Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/W5m5nOpftvrePRl-I-LXT1JpHSY.roa
File: W5m5nOpftvrePRl-I-LXT1JpHSY.roa (raw, json)
Hash identifier: d1vbiG2xaAiukwpq/F1cQ2G+G9Sh3m3aucX7Cqr3e+Q=
Subject key identifier: 5B:99:B9:9C:EA:5F:B6:FA:DE:3D:19:7E:23:E2:D7:4F:52:69:1D:26
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 01890B5FD88CA35FD7CC0577E9D55E0D6323
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/W5m5nOpftvrePRl-I-LXT1JpHSY.roa
Signing time: Fri 30 Jun 2023 08:16:17 +0000
ROA not before: Fri 30 Jun 2023 08:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 2a09:3705::/32 maxlen: 32
2a09:3704::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:5f:d8:8c:a3:5f:d7:cc:05:77:e9:d5:5e:0d:63:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Jun 30 08:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b99b99cea5fb6fade3d197e23e2d74f52691d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:6e:23:a3:98:ba:a8:7b:3b:03:81:5e:e7:
db:bc:fb:b0:d6:1a:2c:62:cf:91:7d:c4:8a:56:71:
01:21:56:ad:6a:d1:a0:f7:27:2e:00:b0:f9:d6:61:
5d:71:6f:0f:bd:1f:c9:00:24:e9:f8:22:a6:5e:d9:
16:d6:23:cc:bb:a7:51:3b:90:f2:69:fd:51:ff:37:
36:58:fc:e6:5e:9f:bf:9e:fa:45:53:78:40:c1:17:
e5:b7:88:94:71:07:40:e6:c0:20:44:6d:83:32:63:
70:66:4f:29:2e:48:bc:61:ba:b1:a3:95:90:64:71:
99:81:65:ee:03:ad:00:64:fa:f9:10:71:28:97:cf:
14:c8:94:db:c3:5e:a4:28:c4:a2:06:dd:43:5c:b8:
fe:e7:fa:af:1d:73:50:50:ed:ac:85:95:70:73:e1:
01:48:69:73:df:aa:b4:13:67:2c:1d:99:a0:f5:1c:
1d:aa:48:31:4e:c2:e7:f5:34:57:83:34:d9:a7:04:
ee:6c:24:80:11:46:2e:ad:89:80:45:12:0f:7a:f3:
40:89:26:e1:53:50:9d:1e:36:6f:23:89:8c:59:f9:
3a:45:28:03:df:cc:33:7f:4b:9e:05:55:67:17:1b:
e3:8f:ee:63:d7:fb:2b:03:a6:74:d7:9a:0e:7e:3f:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:B9:9C:EA:5F:B6:FA:DE:3D:19:7E:23:E2:D7:4F:52:69:1D:26
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/W5m5nOpftvrePRl-I-LXT1JpHSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3704::/31
Signature Algorithm: sha256WithRSAEncryption
37:0c:eb:a9:34:8a:e6:14:a8:e9:3d:9c:49:d1:16:e3:32:9a:
10:be:a7:ab:be:4c:b7:36:aa:ea:c1:5d:e7:b6:a8:13:b6:3b:
76:7f:e4:ab:89:15:24:27:66:ea:9a:7d:25:0d:02:93:db:c1:
f2:9c:94:6f:f7:f5:e9:11:09:95:b5:3b:4d:74:38:98:26:d3:
17:76:43:0a:03:19:8f:8d:27:b9:6f:a2:e3:cd:8a:6c:93:8b:
ad:f6:40:63:c8:61:48:19:85:7c:7b:3d:df:9f:fc:38:54:f6:
91:8a:f7:77:76:f1:eb:58:d0:04:ce:bf:87:5d:2c:93:3b:3b:
1c:64:28:83:5e:bf:d3:00:83:74:35:8e:63:08:0a:d6:29:f3:
b9:3b:6c:92:d4:5a:2a:d3:52:df:22:ca:8b:2b:66:46:08:fd:
c5:bd:a2:d2:38:73:86:f8:af:dd:75:58:a8:33:a5:d3:9d:bc:
87:2e:b5:5e:a4:61:87:e1:1e:09:d9:c0:c1:f4:f8:72:58:e8:
ad:e6:ce:4c:f2:d7:b1:8c:af:20:8c:9a:68:8c:05:52:90:6d:
5b:a7:1b:38:39:64:3b:9b:33:7a:4c:d6:01:e0:f4:9e:4e:f7:
43:d2:7a:89:3c:2e:3a:21:2f:21:76:17:dd:d7:f3:ba:ce:b1:
55:84:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:59 2024 by rpki-client on console-ams.rpki-client.org