Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/XXUAjiy9DUMOSs39kmGaNBe9hMg.roa
File: XXUAjiy9DUMOSs39kmGaNBe9hMg.roa (raw, json)
Hash identifier: ZLTGebAwwNsfUdVOKB8xaNQCbGg5gWJFieuc4zuTyvc=
Subject key identifier: 5D:75:00:8E:2C:BD:0D:43:0E:4A:CD:FD:92:61:9A:34:17:BD:84:C8
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 0192BAF0CF998382671A7CF7E6B96037A136
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/XXUAjiy9DUMOSs39kmGaNBe9hMg.roa
Signing time: Wed 23 Oct 2024 19:53:16 +0000
ROA not before: Wed 23 Oct 2024 19:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57487
IP address blocks: 2a12:1243::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:f0:cf:99:83:82:67:1a:7c:f7:e6:b9:60:37:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Oct 23 19:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d75008e2cbd0d430e4acdfd92619a3417bd84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:63:e2:b7:a1:7f:03:a4:d0:d2:01:dc:61:
f4:a8:ec:02:d3:29:75:a7:64:f1:1d:ad:82:ea:65:
4c:74:7c:6d:bb:ba:df:1e:4a:19:90:e2:92:c5:2e:
b3:f4:4d:78:bf:7f:fb:cd:1d:80:cd:b6:84:96:e7:
3a:a9:07:a1:1f:a4:af:9b:cc:f0:02:8c:db:39:45:
28:01:b0:49:d2:47:b9:7c:f6:10:e6:dc:4e:e5:4a:
27:f3:6d:e8:47:4d:dd:29:1f:77:6c:95:cd:48:37:
b8:34:54:1d:44:78:14:e4:ba:9a:9e:0e:78:7b:51:
0a:ac:da:55:1b:0b:7d:cb:a8:49:6b:f6:e6:86:6b:
c2:00:a4:cf:ef:14:a3:a6:d2:f2:a1:bb:e5:dd:88:
12:b4:e3:e4:18:c8:58:7d:2b:b2:48:03:b4:bb:2e:
7d:e5:70:e8:ee:cb:65:fc:dd:46:83:68:9e:3c:e5:
71:5c:3c:b9:9a:86:6a:2c:07:83:d8:ed:3a:aa:68:
f6:85:57:0e:c6:7f:5c:1b:3f:cc:e0:20:0f:f1:b5:
ee:be:e1:73:d8:7e:87:8a:03:9a:f7:eb:21:11:ee:
d0:b1:b9:57:ed:42:4c:ee:38:c9:b6:94:eb:c1:ea:
fa:b4:69:60:eb:bd:3f:f0:63:a1:c9:f4:1b:68:34:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:75:00:8E:2C:BD:0D:43:0E:4A:CD:FD:92:61:9A:34:17:BD:84:C8
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/XXUAjiy9DUMOSs39kmGaNBe9hMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1243::/32
Signature Algorithm: sha256WithRSAEncryption
64:48:28:ba:6d:3f:ea:05:2b:72:e5:c2:f9:3c:46:15:e9:7f:
90:e9:a0:5a:cc:ee:44:e7:75:ad:40:37:fe:66:d4:03:ca:66:
76:91:80:8d:74:da:35:95:02:46:84:ba:c1:bd:a0:ac:a7:ae:
3e:e9:3d:be:ff:d7:e8:ac:ca:39:1f:62:8f:6e:98:86:4c:2a:
78:3f:ec:44:f0:72:70:16:66:52:a3:fb:4b:a2:d3:3e:af:58:
ed:02:a0:19:40:ee:34:99:7d:f3:52:05:43:5e:da:23:37:78:
1f:f1:70:57:8f:36:db:af:52:09:81:04:e0:21:b6:69:6f:2c:
39:38:fd:98:a5:de:5c:58:48:cf:ff:bd:98:6a:24:51:63:3b:
42:d0:54:42:fa:0c:b5:b2:c9:51:b3:be:1f:c0:19:14:8a:d4:
b7:43:37:a4:90:62:f4:8e:04:24:fc:91:1d:40:4f:eb:bc:c7:
88:23:b0:b9:50:7d:f7:cd:ba:22:d5:e4:e0:df:d3:10:77:a5:
11:a3:c4:12:d2:88:ec:59:d8:1f:06:43:56:73:01:97:91:b1:
80:c2:95:a9:68:d0:6f:8d:8c:13:0e:ed:24:52:41:ab:a9:ff:
82:01:54:32:13:7d:b0:3a:b6:49:1b:a3:e9:06:bd:40:67:e7:
04:01:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:50 2024 by rpki-client on console.sobornost.net