Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/wiAsjydN1KvwXxX2Jq2Se6CT_ts.roa
File: wiAsjydN1KvwXxX2Jq2Se6CT_ts.roa (raw, json)
Hash identifier: BGioDIR49f4TgX7pRteW9880NqbpVpni0TEKZOAgmTw=
Subject key identifier: C2:20:2C:8F:27:4D:D4:AB:F0:5F:15:F6:26:AD:92:7B:A0:93:FE:DB
Certificate issuer: /CN=3d695fafd6126d11fdf0200ed73258598f97bd2d
Certificate serial: 018CC3B72E666E87F0562BC1AE37EB414A43
Authority key identifier: 3D:69:5F:AF:D6:12:6D:11:FD:F0:20:0E:D7:32:58:59:8F:97:BD:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWlfr9YSbRH98CAO1zJYWY-XvS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/wiAsjydN1KvwXxX2Jq2Se6CT_ts.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59891
IP address blocks: 2001:678:824::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2e:66:6e:87:f0:56:2b:c1:ae:37:eb:41:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d695fafd6126d11fdf0200ed73258598f97bd2d
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2202c8f274dd4abf05f15f626ad927ba093fedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:a9:55:bf:b2:ee:83:ac:4d:d0:42:39:da:
7f:b1:02:fe:3c:9c:f1:9e:77:b0:71:16:a0:37:94:
5c:62:2e:6b:5b:36:0a:c1:e5:3c:10:8a:34:16:84:
5e:e2:ff:8e:a5:da:2e:11:dd:5f:04:37:0b:5b:b5:
c4:f0:5e:76:50:ab:ed:8a:57:eb:50:b9:24:a8:9d:
a0:1c:0e:b4:c2:af:72:40:90:1e:94:4e:c5:c5:bc:
27:77:e0:12:d0:02:c3:f9:6b:28:f3:63:44:da:ba:
72:a8:55:2a:e8:6b:95:fe:aa:86:da:cd:e6:75:c8:
87:c1:01:55:1a:a6:81:08:aa:a2:4a:ce:a6:4d:9d:
2f:35:4d:ed:a1:88:ae:8f:b7:87:23:d0:b1:be:34:
72:df:99:53:92:12:80:ca:1f:b9:f4:63:ff:1f:5b:
c5:e8:57:71:31:de:d5:2d:32:5b:7f:e8:f0:05:ea:
a2:30:e2:d9:90:69:eb:81:fb:f5:e6:f2:a2:0b:4d:
50:15:b8:8c:a4:0b:3c:61:d8:e1:3b:87:72:74:72:
44:1f:50:b9:cf:52:e6:c7:76:c4:07:27:31:13:72:
f3:21:b9:a5:df:f2:7d:2c:fb:0b:ed:0f:05:6d:7e:
be:07:ec:5f:3d:b2:49:27:f0:0e:ac:bf:52:3e:98:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:2C:8F:27:4D:D4:AB:F0:5F:15:F6:26:AD:92:7B:A0:93:FE:DB
X509v3 Authority Key Identifier:
keyid:3D:69:5F:AF:D6:12:6D:11:FD:F0:20:0E:D7:32:58:59:8F:97:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWlfr9YSbRH98CAO1zJYWY-XvS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/wiAsjydN1KvwXxX2Jq2Se6CT_ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/182529-427a-47a0-9452-02f203e81df9/1/PWlfr9YSbRH98CAO1zJYWY-XvS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:824::/48
Signature Algorithm: sha256WithRSAEncryption
39:65:d6:cb:a3:ab:f6:9b:0c:d7:40:8e:e7:ef:a5:a8:64:50:
08:47:0d:a1:93:d6:a9:e7:4e:fd:1f:0b:83:11:a9:c2:e0:28:
c1:dc:a7:af:b1:c8:4e:d3:99:cc:c4:44:f9:32:30:9b:2b:8a:
ee:b3:99:95:5e:05:8c:88:92:23:38:e3:8f:57:1b:02:9e:53:
7b:00:c6:98:46:7a:61:28:10:3c:db:b6:5a:9b:2d:35:a3:f8:
62:b2:cf:5e:d9:3c:96:68:9f:f9:fa:39:15:45:c2:db:a1:6a:
47:c4:7b:9d:5d:10:46:f6:63:cb:be:3b:4b:4c:fc:b5:fe:f3:
36:f4:35:c2:33:d3:01:c5:8d:2c:f8:4e:18:2e:c6:9d:48:c0:
77:78:bc:49:a5:67:54:43:42:69:d2:1d:a1:19:8b:af:7e:a9:
8e:a8:4d:aa:82:35:df:45:95:c5:92:08:a5:a8:e0:93:7d:a7:
f1:e7:b1:00:4b:7f:68:1f:80:ba:4d:36:4d:a7:6d:34:00:b6:
87:ba:69:43:2a:1a:6b:8b:54:6b:92:2c:fa:4a:ae:76:30:d4:
4f:06:52:ab:d1:6a:e6:f2:f7:f2:e0:b8:73:63:e2:5b:16:9b:
2f:4e:27:e4:b2:e9:8f:05:26:4d:f9:82:e6:55:f6:bd:34:73:
33:9c:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:07 2024 by rpki-client on console-ams.rpki-client.org