Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/u1WmpxIaVa3ZwKIfVOYiRyegLvs.roa
File: u1WmpxIaVa3ZwKIfVOYiRyegLvs.roa (raw, json)
Hash identifier: 9lxr6fYHOsRxRlypcXrE29O5NQjPE/I+i4jrIavRJ/I=
Subject key identifier: BB:55:A6:A7:12:1A:55:AD:D9:C0:A2:1F:54:E6:22:47:27:A0:2E:FB
Certificate issuer: /CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Certificate serial: 0182253800124F23051CCF89141E294B1FFC
Authority key identifier: 26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/u1WmpxIaVa3ZwKIfVOYiRyegLvs.roa
Signing time: Fri 22 Jul 2022 09:23:23 +0000
ROA not before: Fri 22 Jul 2022 09:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:9780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:25:38:00:12:4f:23:05:1c:cf:89:14:1e:29:4b:1f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26af6a0e490d980cd4bc0f8b0dfa105b497fe545
Validity
Not Before: Jul 22 09:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb55a6a7121a55add9c0a21f54e6224727a02efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:61:33:da:62:fb:cc:f2:b0:59:e1:fc:be:7d:
04:5d:51:a6:04:63:4b:b3:a5:bc:49:b1:9b:61:64:
a9:6d:4d:de:61:1e:bd:2b:58:86:71:cd:23:c0:74:
3d:a5:f0:18:d5:80:63:f0:71:a1:54:aa:1f:fe:5d:
1c:b2:d9:b1:f8:5b:fa:0d:de:02:39:f9:66:37:4d:
fb:e0:2e:87:bc:af:6a:4f:14:c8:f1:3a:95:af:db:
b8:c7:5e:c0:cc:55:bd:24:db:e9:7c:bf:b9:8f:f0:
9c:e8:2c:ff:4e:94:b8:7b:6f:f0:33:14:e7:b9:dd:
76:f5:6c:04:1e:3c:08:17:5a:42:fb:9c:a1:01:5e:
d4:1b:45:20:bc:81:bc:a5:f6:0b:69:3f:63:5e:34:
a7:c5:5b:4a:b9:24:ac:9d:46:51:51:cd:4b:40:77:
69:e9:30:0b:fe:54:cb:f6:68:d0:21:ad:53:8b:53:
da:7f:80:fd:45:42:aa:54:5d:f4:e5:5e:d9:4f:92:
a7:32:11:b4:53:30:53:80:e3:f8:4a:04:72:84:73:
28:94:09:0b:be:60:78:a7:1a:d5:11:9c:cc:15:3b:
a1:8e:47:ed:ba:fc:26:3b:5b:c4:1c:6f:23:df:b5:
6c:f3:8e:93:d5:e9:2e:46:40:3d:81:98:5d:da:40:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:A6:A7:12:1A:55:AD:D9:C0:A2:1F:54:E6:22:47:27:A0:2E:FB
X509v3 Authority Key Identifier:
keyid:26:AF:6A:0E:49:0D:98:0C:D4:BC:0F:8B:0D:FA:10:5B:49:7F:E5:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/u1WmpxIaVa3ZwKIfVOYiRyegLvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/c67c5f-66bd-4ad7-8c09-87c6b1a74079/1/Jq9qDkkNmAzUvA-LDfoQW0l_5UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9780::/29
Signature Algorithm: sha256WithRSAEncryption
72:7c:6d:e7:7c:75:83:65:53:d7:ed:58:08:53:5c:e9:0f:9f:
42:b4:0e:6a:58:9e:ef:83:97:d1:48:60:f3:26:f4:89:19:2d:
08:e9:cc:11:50:b6:35:0e:b5:9e:73:33:1c:d6:e4:6b:81:d0:
75:19:ba:e5:89:b1:84:ca:b7:a5:02:15:fb:3a:14:a8:b6:97:
5c:c2:ff:e3:fe:1e:be:5e:a8:5f:c1:48:ec:29:f9:47:2a:c4:
f3:e8:df:6a:16:b8:cd:1a:f0:e7:eb:48:03:57:aa:64:77:25:
06:1a:5f:89:95:fc:86:f0:65:c7:3a:e1:07:ab:56:e8:fd:cb:
c7:06:14:43:7c:4a:fe:25:85:dc:bc:80:21:2d:91:f1:d3:ed:
4b:35:32:67:8c:c7:f3:73:2a:04:ef:ec:db:14:ea:96:a2:03:
f7:bf:49:b7:34:75:c8:55:da:65:62:86:fe:4c:a9:07:93:8f:
93:12:d9:2b:e8:cb:34:1a:0e:05:ab:33:32:61:bc:fe:c0:2d:
2a:c5:bb:b8:bb:69:b6:aa:e4:37:57:24:23:e9:1d:dc:ec:b5:
e0:b4:d6:28:17:4d:62:e1:e9:55:50:cc:fc:9f:c8:52:5c:6b:
50:e7:9e:7e:7b:1c:77:ad:e0:81:02:5a:ab:c4:0f:c4:16:be:
a7:d9:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:33 2024 by rpki-client on console-fra.rpki-client.org