Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/a-d46PRypRmj7QXYb_6tUn43T98.roa
File: a-d46PRypRmj7QXYb_6tUn43T98.roa (raw, json)
Hash identifier: 1gbrPZQpKGE5Tm3enYQYZlNLssmmopBrpMAgWBAMmws=
Subject key identifier: 6B:E7:78:E8:F4:72:A5:19:A3:ED:05:D8:6F:FE:AD:52:7E:37:4F:DF
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 0193B23733FC3754E85F08413881F755C7DC
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/a-d46PRypRmj7QXYb_6tUn43T98.roa
Signing time: Tue 10 Dec 2024 20:16:22 +0000
ROA not before: Tue 10 Dec 2024 20:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215295
IP address blocks: 2a01:ffc7::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:37:33:fc:37:54:e8:5f:08:41:38:81:f7:55:c7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Dec 10 20:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6be778e8f472a519a3ed05d86ffead527e374fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:79:69:45:49:21:03:56:ae:4b:0e:13:a5:b9:
75:74:bb:f5:05:e7:a1:31:14:b3:80:16:33:77:db:
3b:53:17:9f:7f:cd:41:92:49:50:65:20:cd:a5:39:
fa:31:6a:c3:e7:25:ef:26:6b:7f:38:d8:d7:fb:b0:
2a:c5:87:68:f8:d4:f7:c0:a9:5e:10:c9:3e:71:73:
01:03:e4:2a:ea:bd:a7:09:cf:c7:b6:19:d5:bc:ee:
9d:ad:1d:a5:26:89:16:ad:60:4c:61:61:ed:28:fe:
9c:44:a7:f0:51:4c:76:42:0b:cd:87:d2:04:4c:c8:
14:0f:e2:63:6d:01:2f:fe:fb:70:a5:00:cd:4d:9e:
d4:e4:25:24:94:76:06:ac:c5:96:61:91:da:f4:2f:
65:55:8b:6a:ac:ae:db:a5:bd:ac:e8:96:02:49:30:
c2:e0:38:43:35:d8:50:f8:7d:85:ca:43:c9:91:f5:
46:c2:7c:af:38:ce:64:7b:30:9f:b1:59:3e:b7:c9:
c6:7c:ab:3f:36:98:2f:96:f3:d0:08:93:8f:c7:e0:
8f:e6:ba:81:c6:cb:c3:3a:9b:d5:7b:bf:2f:4e:08:
2b:c1:78:0f:24:fd:05:55:55:b5:81:ac:6f:0d:ce:
a9:21:93:12:37:49:8d:dc:ab:9a:ef:b8:6b:e2:ed:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:78:E8:F4:72:A5:19:A3:ED:05:D8:6F:FE:AD:52:7E:37:4F:DF
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/a-d46PRypRmj7QXYb_6tUn43T98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc7::/40
Signature Algorithm: sha256WithRSAEncryption
a8:57:9d:74:89:50:4f:76:9e:b3:12:87:0f:fb:af:03:53:9f:
83:85:e8:38:d6:f1:a3:77:29:44:1a:e5:e5:02:f6:ff:5f:de:
68:ac:ee:9a:06:e4:92:71:b0:79:e9:04:ec:1d:73:f7:ce:34:
3e:b6:4a:6b:43:dd:bb:da:38:5e:01:e7:ed:22:74:f8:af:c3:
b4:7e:16:a3:18:fa:b0:5d:e3:0d:14:7b:c7:23:b7:ac:ec:d9:
51:5b:36:80:c5:a5:bb:f7:d4:df:41:05:0c:3f:50:e0:8d:c3:
d8:1f:d9:cf:53:0e:54:c1:be:7e:ce:89:09:06:b1:1e:5c:48:
93:49:a4:14:3e:50:eb:81:ec:03:58:a2:96:84:03:6b:a8:6e:
b7:1f:c3:14:0b:20:21:56:78:6f:b1:9c:57:04:21:7d:17:00:
0d:ec:f7:ab:72:f5:ac:15:75:9e:99:de:1e:df:81:ca:8e:f3:
e1:19:eb:f6:72:6d:4e:8a:0e:55:26:84:32:f8:9f:30:00:95:
fa:6d:c3:80:4a:c4:8e:7b:ac:ff:5e:d5:23:fa:d8:28:17:49:
dc:fd:42:7e:54:a9:5a:d2:c9:9b:29:a1:60:8b:54:74:6d:d6:
a8:32:4f:68:88:1f:77:fc:af:60:85:d0:3c:c4:f2:94:dd:1d:
88:aa:ed:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:57 2024 by rpki-client on console.sobornost.net