Route Origin Authorization
$ rpki-client -vvf rpkica.mckay.com/rpki/MCnet/I1lixj77O2aL-RMyQR_z8064QiM.roa
File: I1lixj77O2aL-RMyQR_z8064QiM.roa (raw, json)
Hash identifier: pSBCVh0fPWZgQ+D5/rvaWzaodpIZfrZJ8JPEJrUj+go=
Subject key identifier: 23:59:62:C6:3E:FB:3B:66:8B:F9:13:32:41:1F:F3:F3:4E:B8:42:23
Certificate issuer: /CN=269e138e9fc607923545f79a38684a64d9439804
Certificate serial: 03C4
Authority key identifier: 26:9E:13:8E:9F:C6:07:92:35:45:F7:9A:38:68:4A:64:D9:43:98:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.cer
Subject info access: rsync://rpkica.mckay.com/rpki/MCnet/I1lixj77O2aL-RMyQR_z8064QiM.roa
Signing time: Fri 29 Oct 2021 03:41:12 +0000
ROA not before: Fri 29 Oct 2021 03:41:12 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 198362
IP address blocks: 2a00:5540:5014::/48 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 964 (0x3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269e138e9fc607923545f79a38684a64d9439804
Validity
Not Before: Oct 29 03:41:12 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=235962C63EFB3B668BF91332411FF3F34EB84223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:90:a4:ee:2a:5b:a3:74:14:c7:54:5c:bd:54:
e4:49:02:62:d4:8f:ce:6f:04:dd:27:e1:eb:2e:82:
f1:2b:f9:03:97:62:c2:d0:80:8d:0c:50:74:cf:8a:
50:a4:de:52:dd:09:b8:ad:4c:f9:7e:b6:4b:d8:b4:
21:8d:49:b4:32:95:ed:60:e1:6a:19:d6:49:75:d6:
e3:f0:23:07:c5:d0:fe:9d:5f:df:82:4d:5f:7f:c8:
28:9e:40:2d:67:93:0a:59:94:9c:3a:a8:e5:c9:e7:
c6:87:87:58:f7:6b:30:a8:e5:a0:15:d3:8e:64:51:
f3:e8:52:7b:1d:bd:99:08:1e:4d:29:fd:ca:89:f0:
e8:f8:b9:3d:d4:60:64:c8:93:ce:d9:b3:56:6b:07:
b3:a4:ab:3e:4d:17:a8:12:24:e5:83:f9:f4:48:4b:
3d:56:45:d5:5f:6b:3d:2f:25:d3:d7:b8:ae:0b:b7:
e5:8e:0f:68:ab:54:7c:f7:66:4f:41:a0:9a:19:31:
5a:f4:80:94:a2:3b:25:9a:7b:a0:49:40:82:3d:4f:
38:93:0a:af:57:4a:be:17:c3:b6:e8:3a:fb:66:5c:
2c:73:c1:06:cc:e4:aa:e9:41:f6:65:2e:2a:f7:13:
4c:74:c1:e2:20:e2:c4:2e:84:25:48:77:d8:df:ca:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:62:C6:3E:FB:3B:66:8B:F9:13:32:41:1F:F3:F3:4E:B8:42:23
X509v3 Authority Key Identifier:
keyid:26:9E:13:8E:9F:C6:07:92:35:45:F7:9A:38:68:4A:64:D9:43:98:04
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.mckay.com/rpki/MCnet/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp4Tjp_GB5I1RfeaOGhKZNlDmAQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.mckay.com/rpki/MCnet/I1lixj77O2aL-RMyQR_z8064QiM.roa
RPKI Notify - URI:https://rpkica.mckay.com/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2a00:5540:5014::/48
Signature Algorithm: sha256WithRSAEncryption
1a:5f:b2:46:15:73:57:12:32:d0:7e:3a:8b:c7:cd:13:bb:23:
28:13:6b:88:27:e7:2f:28:37:4a:77:eb:79:74:34:08:ae:f5:
37:ae:88:74:6b:41:b0:b7:05:79:5b:c2:b6:34:51:45:d2:4c:
97:ee:1e:e0:3e:36:65:0f:74:2e:a9:9f:df:28:a7:07:b7:e1:
be:ac:06:73:ac:88:04:1b:fd:a6:55:8a:7d:a8:80:85:fb:34:
ec:9e:20:b1:3f:6b:1e:d3:6d:93:fc:dd:ae:7e:09:d5:14:c2:
22:c2:71:00:58:14:6e:66:20:c3:00:27:ec:43:58:a8:2c:88:
7a:83:0b:0f:6b:17:68:5a:4c:55:d2:57:b6:06:bd:f3:70:2e:
76:88:cc:c3:8d:83:1c:1d:52:e7:b6:1d:b5:c5:53:b1:29:e8:
43:8f:93:84:68:0a:36:b7:bc:51:39:c9:c3:87:58:b8:5e:81:
2e:d8:df:45:f2:ce:61:a5:55:29:8f:c3:29:d6:f8:20:2e:c4:
4a:0e:0a:78:89:23:81:fd:26:3b:74:ca:bb:cd:1f:59:1b:5d:
de:a3:ca:d2:2b:7d:9c:3f:7c:06:4e:b8:5a:69:80:7e:08:a3:
e9:54:52:e8:99:75:08:04:35:dd:7d:cb:1c:6f:63:41:33:5c:
8a:80:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:30 2024 by rpki-client on console-fra.rpki-client.org