Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/Z-VQ2saKNKYeLak9BNRIfULHELQ.roa
File: Z-VQ2saKNKYeLak9BNRIfULHELQ.roa (raw, json)
Hash identifier: P//bJzQEo7SrC7eB8ESqgfIaAUZ36+Uy1C+PMiwELDs=
Subject key identifier: 67:E5:50:DA:C6:8A:34:A6:1E:2D:A9:3D:04:D4:48:7D:42:C7:10:B4
Certificate issuer: /CN=612102634204bfc1aa7ce81d70187f6b764ab10d
Certificate serial: 018215CAC3D85CF9C2063268EA6CC88512C3
Authority key identifier: 61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/Z-VQ2saKNKYeLak9BNRIfULHELQ.roa
Signing time: Tue 19 Jul 2022 09:29:46 +0000
ROA not before: Tue 19 Jul 2022 09:29:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207334
IP address blocks: 2a0c:1a40:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:ca:c3:d8:5c:f9:c2:06:32:68:ea:6c:c8:85:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=612102634204bfc1aa7ce81d70187f6b764ab10d
Validity
Not Before: Jul 19 09:29:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67e550dac68a34a61e2da93d04d4487d42c710b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:b4:49:2c:3c:0a:b5:fb:6c:27:21:a3:78:
96:3c:9d:27:ea:88:bf:e9:13:49:0e:f7:f1:a9:57:
b3:f4:bf:85:93:f4:a9:e2:56:53:cb:d3:86:3f:2f:
e7:5a:7b:32:07:2e:66:90:48:00:78:5f:ce:4e:83:
c6:32:6c:93:cc:14:7b:2a:1a:ac:54:b6:9a:ee:df:
f3:9f:e0:f4:e0:1f:b5:ad:46:36:88:fa:5d:dc:b3:
3e:92:63:a3:dc:71:6a:c0:ec:10:e2:c3:63:80:9a:
47:67:91:ea:3f:96:0e:db:28:46:3a:ff:f0:f2:55:
46:ec:92:e5:f9:e2:28:07:51:3f:15:bf:63:3d:26:
2e:95:eb:d7:4a:e8:6f:32:39:93:b4:24:bc:4c:78:
42:41:05:0a:bb:e1:f6:ee:fc:2e:da:c0:5e:a3:69:
04:39:53:7a:64:0c:32:3c:54:af:9d:65:8f:28:4e:
a7:19:2e:a6:7c:76:ba:9c:81:0a:33:04:e8:85:a7:
8a:92:12:45:b2:bc:3e:43:00:ed:77:d6:02:d0:15:
6f:ad:56:b3:02:6b:00:d6:79:98:6f:35:0c:06:9d:
de:ad:f8:16:07:b1:61:aa:a2:55:eb:47:a6:18:5d:
ab:07:46:ab:77:72:9a:a6:7b:13:80:03:a3:9f:a1:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:50:DA:C6:8A:34:A6:1E:2D:A9:3D:04:D4:48:7D:42:C7:10:B4
X509v3 Authority Key Identifier:
keyid:61:21:02:63:42:04:BF:C1:AA:7C:E8:1D:70:18:7F:6B:76:4A:B1:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/Z-VQ2saKNKYeLak9BNRIfULHELQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e74249-250a-4524-bc8b-33e6bd58b521/1/YSECY0IEv8GqfOgdcBh_a3ZKsQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:1a40:1000::/36
Signature Algorithm: sha256WithRSAEncryption
36:69:23:f2:79:ad:2a:ca:ea:67:90:a4:0c:b2:29:98:ea:57:
eb:b1:a2:b8:47:38:95:0c:ea:ca:5f:8c:40:1f:a9:90:cd:3c:
d6:25:ae:af:6b:ec:30:c5:4e:39:b2:23:46:8d:df:9c:cf:8b:
8b:36:1b:9e:9f:ab:cd:1e:2a:f3:87:47:a9:46:39:4a:d2:1a:
cf:33:d7:cb:f4:8a:b3:02:bd:62:3d:37:a9:09:9a:8f:09:43:
42:84:bf:6c:8a:17:33:bb:3f:1d:be:67:8c:91:0a:3d:a1:f2:
6b:78:1a:c8:0e:7d:a3:ff:37:07:de:d1:b5:91:e4:83:4b:97:
18:e8:44:b4:a8:ea:2d:ba:6f:b7:14:f9:76:12:60:7a:da:ad:
58:25:55:db:30:f9:61:9c:e8:ca:9d:93:65:76:5d:c0:07:f5:
97:0a:99:29:83:a6:18:e6:49:8c:f9:df:69:99:de:08:ab:fc:
ae:e3:e3:b1:ed:f1:89:8c:96:e3:7e:2c:42:9b:9f:b1:8b:ce:
61:d4:14:1c:55:96:21:59:13:a9:fb:76:91:ed:ca:f3:59:02:
ce:fb:cb:78:87:be:16:2e:c5:0b:b0:08:e8:58:e0:03:c9:5b:
34:80:66:bc:e6:29:1a:fd:6a:e3:5e:90:67:51:fc:a1:e5:73:
a8:22:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:15 2024 by rpki-client on console-ams.rpki-client.org