Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/pe6xw2omWx6on3q-tqYL-u5-32o.roa
File: pe6xw2omWx6on3q-tqYL-u5-32o.roa (raw, json)
Hash identifier: Jf50+02RldWtxZVPY5RA1zYaqr0jPM/fEijEw25UaNg=
Subject key identifier: A5:EE:B1:C3:6A:26:5B:1E:A8:9F:7A:BE:B6:A6:0B:FA:EE:7E:DF:6A
Certificate issuer: /CN=df84f759a661f69f2acf1b7233fadc944920c557
Certificate serial: 018CEDB8800FF0E01EBB117BC24EC28782FD
Authority key identifier: DF:84:F7:59:A6:61:F6:9F:2A:CF:1B:72:33:FA:DC:94:49:20:C5:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34T3WaZh9p8qzxtyM_rclEkgxVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/pe6xw2omWx6on3q-tqYL-u5-32o.roa
Signing time: Tue 09 Jan 2024 10:15:40 +0000
ROA not before: Tue 09 Jan 2024 10:15:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a12:9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:b8:80:0f:f0:e0:1e:bb:11:7b:c2:4e:c2:87:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df84f759a661f69f2acf1b7233fadc944920c557
Validity
Not Before: Jan 9 10:15:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5eeb1c36a265b1ea89f7abeb6a60bfaee7edf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:34:83:27:fe:65:90:35:90:d7:e6:7a:22:8e:
a4:fe:6b:18:d8:83:80:e1:eb:a0:d7:5f:eb:15:1f:
3e:c9:ce:22:b5:97:67:a2:65:ac:63:60:84:88:58:
f1:10:9c:0f:9f:47:29:53:1d:3a:1f:99:e5:e4:be:
69:48:a6:62:3a:ed:9e:a7:7d:be:3f:3a:c7:28:e9:
e7:a1:25:54:e2:99:cf:d7:24:2d:72:fb:74:a4:79:
38:76:b0:b8:51:b0:64:84:1d:07:e8:a8:3f:e6:9e:
47:7e:ee:20:80:5f:c6:27:11:9e:06:aa:67:6a:b9:
fc:49:6c:77:9b:90:c1:60:39:32:09:5b:48:4e:5c:
23:95:2b:2f:ab:f2:e8:06:6c:62:ef:9f:bd:bd:1b:
00:79:a1:36:e2:80:25:2a:5d:6b:e7:53:ff:b5:10:
6b:4a:9e:49:1a:60:89:f2:81:ea:e0:d6:f0:5b:5a:
b9:00:4a:64:b9:db:13:5b:ad:c7:3f:96:a9:27:9d:
7d:e4:df:31:3a:e7:3e:b2:f8:fd:a0:9b:9f:97:ea:
2b:4f:c9:aa:c8:4e:cc:cb:d9:5f:9e:54:8f:6c:6a:
c7:77:26:53:6c:5d:59:13:ce:cf:97:fa:cd:28:c8:
c0:49:db:d2:b8:f2:6e:a9:29:c8:2e:d0:0c:2e:f8:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:B1:C3:6A:26:5B:1E:A8:9F:7A:BE:B6:A6:0B:FA:EE:7E:DF:6A
X509v3 Authority Key Identifier:
keyid:DF:84:F7:59:A6:61:F6:9F:2A:CF:1B:72:33:FA:DC:94:49:20:C5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34T3WaZh9p8qzxtyM_rclEkgxVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/pe6xw2omWx6on3q-tqYL-u5-32o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/756e9d-b410-42e0-969f-ee59e376f7ca/1/34T3WaZh9p8qzxtyM_rclEkgxVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:0c:b1:43:42:c1:d0:74:af:df:88:20:48:db:d5:32:0a:75:
f0:ef:39:e5:01:87:0a:dd:99:31:b4:52:1d:d8:e1:24:4d:f0:
60:b1:be:0c:82:cd:15:ae:3a:49:d1:b0:ed:8b:21:db:83:6f:
2f:ba:e7:6e:dc:cb:4f:28:8c:14:98:90:95:2b:35:67:07:57:
36:c3:55:05:fa:49:c7:f8:0e:c5:f2:bc:15:98:05:02:70:d4:
24:c2:c4:9c:d8:b2:4c:46:ed:e8:69:df:46:e3:2f:72:cb:15:
8e:c7:2b:97:9c:7e:ee:db:e3:66:fe:9e:02:bf:46:b5:cc:a6:
d1:8b:12:a8:75:ea:88:f0:95:21:e7:01:64:0b:d4:57:d4:77:
c2:fe:4e:05:cc:cf:e6:f7:c8:0f:77:66:f3:7f:13:5d:55:c3:
0e:b4:9f:7d:e4:5d:17:84:d6:62:23:75:b7:b1:59:2b:56:ee:
32:95:3b:22:da:3e:c1:a9:c6:f1:2e:81:30:8e:48:48:05:a0:
59:31:b1:5e:0c:fd:69:c6:90:22:79:67:ff:4c:8f:f6:4f:b2:
c5:8c:af:60:2a:d3:91:38:78:39:f5:17:96:15:fd:8f:eb:65:
60:7a:f8:2c:69:9b:94:f3:fc:31:8c:7f:86:5c:3a:75:3f:53:
bf:86:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 13:50:30 2024 by rpki-client on console-fra.rpki-client.org