Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/7AmnCf4komO2unPY-oWmhlAHC-k.roa
File: 7AmnCf4komO2unPY-oWmhlAHC-k.roa (raw, json)
Hash identifier: HxVAd3goEV4VlDaEBBmrGvgLJQZaBhg4EZStm8MahNU=
Subject key identifier: EC:09:A7:09:FE:24:A2:63:B6:BA:73:D8:FA:85:A6:86:50:07:0B:E9
Certificate issuer: /CN=e66cf1f3904620aa773742915add0da8e63501b8
Certificate serial: 018D4B095723A09EEF4E4BD1ECE00A9EA691
Authority key identifier: E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/7AmnCf4komO2unPY-oWmhlAHC-k.roa
Signing time: Sat 27 Jan 2024 13:08:39 +0000
ROA not before: Sat 27 Jan 2024 13:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a0b:4e04::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:09:57:23:a0:9e:ef:4e:4b:d1:ec:e0:0a:9e:a6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66cf1f3904620aa773742915add0da8e63501b8
Validity
Not Before: Jan 27 13:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec09a709fe24a263b6ba73d8fa85a68650070be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:6a:1e:1f:69:a2:05:6f:de:cf:da:71:d2:
90:91:46:37:de:86:67:b9:cb:3f:ff:c5:86:66:ed:
75:6f:95:29:4a:c6:27:36:bc:54:ad:33:a4:00:c2:
98:b2:1d:16:fd:43:8e:28:3e:2b:6c:8f:0c:63:87:
f7:2f:e9:ca:76:5e:35:b8:52:c5:6f:76:cb:d1:9d:
e6:17:25:04:08:11:70:af:8f:a1:62:1a:33:03:3d:
6f:25:eb:b0:6d:41:13:5e:82:46:3d:3a:15:1c:51:
43:c3:90:12:ac:50:b5:02:b7:a7:b3:6e:92:9b:48:
ab:4c:1b:b3:ab:cb:05:f1:8e:27:66:43:e9:47:13:
28:2a:bf:e6:5e:ce:c7:24:57:6e:46:3d:a7:cf:84:
5b:ec:16:f2:75:3d:f1:f2:fa:e2:d5:f1:3b:ba:5d:
36:ac:3e:b6:f1:b7:3e:57:e4:03:c0:97:19:4d:dc:
43:7c:b6:e4:5f:ff:26:af:96:54:41:01:5b:21:42:
40:17:ed:e6:57:5a:10:1b:49:6a:e1:a9:2c:60:8f:
f1:62:96:a5:5c:56:7f:f7:34:83:3c:9d:bf:67:55:
20:82:34:a8:1a:ef:53:f3:6e:49:9a:18:54:46:4f:
fc:81:3d:af:db:38:a8:69:8b:7f:df:e9:b4:a8:c2:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:A7:09:FE:24:A2:63:B6:BA:73:D8:FA:85:A6:86:50:07:0B:E9
X509v3 Authority Key Identifier:
keyid:E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/7AmnCf4komO2unPY-oWmhlAHC-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/5mzx85BGIKp3N0KRWt0NqOY1Abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e04::/32
Signature Algorithm: sha256WithRSAEncryption
96:79:17:0d:6e:88:66:a6:4d:2d:67:d5:b4:f0:be:5b:b6:c2:
fe:4b:71:c3:6c:db:9c:d2:00:c0:7a:cc:1e:78:27:a9:4a:85:
d3:30:4e:1a:cc:a9:69:95:82:55:47:2d:2d:ba:3a:99:73:1d:
1e:d8:c8:b9:91:9d:35:e2:b0:ec:bd:c8:eb:cf:4f:99:cb:74:
7e:0d:1a:b8:55:2c:17:37:f6:9b:81:26:36:4e:77:2f:d4:00:
8d:be:67:67:c4:c1:99:ee:29:d8:4f:ad:ce:a9:67:bb:a9:7e:
bb:4e:9c:50:1b:3a:bf:ae:b8:2b:c3:cf:18:2e:f7:0d:99:78:
d6:23:4b:ef:e8:9a:5a:df:2a:85:27:f4:47:18:18:09:ef:b6:
39:a4:35:25:f5:90:ad:ed:99:b4:fd:10:fe:ed:90:e0:09:1e:
c9:29:3d:84:04:80:98:8b:5e:17:a9:fc:3e:03:ee:a1:99:ef:
23:58:03:1a:fa:78:14:72:04:8c:9b:7b:4a:6b:4e:89:10:f4:
fe:51:f9:fb:6a:94:f2:45:2f:51:5c:81:17:11:65:6e:b9:b0:
13:5b:b0:88:1b:b9:2e:8c:50:0e:b0:ee:58:3d:8d:3e:c2:8b:
41:65:4c:f4:87:a4:0c:9a:4a:b5:7b:33:a7:2f:e2:92:35:9f:
0e:3e:b1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:39 2024 by rpki-client on console-ams.rpki-client.org