Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/eYZWr9ovTkL7H_FdfHPtmtmo8FE.roa
File: eYZWr9ovTkL7H_FdfHPtmtmo8FE.roa (raw, json)
Hash identifier: WfnTpssb6VBAIvzyhX9/hsWe6IVc73rrzWoswkOhqPM=
Subject key identifier: 79:86:56:AF:DA:2F:4E:42:FB:1F:F1:5D:7C:73:ED:9A:D9:A8:F0:51
Certificate issuer: /CN=2a2caea2eed113867ad773b7b35809d386a803b2
Certificate serial: 01856FF02833D8EF738712D9EFB2D370D072
Authority key identifier: 2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/eYZWr9ovTkL7H_FdfHPtmtmo8FE.roa
Signing time: Mon 02 Jan 2023 00:44:47 +0000
ROA not before: Mon 02 Jan 2023 00:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57330
IP address blocks: 2001:67c:2964::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:28:33:d8:ef:73:87:12:d9:ef:b2:d3:70:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a2caea2eed113867ad773b7b35809d386a803b2
Validity
Not Before: Jan 2 00:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=798656afda2f4e42fb1ff15d7c73ed9ad9a8f051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:35:55:90:e1:9f:0b:51:96:76:b5:09:1b:cd:
3c:42:04:b4:2e:51:ac:a3:6e:bb:1a:e0:da:49:35:
19:74:04:fc:59:0e:82:3f:54:0f:f1:50:2d:da:a6:
f4:e4:0a:9f:20:b9:a5:d3:90:a8:85:a4:8f:32:82:
eb:19:17:c2:e9:ac:a4:08:a7:48:25:a3:8d:5c:9f:
97:1d:67:64:bb:ff:e6:1c:8a:8d:ca:a1:b8:b4:39:
fc:ca:f3:9d:a4:ef:93:64:73:b2:30:7a:9f:70:d1:
20:92:0d:2d:c3:46:34:27:67:a0:c1:20:08:46:96:
d0:37:e7:96:e2:7d:30:cf:bc:9d:ca:c7:c7:34:d2:
91:48:c9:c1:87:f2:17:14:ff:ef:5b:1e:72:f2:05:
91:8a:bb:6c:af:e8:2d:b3:9e:cf:81:9b:67:0d:f7:
97:5a:d1:0a:98:55:36:ae:84:1a:7d:80:07:e3:e3:
2b:37:71:a9:b9:cb:bb:b1:75:70:ef:f6:4d:e8:e6:
b5:0a:34:9b:38:27:31:cc:91:76:bf:aa:03:e7:81:
d5:ce:4a:3e:03:f7:54:46:58:48:3f:24:73:a8:e3:
ff:3a:a9:39:f6:40:eb:59:c7:4e:b2:61:72:36:4a:
50:8f:c1:38:3e:3e:a0:b4:8c:32:77:bd:22:2c:0a:
fe:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:56:AF:DA:2F:4E:42:FB:1F:F1:5D:7C:73:ED:9A:D9:A8:F0:51
X509v3 Authority Key Identifier:
keyid:2A:2C:AE:A2:EE:D1:13:86:7A:D7:73:B7:B3:58:09:D3:86:A8:03:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kiyuou7RE4Z613O3s1gJ04aoA7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/eYZWr9ovTkL7H_FdfHPtmtmo8FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5e4da1-82df-4268-9c92-2a37822e95ac/1/Kiyuou7RE4Z613O3s1gJ04aoA7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2964::/48
Signature Algorithm: sha256WithRSAEncryption
49:4f:43:d1:b2:23:ab:4d:10:8b:f6:95:1d:d1:b7:d5:7b:95:
3c:3c:bc:5b:5a:77:f9:66:34:1d:a3:ef:be:1a:6d:e6:71:ca:
45:9f:66:0e:ed:3c:99:f7:e2:5f:1f:7e:1d:a6:6c:2e:f7:76:
5a:65:3e:3e:23:06:1c:d4:99:ee:95:ba:a4:a9:e6:17:ad:3d:
6e:b7:8d:1a:f2:55:81:a4:6b:d4:b8:dc:e3:73:31:86:0f:d1:
59:87:ca:a9:be:02:ed:d7:cf:cd:d7:04:1c:24:b5:24:55:11:
fb:e8:26:a2:3c:e3:7f:96:cb:9a:ee:8c:21:2b:d9:ef:1e:84:
ce:27:27:99:60:23:9e:a0:e5:b0:9a:21:f5:53:55:80:a6:a7:
09:72:33:f0:1a:b4:93:51:80:12:a4:c3:fd:dc:ee:65:90:ed:
38:61:c7:7f:14:9f:5f:c7:7d:e6:e0:12:b3:76:36:93:23:e2:
cf:3f:ec:60:26:62:43:dc:28:8a:a9:31:0a:20:ea:92:5e:6b:
8e:9c:a2:bb:a8:d9:c9:f1:82:05:7b:10:9d:97:89:ec:90:7f:
0b:a5:73:27:1b:c9:b9:b3:bc:99:ad:bf:3d:5e:97:0f:89:33:
b2:b7:aa:9a:da:21:cc:0b:de:bc:17:86:a6:9f:99:79:5f:f7:
3c:0d:70:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org