Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa
File: 1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa (raw, json)
Hash identifier: nEbeoF/yoY3jvmxeIbw39Q0G57SQQ7egaIsnOj5XR8w=
Subject key identifier: D4:CC:40:C4:D2:64:2D:45:4B:44:92:23:85:F2:A7:FC:DB:69:9D:17
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018CCA99F7EF1E430595B2FF979D7B99B33A
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa
Signing time: Tue 02 Jan 2024 14:35:37 +0000
ROA not before: Tue 02 Jan 2024 14:35:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30722
IP address blocks: 2a01:827::/32 maxlen: 32
2a01:820::/32 maxlen: 32
2a01:8d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:f7:ef:1e:43:05:95:b2:ff:97:9d:7b:99:b3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Jan 2 14:35:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4cc40c4d2642d454b44922385f2a7fcdb699d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:48:f2:24:13:35:78:49:15:11:92:02:bc:
c1:b8:80:36:d8:6c:32:18:96:fc:8d:ad:90:83:d0:
50:73:25:0c:92:1f:62:79:5e:db:a5:54:37:12:7e:
4b:7a:87:91:b1:3c:b2:b0:ca:03:d9:da:87:0c:83:
37:09:ef:bf:8a:5b:24:38:f5:35:9c:89:e1:8e:b3:
ac:85:93:0b:e2:60:b6:33:9d:b2:d3:be:36:f3:e2:
dc:7c:03:ab:60:d8:75:29:0f:13:70:3f:11:65:db:
67:db:8c:aa:3b:a0:9f:9d:36:73:e1:80:b6:33:ea:
4e:34:c5:c6:41:0a:94:21:94:93:b4:f6:a2:b2:68:
4b:ee:38:a7:69:87:35:63:98:66:a1:74:0d:9f:40:
82:f9:a1:3b:65:c0:83:25:23:dc:02:39:23:88:0f:
92:d7:d8:25:e5:38:2b:6f:1b:55:a3:2a:73:cb:ac:
2a:65:70:f8:75:86:b0:65:0b:df:c2:8a:79:89:b0:
27:0a:fe:b3:fb:e2:44:07:45:8e:46:20:ef:3b:9b:
67:ad:06:c0:e3:67:d8:27:8a:c4:f4:11:9a:97:91:
27:ae:be:b0:08:2e:2a:2e:ea:a5:b0:60:7a:69:93:
00:a7:a2:96:ba:f0:e6:83:b3:5c:14:5f:e4:fe:74:
d4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CC:40:C4:D2:64:2D:45:4B:44:92:23:85:F2:A7:FC:DB:69:9D:17
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/1MxAxNJkLUVLRJIjhfKn_NtpnRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:820::/32
2a01:827::/32
2a01:8d0::/32
Signature Algorithm: sha256WithRSAEncryption
64:f2:5e:cb:44:21:01:6d:bd:23:3c:28:09:d2:6a:50:c3:ee:
1f:63:3d:ad:4a:f4:4c:e5:fd:64:72:60:da:f5:cb:3f:cb:d9:
b2:fe:86:50:b3:f9:ba:f3:58:b0:cb:75:f7:94:1c:fb:da:ca:
a3:7b:d9:96:da:e5:9b:7a:cf:5d:5c:63:26:ee:c6:11:e4:dd:
5c:08:83:45:15:e0:5e:1f:e8:df:00:a9:6c:b5:2d:cf:1a:62:
ec:7c:01:c0:1a:09:c0:c4:fa:e4:5e:77:92:bb:3c:59:11:90:
ce:47:bc:b8:76:4d:f3:27:33:fb:76:61:33:76:a6:04:f9:4f:
92:50:e3:1c:d7:8b:f4:4d:56:36:65:c9:1e:0d:04:06:dd:36:
db:9e:63:77:bb:91:a1:8b:1d:93:1d:5e:2c:81:c3:12:4b:9c:
57:c2:0a:24:73:1a:40:b2:e1:84:28:09:eb:bc:da:83:e7:94:
79:65:c8:f2:dd:55:20:d0:b8:e4:84:13:1c:de:62:37:99:be:
60:eb:bd:5b:36:eb:78:8d:49:6c:31:c9:ee:f3:ce:b4:2e:65:
24:8d:be:08:66:5c:3d:52:2a:48:d5:7d:c8:33:36:43:71:4f:
24:27:d1:10:d4:be:05:d3:fe:4a:de:d8:9c:46:78:7b:a3:0e:
91:35:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:56 2024 by rpki-client on console.sobornost.net