Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/jPDxPShFymth6LSbLp4v-SxK2Zs.roa
File: jPDxPShFymth6LSbLp4v-SxK2Zs.roa (raw, json)
Hash identifier: ykWdKQPiFklsFbknqBUrH+HNvmddv/opzc1Wlr0jC6I=
Subject key identifier: 8C:F0:F1:3D:28:45:CA:6B:61:E8:B4:9B:2E:9E:2F:F9:2C:4A:D9:9B
Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial: 018CC2DB007DC2E010147AB16648C1CBF05B
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/jPDxPShFymth6LSbLp4v-SxK2Zs.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213268
IP address blocks: 2a09:3c00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:7d:c2:e0:10:14:7a:b1:66:48:c1:cb:f0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cf0f13d2845ca6b61e8b49b2e9e2ff92c4ad99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:1e:ec:90:be:e8:87:e3:06:40:3e:3c:e8:
c5:cd:1e:e0:de:28:c4:92:37:e7:3a:3d:aa:98:b8:
83:de:ed:5c:5c:2c:eb:f4:f6:0b:04:b3:85:4b:69:
ab:0d:ff:96:9c:5b:aa:be:d3:c5:c1:b0:29:e4:96:
fa:90:2b:3e:c0:01:ff:17:d6:5d:e1:b1:20:80:79:
46:07:1c:2c:87:24:33:51:b2:9c:0e:a6:1a:5e:43:
e0:84:52:6f:0f:d6:5a:1f:06:fa:84:8e:4c:d3:40:
51:b9:3e:c3:aa:7d:b0:dd:8c:05:6f:53:a2:c2:22:
fc:a6:08:46:bf:86:31:65:f3:ad:eb:60:60:16:7d:
f7:23:56:ba:4e:20:cd:aa:6d:74:25:fe:d9:b6:15:
a1:3c:79:9c:20:30:74:8f:99:dc:41:7b:f7:b8:b0:
e2:87:ab:00:fc:5e:9b:52:b6:42:b6:03:bb:c9:a1:
69:f2:4e:0a:3d:54:76:9b:21:c9:88:49:aa:32:4c:
3c:87:5d:56:b3:91:1d:90:9f:5f:bb:73:21:97:4b:
c7:f6:ca:78:ce:6e:1e:27:72:37:f6:d2:51:5d:1b:
8f:70:c1:b6:81:a1:54:23:aa:73:83:60:eb:11:14:
df:fb:07:f4:7d:8e:54:c1:7b:f3:47:db:c0:93:e0:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F0:F1:3D:28:45:CA:6B:61:E8:B4:9B:2E:9E:2F:F9:2C:4A:D9:9B
X509v3 Authority Key Identifier:
keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/jPDxPShFymth6LSbLp4v-SxK2Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3c00:1::/48
Signature Algorithm: sha256WithRSAEncryption
8b:14:83:9c:f9:ea:5f:d8:0b:aa:89:a2:27:89:93:d9:b3:fd:
85:bd:49:33:bd:67:c6:86:65:9a:d7:70:ee:6a:67:5a:4a:5b:
8f:98:74:5e:0f:c0:a8:d7:6c:24:3d:8f:b2:85:5d:42:e3:18:
d1:fa:2e:ce:d8:d1:40:14:f7:a0:e8:63:4b:da:79:7e:24:be:
ea:1e:9b:15:57:a0:bf:c3:7e:3e:26:16:b4:25:98:77:cc:72:
9e:d7:0e:cf:71:43:82:08:62:0b:87:76:8b:f7:7a:7e:1e:39:
3b:ea:f9:33:62:e3:87:2f:d2:dd:ae:f1:18:3e:47:55:7b:5b:
f8:43:a5:45:93:19:9b:8d:30:07:2b:8c:74:17:bf:c1:e4:9a:
94:c2:26:7e:7b:97:35:6a:59:05:f2:de:5e:12:a0:e6:a5:b3:
24:ed:51:99:74:15:a0:91:6c:3e:ac:ec:78:c9:de:de:ff:39:
ca:21:5d:ea:d9:d2:49:52:d9:8b:42:32:85:67:41:aa:d4:06:
c7:8e:ab:63:36:ea:a3:16:6c:64:a6:6a:e9:d9:56:dd:07:a3:
4d:ba:a7:c5:36:b2:53:1e:9e:2d:d0:c4:96:81:9b:d1:96:48:
a3:97:74:25:a9:d7:69:15:a8:47:f4:a3:32:34:ad:bf:a3:cc:
d3:a0:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:18 2024 by rpki-client on console.sobornost.net