Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/XcXnRYsBR-Vosh1hRwoxpx_1KkM.roa
File: XcXnRYsBR-Vosh1hRwoxpx_1KkM.roa (raw, json)
Hash identifier: v0NCPbYdfCZqbahjoTrIngEndEvs5SFaOD7c+r7gNS8=
Subject key identifier: 5D:C5:E7:45:8B:01:47:E5:68:B2:1D:61:47:0A:31:A7:1F:F5:2A:43
Certificate issuer: /CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Certificate serial: 01869B1F011AE12C2F7ED42965A854E1A55A
Authority key identifier: E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/XcXnRYsBR-Vosh1hRwoxpx_1KkM.roa
Signing time: Wed 01 Mar 2023 03:02:25 +0000
ROA not before: Wed 01 Mar 2023 03:02:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206271
IP address blocks: 2001:67c:be4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9b:1f:01:1a:e1:2c:2f:7e:d4:29:65:a8:54:e1:a5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06dfd388bd65791b8280d4678bb6ef07c9f5d7b
Validity
Not Before: Mar 1 03:02:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5dc5e7458b0147e568b21d61470a31a71ff52a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:56:cc:ee:e6:da:f7:84:e2:cc:0f:3b:59:
bc:3a:af:73:b3:12:74:63:c8:33:02:67:bc:ef:80:
9c:8b:1e:15:65:c4:87:7b:ee:f9:e4:dd:a4:ed:76:
2c:fb:43:71:50:fb:08:97:ee:f2:bb:f4:2b:fc:7a:
95:92:0d:ba:7a:d6:9a:da:a3:8e:f6:ad:df:d8:e9:
b2:07:de:a5:97:dd:ac:f0:a2:36:d3:b7:a4:82:22:
e4:a9:a2:d7:e7:d7:c1:41:eb:d3:22:05:59:88:36:
06:48:bb:91:00:9a:bc:90:50:9a:4a:e3:95:1b:c2:
13:c3:f0:a4:16:ff:f2:b2:9c:20:f3:cd:bb:c0:97:
4e:1c:0d:bb:d8:97:68:fa:af:a1:55:4e:eb:60:e4:
ea:20:c3:14:44:e7:ab:2c:48:e4:8b:ae:14:4e:01:
9e:b8:f1:21:36:75:0c:1f:4d:6c:bc:37:af:57:b3:
7a:16:29:06:6a:2a:83:34:5d:00:79:ad:3b:df:0c:
d4:68:33:25:67:22:60:36:ab:58:28:50:98:bd:ea:
cf:b2:b5:aa:96:f1:68:92:fc:01:0d:ae:7d:d0:0e:
6f:2f:3c:31:72:3d:3a:3a:6f:a9:70:09:da:67:00:
08:35:08:b5:2d:56:8c:5e:27:47:10:d1:e8:38:92:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C5:E7:45:8B:01:47:E5:68:B2:1D:61:47:0A:31:A7:1F:F5:2A:43
X509v3 Authority Key Identifier:
keyid:E0:6D:FD:38:8B:D6:57:91:B8:28:0D:46:78:BB:6E:F0:7C:9F:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4G39OIvWV5G4KA1GeLtu8HyfXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/XcXnRYsBR-Vosh1hRwoxpx_1KkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e9e8c3-7fcf-448e-8390-caf8db0e930e/1/4G39OIvWV5G4KA1GeLtu8HyfXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:be4::/48
Signature Algorithm: sha256WithRSAEncryption
cd:fd:4f:39:62:03:0a:35:03:5c:21:d2:cf:ea:06:2b:99:1d:
66:1f:cb:08:28:88:5f:69:2f:6f:db:e4:49:81:98:1d:ec:c3:
f3:e6:9d:c4:7e:62:54:37:b1:b8:90:d9:b3:15:05:48:a1:14:
17:89:1e:bb:ef:0c:5d:6e:4c:b5:8e:f6:e8:5e:df:ce:31:8f:
22:0e:51:6a:ec:d3:b0:21:e4:3b:74:74:4f:b6:2e:9b:be:50:
f4:89:e4:42:1e:c1:9d:12:49:96:82:be:6c:a0:eb:3e:1d:26:
27:03:e3:bc:4c:aa:c8:c6:80:5d:e8:02:1c:5c:6b:e3:fb:2d:
79:9e:a0:8b:fc:3b:ae:4b:51:2a:8c:cd:cd:0f:59:4e:b4:08:
35:ea:c7:d0:04:9e:79:ee:b7:c5:da:4d:d2:ae:cb:43:d1:ae:
f0:a5:d9:49:ed:a7:3e:0b:c1:65:a2:8e:26:fd:05:cc:46:fd:
e6:df:2c:71:0d:04:0e:64:a8:b7:a7:7d:90:fc:0e:97:50:3a:
7f:3e:d6:81:88:92:94:b0:c8:09:ee:f1:6b:45:a1:6d:10:8c:
ed:50:96:8e:b0:b7:83:88:d6:0a:a2:3b:4f:76:63:d5:cc:67:
2b:b2:21:a8:8e:4f:87:a1:ee:d6:24:8d:c4:19:fc:ea:8c:81:
5c:5a:4d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:11 2024 by rpki-client on console-ams.rpki-client.org