:2a:89:36:c5:60:5d:0d:35:23:
9f:4c:cd:68:6d:2e:e1:0f:11:ee:23:fd:6c:2f:e7:
af:28:74:fb:52:fa:a5:82:5e:3a:93:08:d7:51:ff:
6c:f2:28:44:a7:cb:73:ee:36:3f:23:42:41:ef:7c:
18:ea:66:56:84:06:78:e3:21:6b:52:1f:93:de:16:
c6:bf:3e:ec:88:ff:26:d7:75:22:6e:31:34:77:a8:
15:96:fb:c4:60:bd:c7:a3:37:3a:e8:86:ce:46:81:
8c:be:79:d2:0d:7b:09:75:c7:5d:04:05:f1:dd:87:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1F:59:65:E4:D8:5A:00:41:7F:AD:19:8C:40:BF:11:9F:42:EA:D1
X509v3 Authority Key Identifier:
keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/rx9ZZeTYWgBBf60ZjEC_EZ9C6tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:ad00::/29
Signature Algorithm: sha256WithRSAEncryption
3e:2a:ba:bc:0c:b7:19:7e:6c:4f:fd:3e:78:89:58:b2:8e:b7:
59:dd:0a:27:94:0d:50:31:dd:e8:ed:ca:9e:6c:60:48:89:50:
b2:50:62:c1:c2:46:5a:e1:64:0f:e1:52:21:bb:a6:a4:37:e7:
39:c4:43:23:15:31:84:b1:95:9e:64:e2:2b:1b:f8:aa:77:c9:
e3:e0:75:67:a8:86:75:a9:bd:ae:0c:db:f6:06:ba:69:08:c7:
18:a6:89:d6:6b:6c:c8:b4:64:5b:59:47:4a:38:7d:81:5a:05:
1a:23:da:3b:96:57:d4:c8:2d:18:26:82:1c:6b:a1:d4:49:90:
fb:11:c8:46:4e:e7:fc:30:8a:e6:2a:27:86:d1:fa:1d:75:4c:
41:b6:aa:a7:f4:c9:71:16:68:66:c3:c3:01:b3:5d:23:95:2a:
7c:ae:57:94:05:75:26:0f:f2:e0:be:d4:2f:ca:99:cc:7f:50:
64:08:3c:a2:1f:2f:f3:54:ca:43:c2:6c:18:02:5d:66:a5:88:
cd:0c:0a:81:91:3a:80:45:b2:39:61:f4:50:99:64:70:c5:c1:
bf:a2:01:dc:62:cc:14:0f:51:64:2f:13:6d:81:71:e9:cf:7e:
fd:c9:57:f3:6b:20:f9:25:39:54:1a:dd:ce:a5:11:02:51:c3:
a3:cf:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:18 2024 by rpki-client on console-fra.rpki-client.org