Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/UaFEIiG4DliThbvxUetlNdwPmKU.roa
File: UaFEIiG4DliThbvxUetlNdwPmKU.roa (raw, json)
Hash identifier: rN4q+FzxMZgN14lU+4CkI/mhSwLJhPai02yro97D1CY=
Subject key identifier: 51:A1:44:22:21:B8:0E:58:93:85:BB:F1:51:EB:65:35:DC:0F:98:A5
Certificate issuer: /CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Certificate serial: 018486C0697C1E0806DF8D9E8F55ADDBD5A6
Authority key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/UaFEIiG4DliThbvxUetlNdwPmKU.roa
Signing time: Thu 17 Nov 2022 18:01:07 +0000
ROA not before: Thu 17 Nov 2022 18:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:f080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:c0:69:7c:1e:08:06:df:8d:9e:8f:55:ad:db:d5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Validity
Not Before: Nov 17 18:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51a1442221b80e589385bbf151eb6535dc0f98a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:cb:06:40:3f:a3:c5:51:d7:0e:e0:c4:5f:
73:3b:f1:fd:7b:52:8f:c3:b6:19:b1:fe:1b:46:3d:
ad:f1:c2:5c:36:85:2a:1f:2d:d0:f6:0c:ee:15:68:
0a:31:ef:31:e6:ed:ef:9c:fc:c9:5e:05:d2:26:c8:
bb:76:69:ba:05:f0:38:92:57:4f:1e:cd:95:c9:92:
2d:a9:0b:58:e0:4e:50:64:81:69:59:6d:b9:47:ab:
fa:96:0b:c7:24:86:50:19:27:f4:af:d4:ac:31:54:
c6:d5:d7:17:71:b5:27:4e:4c:89:42:e8:95:c4:56:
61:40:db:f2:42:c1:a2:16:d3:c4:5a:03:d4:47:be:
01:c5:2a:91:18:e1:fe:39:15:e5:4b:63:8c:93:ae:
bc:19:72:83:9d:a2:d1:db:c1:95:ab:e3:38:df:0b:
a9:9d:43:fd:44:30:64:70:81:29:29:d1:0d:9a:93:
65:df:73:64:79:44:b5:0c:21:65:0b:42:1e:0e:83:
87:53:ca:ef:6d:38:1c:7e:34:09:19:61:48:45:16:
27:06:2f:fc:f2:63:ba:e4:85:a3:18:5f:27:e4:ac:
87:cb:56:1d:95:75:79:e1:01:92:30:7c:72:4d:65:
2b:1b:9f:56:e4:86:cd:5a:47:2b:b5:39:e3:66:77:
32:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A1:44:22:21:B8:0E:58:93:85:BB:F1:51:EB:65:35:DC:0F:98:A5
X509v3 Authority Key Identifier:
keyid:7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/UaFEIiG4DliThbvxUetlNdwPmKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f080::/29
Signature Algorithm: sha256WithRSAEncryption
66:1a:6f:81:6d:dd:8a:ba:03:ca:ea:f7:a3:9c:2a:89:0b:e9:
0b:29:2b:c1:ce:ce:59:ad:69:69:0c:bd:cc:54:20:10:65:f3:
5b:86:a7:04:ea:ba:09:bd:87:44:ba:78:82:f4:97:4a:7c:b9:
fe:b6:1e:2b:33:cf:51:fd:ab:88:bd:8a:90:b6:37:e5:b2:69:
be:8c:87:08:53:c8:73:21:f2:22:d8:0d:7b:23:00:18:d6:a3:
12:be:c0:0e:28:03:2d:5e:93:38:af:e6:b6:8b:00:4d:91:6b:
06:c6:98:c5:cd:60:49:df:da:84:3d:a9:81:d0:0b:b6:bf:30:
2d:60:5e:ef:f6:73:94:ca:28:54:4f:97:34:f3:78:59:c4:9e:
f5:89:66:cf:cd:23:3d:ea:82:ac:f7:46:ef:47:6a:5c:85:da:
47:8f:a8:9f:df:d8:6a:af:4a:88:a1:fb:ce:ef:e4:ea:bd:fa:
f8:53:1c:a9:a9:95:70:a8:a9:dd:44:6e:80:87:4e:82:b0:8b:
3e:d8:d4:49:54:8d:99:d2:88:22:b3:19:3b:4a:6f:f9:42:f4:
79:57:d1:90:a4:38:58:87:cd:e9:51:c7:86:97:26:6f:43:40:
c0:a5:9a:a4:f6:62:f4:56:96:8a:82:ac:e1:3b:28:fd:a5:24:
4b:e7:f2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:19 2024 by rpki-client on console-fra.rpki-client.org