Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/fjmAsaTyBq3y6qXkJbfkSmo450U.roa
File: fjmAsaTyBq3y6qXkJbfkSmo450U.roa (raw, json)
Hash identifier: E4FpWP/nKyqQeeQguLJrOaf+DKBKB3pM3a32eIU41g8=
Subject key identifier: 7E:39:80:B1:A4:F2:06:AD:F2:EA:A5:E4:25:B7:E4:4A:6A:38:E7:45
Certificate issuer: /CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Certificate serial: 01856BDC7EC8E97B2662D4CDEE07F6C160B8
Authority key identifier: 4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/fjmAsaTyBq3y6qXkJbfkSmo450U.roa
Signing time: Sun 01 Jan 2023 05:44:50 +0000
ROA not before: Sun 01 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:d7c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:7e:c8:e9:7b:26:62:d4:cd:ee:07:f6:c1:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb52d4a23e5e2821fa1915ec137d384fae1fd2e
Validity
Not Before: Jan 1 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3980b1a4f206adf2eaa5e425b7e44a6a38e745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:7d:e1:2a:d9:0f:fa:8a:22:94:18:67:49:
08:52:1b:f7:09:fb:a5:95:97:25:02:e5:b3:3c:79:
1b:cc:b3:ac:41:77:0d:b3:1b:66:a0:8f:b7:7e:d6:
39:0c:46:eb:1e:af:32:e2:10:34:6f:35:50:5a:56:
56:df:94:5e:c9:e7:7b:a0:d0:ba:86:bb:61:67:dc:
94:65:89:b6:1f:1c:23:a8:02:e7:bd:e1:72:5a:31:
8e:a7:db:51:09:8a:dc:93:3c:73:7a:74:f9:6f:db:
45:1a:0f:66:81:c0:6a:85:04:9a:e9:51:58:7c:00:
91:3c:31:51:58:b6:58:85:bf:ec:0e:b8:54:7e:93:
24:6f:f6:e7:12:04:0a:bb:17:38:1a:7e:48:3d:6c:
fa:21:95:6e:7b:b0:ed:74:0d:d3:4b:0b:35:19:c0:
43:0f:cf:77:3c:1d:03:3a:a9:21:3b:d1:68:c1:c4:
66:fc:6b:e3:8b:6b:8c:77:0e:3e:90:92:f7:0e:58:
db:7d:0d:b6:45:c8:c6:f2:e3:2e:5e:62:a2:6d:58:
31:61:de:cb:e3:26:eb:00:0c:08:ae:d3:58:1d:8a:
d9:6f:6a:2b:01:87:74:1f:44:8f:88:c5:31:c3:1c:
4b:7c:8c:1d:f5:eb:55:c8:64:53:65:05:ff:4a:93:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:39:80:B1:A4:F2:06:AD:F2:EA:A5:E4:25:B7:E4:4A:6A:38:E7:45
X509v3 Authority Key Identifier:
keyid:4C:B5:2D:4A:23:E5:E2:82:1F:A1:91:5E:C1:37:D3:84:FA:E1:FD:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLUtSiPl4oIfoZFewTfThPrh_S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/fjmAsaTyBq3y6qXkJbfkSmo450U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1dc3d9-1981-40a8-8ceb-38565981b446/1/TLUtSiPl4oIfoZFewTfThPrh_S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d7c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:22:4d:ea:72:c0:ea:d0:bd:39:2a:e3:eb:17:a9:1e:b4:a4:
6e:70:3e:84:eb:cd:52:c8:22:4a:cb:a1:10:15:ca:ed:87:65:
fc:27:cf:30:f3:a2:4a:9e:fe:7a:86:03:f7:1b:cb:7f:15:07:
e8:a6:30:59:08:cd:f7:7a:41:57:6e:2a:4e:db:89:04:27:1a:
38:7f:9e:74:dc:61:5e:49:25:a1:5f:ec:00:0a:c0:c8:e2:57:
d3:87:74:de:ad:24:78:3c:27:91:2e:d0:3a:c9:a0:06:57:73:
6e:f3:bc:1b:a5:01:77:90:ab:c8:b2:6a:d3:47:f2:d3:c8:c3:
55:bd:2c:ea:ea:ac:a4:32:ed:74:66:dd:41:4d:a4:05:bd:fa:
0d:13:3d:a9:ec:29:95:d0:5b:6d:a9:fe:89:02:29:b5:29:9e:
cb:f1:cd:01:ff:5d:24:16:a7:b3:da:d2:4d:ce:a7:00:9c:89:
e3:8a:e9:93:2b:66:8f:eb:fe:34:10:b8:14:2f:af:a4:ac:c1:
b0:74:8d:88:62:6c:aa:47:19:53:86:3c:b2:6c:2b:e5:16:b0:
eb:09:d7:a1:b4:02:6f:79:8a:2d:38:d1:f6:a8:8e:08:7b:0e:
d6:1e:49:b7:b7:2f:37:9d:c8:f6:d0:ef:5c:2c:84:5c:69:43:
fd:34:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:45 2024 by rpki-client on console-ams.rpki-client.org