Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FFxWMTAbSZuiyWT5OBV-4-FbzJM.roa
File: FFxWMTAbSZuiyWT5OBV-4-FbzJM.roa (raw, json)
Hash identifier: V7v0lJOPUjbMjqV+ZZtX0hrh6j3PlfCv8ZlbfWu0K+g=
Subject key identifier: 14:5C:56:31:30:1B:49:9B:A2:C9:64:F9:38:15:7E:E3:E1:5B:CC:93
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 0193E4D5F4AC2A7CAF2E4ECC77C8316FFDF6
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FFxWMTAbSZuiyWT5OBV-4-FbzJM.roa
Signing time: Fri 20 Dec 2024 16:10:47 +0000
ROA not before: Fri 20 Dec 2024 16:10:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49433
IP address blocks: 2a00:15c8:1000:3000::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:d5:f4:ac:2a:7c:af:2e:4e:cc:77:c8:31:6f:fd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Dec 20 16:10:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=145c5631301b499ba2c964f938157ee3e15bcc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:dc:23:0f:b6:4e:d4:5a:de:43:82:09:38:
2d:38:7e:73:a1:ad:07:96:dd:96:07:8d:bf:e7:43:
44:75:bc:d4:c2:39:1f:fc:b9:c9:87:2a:f6:4a:89:
b8:4e:67:c2:8e:8c:fd:dc:64:94:6b:93:82:7b:a4:
b2:df:c3:18:36:bc:56:71:f0:27:2c:3f:7c:b9:13:
6f:d9:fd:36:82:89:90:2c:aa:fe:6b:19:5f:93:ed:
93:61:07:db:ce:98:93:64:57:1f:cf:e4:60:79:54:
1d:62:97:d0:f9:d9:ff:2d:b0:6d:1e:10:9b:1d:65:
f2:7c:c4:bf:ee:88:cc:fd:29:72:ea:c6:ed:20:d1:
80:3d:3a:e1:84:ee:e7:3a:b0:5d:85:9a:4f:3c:08:
79:17:a9:5a:c1:cf:05:e9:82:2a:be:2a:64:f5:6d:
b7:a3:0e:99:b6:03:7d:5e:56:c2:87:72:c8:37:3f:
e4:51:77:e3:4d:1a:a2:f8:cb:fb:c6:05:ad:42:34:
08:38:09:2a:01:70:01:73:b9:be:5d:55:a9:1f:ee:
e9:38:85:48:8e:d0:3d:b4:4e:24:6d:43:4e:66:1e:
f6:b9:33:6a:4f:a0:e6:5c:c5:2c:46:44:94:22:a4:
8c:04:dd:92:e7:ec:b9:82:1e:34:b1:94:f9:9b:83:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5C:56:31:30:1B:49:9B:A2:C9:64:F9:38:15:7E:E3:E1:5B:CC:93
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/FFxWMTAbSZuiyWT5OBV-4-FbzJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:15c8:1000:3000::/64
Signature Algorithm: sha256WithRSAEncryption
9b:c9:a1:33:ac:a7:2f:45:e2:2a:12:97:0d:02:6b:32:c6:0a:
1c:ff:24:2f:3b:6c:81:90:e7:41:a1:16:cb:1d:d7:79:5c:00:
b4:88:93:d2:4d:d0:ca:1b:8c:9c:6e:34:38:ae:d3:9f:87:eb:
1d:cb:da:7b:f6:14:7e:1d:d5:6f:48:93:86:25:3c:71:67:a0:
5c:25:21:0a:56:30:48:a3:e2:61:69:56:e1:d8:f0:19:ff:77:
f2:a4:70:30:0e:b0:cd:9f:85:f5:dc:12:19:05:55:fb:eb:ea:
6f:9d:64:48:ea:bb:2c:ea:d6:c6:a3:ca:6f:ad:bc:45:ee:91:
72:65:bf:f1:51:a3:68:e0:9d:d4:50:26:8e:6a:5c:bc:03:63:
02:7a:3d:f0:eb:79:72:79:84:d5:a5:15:4a:50:28:72:00:72:
91:b4:56:c4:91:7a:f0:e8:05:dd:01:0f:03:14:fe:a0:7d:f2:
a4:61:6b:b7:cb:de:74:e8:7d:74:f6:be:b7:dc:30:5f:47:5e:
ab:9b:96:b6:a7:6c:22:3e:da:7e:59:1c:f8:07:c6:dc:f8:76:
f2:d5:f5:dd:9a:c2:1a:bd:7e:58:dd:c5:c5:0a:55:00:28:f6:
15:f0:be:21:2f:97:3f:d1:3e:e4:2f:56:f1:e6:f3:8a:90:8e:
d5:82:91:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:54 2024 by rpki-client on console.sobornost.net