Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/ctNC8tRgppoaikXhWQUKhmlrHtM.roa
File: ctNC8tRgppoaikXhWQUKhmlrHtM.roa (raw, json)
Hash identifier: J9h16Drrk8N2rxZi23OGKlzmwxOUOrhW/qFaHPWBljo=
Subject key identifier: 72:D3:42:F2:D4:60:A6:9A:1A:8A:45:E1:59:05:0A:86:69:6B:1E:D3
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 182A98DF
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/ctNC8tRgppoaikXhWQUKhmlrHtM.roa
Signing time: Sat 01 Jan 2022 06:59:08 +0000
ROA not before: Sat 01 Jan 2022 06:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21343
IP address blocks: 2a02:2278:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405444831 (0x182a98df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: Jan 1 06:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72d342f2d460a69a1a8a45e159050a86696b1ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:27:6e:ac:7c:fe:54:37:0e:05:58:f0:23:b2:
a2:fb:cd:94:22:94:a1:c0:9f:17:f1:c2:d0:20:a5:
0b:b0:28:81:b7:18:8c:d9:94:fa:04:5b:6c:46:6c:
00:18:f1:5d:2b:d8:a8:3a:d1:c6:dd:59:67:82:00:
7d:5f:b5:a9:f2:80:8d:fe:19:4e:f9:49:48:79:2e:
a5:68:28:d2:17:b5:29:04:33:ee:c7:02:dd:ec:53:
a2:23:53:95:a2:41:ea:71:d3:c4:3f:5e:2d:16:e2:
dc:bb:2e:8d:86:90:d8:7b:6b:22:04:16:7b:28:73:
35:1e:a5:a4:22:7e:0c:89:35:37:5e:d3:b3:9d:c1:
bc:0e:dc:e0:aa:7d:c1:51:6f:3a:81:30:ea:87:69:
a3:c2:17:fd:98:fc:ac:f3:57:a9:fd:0c:f0:2d:1a:
a7:88:54:95:98:c1:54:eb:46:64:08:d2:53:60:3b:
83:19:fc:43:98:4e:85:02:bb:2f:d6:a0:cb:09:40:
73:07:cc:c6:36:4e:16:74:73:10:c3:3c:f5:ff:63:
b4:2c:62:63:1b:6a:05:62:a1:4f:48:03:9d:ec:65:
5d:84:34:73:14:28:5e:26:fb:4f:d1:c0:31:ed:21:
78:75:ea:ef:4b:9f:69:d5:f5:ca:56:6c:12:e8:35:
27:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D3:42:F2:D4:60:A6:9A:1A:8A:45:E1:59:05:0A:86:69:6B:1E:D3
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/ctNC8tRgppoaikXhWQUKhmlrHtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2278:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
a7:3a:ea:cf:69:3f:2f:d2:1d:ab:fb:c5:e8:c3:44:0b:3e:fe:
55:33:29:35:c2:8a:78:72:28:60:12:cf:23:3c:25:ae:08:26:
64:90:e8:78:ab:1d:de:bd:0c:5c:77:f2:f2:93:19:5f:4e:a6:
8f:85:ec:69:bc:24:3f:c1:2f:b2:ec:82:cf:3b:9c:5f:02:12:
b6:f5:45:c9:69:32:2c:3b:ab:df:10:ee:af:ac:2d:76:25:df:
a8:04:f0:e6:98:69:df:e6:2a:74:47:93:f6:17:bb:eb:fa:89:
c4:21:3c:a7:2a:82:bf:6e:d1:28:44:77:4b:5b:3b:9a:71:d9:
2a:ba:47:2b:75:bf:97:c9:9a:0c:cd:41:73:67:f6:e9:df:60:
be:80:3b:23:ba:75:c3:cf:3f:4d:a3:30:a7:51:7f:32:04:a6:
e5:98:ba:8b:8b:ba:2a:be:8a:a7:e6:c3:a6:42:99:08:60:e4:
26:cb:74:dc:f9:af:ec:54:5e:47:82:22:65:cf:45:f3:cc:c7:
d7:e4:db:65:25:4c:b7:f0:d1:7b:97:e3:0c:25:51:09:86:65:
fc:8d:19:54:c9:a3:31:40:0c:25:5e:9c:c3:9f:83:5c:c7:55:
75:7b:dc:b0:a9:8e:bf:f8:23:d9:69:2c:6e:01:89:5b:47:d0:
ca:73:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:00 2024 by rpki-client on console-ams.rpki-client.org