Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ru4bbbLo-SgGoSGYd3ZABfW8gpM.roa
File: ru4bbbLo-SgGoSGYd3ZABfW8gpM.roa (raw, json)
Hash identifier: EqeSko6EQu8fpov/U3pxpooCWF99n8YASLLwFUJ+0fA=
Subject key identifier: AE:EE:1B:6D:B2:E8:F9:28:06:A1:21:98:77:76:40:05:F5:BC:82:93
Certificate issuer: /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial: 01856BD3536354179C6C5A21DEAEF658F473
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ru4bbbLo-SgGoSGYd3ZABfW8gpM.roa
Signing time: Sun 01 Jan 2023 05:34:49 +0000
ROA not before: Sun 01 Jan 2023 05:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:53:63:54:17:9c:6c:5a:21:de:ae:f6:58:f4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Validity
Not Before: Jan 1 05:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeee1b6db2e8f92806a1219877764005f5bc8293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9b:da:a7:1b:f6:fe:46:df:1f:e9:38:f0:b0:
9c:e5:e5:3c:0b:70:81:a1:bf:3f:6f:eb:51:23:fd:
78:1d:51:8e:08:0e:31:cd:f0:ea:50:5f:1e:ae:7f:
2f:f2:f1:a1:a1:b0:5b:46:fb:12:ee:68:09:44:89:
98:1a:dd:34:ee:13:ec:00:9a:5a:38:10:df:8d:a7:
96:ca:b1:9d:05:e1:c0:e1:d3:5c:68:a3:7e:b9:c5:
6d:06:4f:9b:5e:01:02:eb:7d:46:1a:42:22:9f:42:
81:68:75:d5:02:5a:d6:50:a6:c7:35:12:21:33:6d:
3e:77:4d:2f:b7:74:36:a0:96:cf:24:be:2b:6c:bb:
ac:f6:72:c3:9d:12:d0:4e:b6:db:f8:22:30:72:7f:
88:36:56:33:0a:04:5c:d0:09:ca:a0:90:19:1d:46:
18:82:44:58:9e:d4:d6:20:10:74:40:44:c6:c3:87:
df:70:d7:ac:af:3f:ac:a2:99:d0:c1:d8:24:f1:d4:
a7:10:e2:fe:8e:5f:93:db:98:6b:e6:f3:e3:47:ee:
af:93:9a:e2:bb:79:07:e7:21:e7:88:0f:b2:14:d3:
3e:f6:81:2a:6a:19:58:0d:8d:93:c5:3d:43:c2:5c:
ae:56:4e:b2:e5:53:9e:60:b4:ef:da:98:73:46:47:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EE:1B:6D:B2:E8:F9:28:06:A1:21:98:77:76:40:05:F5:BC:82:93
X509v3 Authority Key Identifier:
keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ru4bbbLo-SgGoSGYd3ZABfW8gpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:140::/29
Signature Algorithm: sha256WithRSAEncryption
1b:27:8a:42:41:70:66:0e:53:c8:0b:8e:3e:31:f3:4b:81:80:
aa:0b:7b:cd:d2:55:81:df:66:fb:5f:2a:96:61:ac:75:2c:26:
47:d9:21:ac:f0:1e:77:b3:37:16:fc:00:4a:40:8e:64:8b:3d:
6e:a7:4a:bd:02:c1:c1:cc:94:57:4a:be:22:66:f3:55:ea:b3:
a1:88:2a:5a:43:47:bb:c9:21:fc:6b:d5:ec:de:01:e7:b7:60:
4f:34:4d:df:29:4e:fb:05:87:33:9d:37:9d:fc:1e:fd:40:78:
dd:ef:7a:a1:42:7d:d0:00:97:ef:dd:73:e3:8d:7b:c2:26:76:
e7:05:69:7b:7d:1a:21:ea:72:45:08:c3:e6:63:aa:51:d3:1b:
8c:c2:b2:1a:9f:ce:b7:b6:62:9f:97:9b:c3:58:c1:15:be:f8:
1c:cc:7e:81:6c:9a:5a:12:92:2d:ac:6a:8a:d5:ee:5f:f6:ff:
24:02:be:87:aa:b6:06:e6:fe:d7:22:eb:ca:58:45:65:d7:30:
00:dc:58:60:5f:b4:f8:fc:94:54:54:44:62:bf:b0:d0:a4:1c:
03:49:fd:87:8e:5f:1e:19:1b:46:2f:a4:45:20:d7:5e:1b:80:
88:e5:b2:6d:58:dc:b7:ad:50:22:5b:30:a6:99:c8:50:78:e4:
1c:6d:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:01 2024 by rpki-client on console-fra.rpki-client.org