Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/zNk49BBuQJq0kGELWkObgKKvr90.roa
File: zNk49BBuQJq0kGELWkObgKKvr90.roa (raw, json)
Hash identifier: Tw0KMzYHz/GPCh5husfikZMZG0FG4NilYiIHrPsa+T8=
Subject key identifier: CC:D9:38:F4:10:6E:40:9A:B4:90:61:0B:5A:43:9B:80:A2:AF:AF:DD
Certificate issuer: /CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Certificate serial: 0185730CC242F64ACD6B3F9E4B3BBBCDD20C
Authority key identifier: 7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/zNk49BBuQJq0kGELWkObgKKvr90.roa
Signing time: Mon 02 Jan 2023 15:14:54 +0000
ROA not before: Mon 02 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:f080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:c2:42:f6:4a:cd:6b:3f:9e:4b:3b:bb:cd:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7edd7c8d69327f0b5651c5bff187428e8b2f3c94
Validity
Not Before: Jan 2 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccd938f4106e409ab490610b5a439b80a2afafdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:c1:dc:fd:cd:29:2e:01:fc:0f:42:3e:b5:f6:
dd:04:56:43:f6:30:a4:7a:57:63:4a:81:8b:b0:24:
6a:d1:de:8c:ef:15:88:9e:53:bc:6b:2f:85:73:d9:
b0:14:60:f5:e8:46:5c:63:03:0a:ce:f0:42:02:c0:
40:23:e5:b9:56:e8:1d:45:62:6f:af:44:d1:ee:c8:
ca:1e:b6:d5:9b:be:a3:ac:af:44:4e:5a:5d:71:fb:
7c:5d:66:46:1c:13:34:d4:9e:88:b4:4b:e8:c0:3d:
23:cc:b2:3c:54:cb:45:43:78:68:93:dd:9d:ba:e2:
ed:75:3e:23:51:6f:f6:69:af:8c:8b:cb:d0:93:2d:
d5:44:fe:c7:1c:16:05:07:e6:93:cd:22:19:46:30:
e0:36:d3:79:1d:4e:51:6e:e6:6e:66:8f:81:70:b5:
5f:6c:67:da:12:33:b4:81:c7:11:46:c7:84:37:23:
10:68:b3:00:80:6a:fd:7e:67:3d:c6:82:6e:1a:e0:
46:72:e4:d7:a7:00:81:26:ca:b8:0d:b2:36:28:11:
98:b0:9e:55:23:4a:0e:1e:df:bc:91:9e:4a:de:74:
05:4f:00:d6:6d:c3:78:fd:e5:8e:e4:3f:e6:d5:49:
ae:ca:a4:68:74:6c:c1:e3:79:17:cb:d9:1a:18:89:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:38:F4:10:6E:40:9A:B4:90:61:0B:5A:43:9B:80:A2:AF:AF:DD
X509v3 Authority Key Identifier:
keyid:7E:DD:7C:8D:69:32:7F:0B:56:51:C5:BF:F1:87:42:8E:8B:2F:3C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ft18jWkyfwtWUcW_8YdCjosvPJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/zNk49BBuQJq0kGELWkObgKKvr90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/534252-d50a-409a-9b14-9c455a636756/1/ft18jWkyfwtWUcW_8YdCjosvPJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f080::/29
Signature Algorithm: sha256WithRSAEncryption
5f:d3:df:b1:37:1e:7f:15:74:70:76:69:c7:f4:27:14:72:64:
de:0b:ff:7b:58:1c:0d:58:fd:27:d4:b4:17:80:21:d4:b2:d9:
90:fc:10:c2:63:8b:2b:2c:2e:ea:dc:bf:0a:0e:6b:79:7c:dd:
fe:ec:71:c2:e5:25:03:89:3d:f1:ee:0f:75:d0:2d:4c:82:96:
e2:9c:f3:7f:86:c4:49:5c:20:dc:eb:52:ed:23:e8:55:77:8a:
e9:21:7e:03:ee:ae:65:c5:9e:96:1d:bf:a2:5e:49:77:98:5a:
b4:24:19:af:0e:99:cb:69:51:ea:8d:67:71:98:8a:3d:7b:b0:
b4:e9:18:87:5e:c6:b9:92:ae:91:70:4c:2c:0d:83:c8:4e:8d:
87:72:18:ad:4b:2e:e7:a4:78:8a:5c:1f:1f:01:46:3b:93:4e:
a4:d3:b9:9e:8c:a1:2b:92:e4:99:a6:72:ff:6f:6e:4c:d2:95:
cc:eb:0d:c4:01:33:0b:6f:fe:dc:2a:c2:59:66:81:46:2a:af:
66:71:84:da:5b:f9:f6:64:58:a7:14:ce:81:a3:fa:e7:58:71:
28:b7:29:ea:b8:24:aa:6f:2c:70:c7:37:65:3f:70:69:bf:71:
1c:12:59:c3:c5:8c:b1:1a:17:12:1b:da:43:7d:46:1c:b0:84:
c2:42:d8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:42 2024 by rpki-client on console-ams.rpki-client.org