Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/PApxNOwMmDM1uBIHAuXhENjEfak.roa
File: PApxNOwMmDM1uBIHAuXhENjEfak.roa (raw, json)
Hash identifier: XrYI3U0gtfZcicnKruUBe27bs4PcZDuhnplyOupqqaQ=
Subject key identifier: 3C:0A:71:34:EC:0C:98:33:35:B8:12:07:02:E5:E1:10:D8:C4:7D:A9
Certificate issuer: /CN=2a2caea2eed113867ad773b7b35809d386a803b2
Certificate serial: 018282FF04EFC53CD507AE54C11E8F7848D5
Authority key identifier: 2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/PApxNOwMmDM1uBIHAuXhENjEfak.roa
Signing time: Tue 09 Aug 2022 14:25:27 +0000
ROA not before: Tue 09 Aug 2022 14:25:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207780
IP address blocks: 2001:67c:360::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:ff:04:ef:c5:3c:d5:07:ae:54:c1:1e:8f:78:48:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a2caea2eed113867ad773b7b35809d386a803b2
Validity
Not Before: Aug 9 14:25:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c0a7134ec0c983335b8120702e5e110d8c47da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:07:9b:1c:7f:84:4a:9b:7b:9c:e5:5f:87:
7f:fb:46:16:d0:d2:27:d7:9e:ad:9b:30:fe:43:d7:
bc:40:35:a4:4a:9e:c9:f8:a9:fc:e5:8b:fd:5e:9a:
b7:8c:bb:65:f6:a9:57:2b:5b:9d:5e:38:d3:74:2e:
7e:f8:a3:6a:d5:45:bf:c6:72:aa:ee:ae:5a:33:b6:
ec:9c:3a:3b:34:22:b0:0a:42:19:63:9d:7e:99:78:
e1:97:01:84:17:49:3a:69:cb:5c:5c:82:96:1f:e5:
2f:36:85:e4:d7:de:5b:24:86:71:21:d5:16:d6:4c:
e9:6f:1e:f8:44:39:ae:b1:26:0c:e7:8b:e6:5c:d4:
10:fa:29:67:f7:5a:65:52:76:ad:4f:cf:f8:a5:c0:
e3:7b:68:23:2e:6a:dd:06:b7:cf:5b:4e:16:13:f2:
4c:30:54:b3:f4:1b:96:f8:48:8c:ae:63:ab:56:a6:
7d:af:e7:4e:02:8d:8b:c1:16:78:e6:db:23:a5:29:
f7:62:4d:6c:c9:13:40:f7:e9:09:b3:d7:ae:85:cd:
51:68:2a:6e:3f:78:a3:f4:f8:d6:bf:3b:ba:dd:16:
09:b1:93:99:d7:35:b9:02:34:0a:bd:11:e2:e8:c5:
73:db:d9:ab:84:c6:20:fc:44:8f:49:91:78:71:f7:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:71:34:EC:0C:98:33:35:B8:12:07:02:E5:E1:10:D8:C4:7D:A9
X509v3 Authority Key Identifier:
keyid:2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/PApxNOwMmDM1uBIHAuXhENjEfak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/Kiyuou7RE4Z613O3s1gJ04aoA7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:360::/48
Signature Algorithm: sha256WithRSAEncryption
aa:82:0e:ec:3c:20:77:90:fc:72:ae:e2:67:bb:51:e4:58:64:
08:5f:1b:c2:58:d5:8f:06:c4:af:6e:90:b6:0f:3c:50:a6:d3:
11:b2:ec:eb:26:a6:e9:ea:a0:b0:e6:30:fa:a3:d3:af:49:cb:
a9:bf:62:db:e6:47:7d:67:68:a7:e2:34:a0:b4:4d:98:5b:4a:
93:22:89:e9:51:a2:33:7c:72:d5:f6:f9:90:1d:2d:8b:1f:b6:
48:4d:09:8c:82:bb:2f:dd:d5:51:27:a5:3a:64:a8:fb:b7:78:
81:8f:fa:a0:37:66:0d:a3:e4:5a:c3:f9:46:a3:e9:c3:86:83:
1b:83:f1:bf:8d:d1:d0:12:98:7f:44:04:84:56:3f:74:b9:bc:
75:23:bc:77:04:52:ec:a6:88:ef:f2:42:4f:2e:02:7c:45:19:
54:05:6b:0a:c7:fa:be:ec:fc:69:ce:94:a0:3d:99:f7:4c:0d:
da:7d:e5:47:a9:a0:72:c2:d3:7f:92:20:da:8f:68:27:8b:cc:
22:42:b1:74:63:27:0e:26:a0:ea:49:20:ec:63:c4:32:eb:20:
a6:90:a1:f1:73:70:20:b4:d8:2c:4e:b6:ff:19:4e:a5:cb:89:
ab:50:45:7e:98:20:c5:d2:18:94:48:a7:3b:03:94:d9:88:4b:
c6:2a:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org