Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/m1xJA5o_Pc-TTSBUaeMB2NvwGUg.roa
File: m1xJA5o_Pc-TTSBUaeMB2NvwGUg.roa (raw, json)
Hash identifier: Ax9JrCfzu7J1zCcFlDNP7PSiDEoeNgpwkyvrigok+l0=
Subject key identifier: 9B:5C:49:03:9A:3F:3D:CF:93:4D:20:54:69:E3:01:D8:DB:F0:19:48
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019139D807CDA056CBD0C9198D25090238C6
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/m1xJA5o_Pc-TTSBUaeMB2NvwGUg.roa
Signing time: Sat 10 Aug 2024 01:12:24 +0000
ROA not before: Sat 10 Aug 2024 01:12:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:39:d8:07:cd:a0:56:cb:d0:c9:19:8d:25:09:02:38:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 10 01:12:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b5c49039a3f3dcf934d205469e301d8dbf01948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:34:6d:fb:ed:2a:06:61:c9:6e:a4:a9:04:
1a:29:35:25:a0:20:7a:e0:88:c3:13:a0:f8:ca:18:
53:fe:03:64:6c:57:fb:1f:5f:90:26:e1:2d:90:14:
87:43:75:bc:bc:32:1b:68:b1:0d:6c:d0:1b:6d:9a:
b3:94:84:00:18:56:bb:12:ff:e3:96:d9:d4:cc:81:
0a:1a:f5:3c:75:4a:5e:ea:36:7a:6b:28:06:1b:8e:
fd:9a:8d:4a:ea:42:b0:b1:a0:3c:22:d9:05:08:bc:
4a:0a:90:13:12:81:2e:5e:4e:f2:27:e9:7d:70:0d:
7e:1a:18:d5:97:3e:80:78:56:40:ec:cd:3b:3a:e1:
89:6f:f2:f3:79:7e:4c:09:7a:f0:a3:3e:cc:10:ef:
87:40:db:ec:10:ef:dd:e7:fc:f5:da:c3:87:06:72:
a1:c0:28:93:0d:e3:5a:9e:b4:cf:08:92:71:14:32:
14:dd:e5:13:da:1e:02:9e:ad:cb:89:72:6a:c9:79:
db:67:ab:80:8a:30:13:42:bf:04:f4:f6:b2:48:6d:
93:a9:4b:bf:f8:40:1a:ca:b1:f4:c8:0e:0e:f0:4b:
f9:60:52:a3:11:1e:7b:98:ab:bc:80:0a:61:a3:14:
b8:13:9e:8a:72:fb:a8:77:9d:b3:67:fd:b3:65:1c:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:49:03:9A:3F:3D:CF:93:4D:20:54:69:E3:01:D8:DB:F0:19:48
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/m1xJA5o_Pc-TTSBUaeMB2NvwGUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
78:2f:43:2a:20:85:f0:3f:6f:19:4d:81:18:d9:c3:fb:62:77:
b2:ea:09:d6:fc:95:9e:de:0a:e8:9a:ee:7f:89:a8:fd:bf:c5:
93:b2:e3:71:69:9a:df:83:b2:ac:e7:ee:78:ed:43:9c:de:a1:
b5:86:01:d6:6f:3a:d5:58:47:84:7c:06:0d:50:d2:43:a8:76:
1c:ee:3e:f0:78:16:b3:7b:8f:1b:7e:5a:dc:17:9c:a4:87:4d:
94:91:d2:4f:75:1d:c5:a9:79:3b:1e:ce:34:24:05:71:06:7f:
fb:f3:79:e0:6a:4d:09:8e:18:3a:e7:f8:8b:16:8a:c8:39:b9:
e1:0e:3c:7a:2d:3d:a7:0e:d6:0a:78:4b:0f:8a:3d:b2:00:9e:
2c:00:85:c6:02:58:fd:b6:08:30:01:9d:e8:b0:9a:9a:74:7e:
6f:bd:c8:b0:f4:43:22:0c:84:c6:df:00:b1:52:c1:c1:5a:2e:
29:6c:cc:b3:0d:2d:64:9d:c3:59:8f:4d:e7:57:d9:78:e2:63:
29:dd:b5:53:d8:2b:ac:70:49:cc:4a:b5:64:2c:81:ab:99:f3:
98:a6:b7:15:53:f2:79:c0:e0:83:78:77:58:6e:2c:40:b9:6e:
a3:e8:53:ba:b8:7f:cd:16:98:ed:c5:7f:23:42:87:dd:c1:b2:
4a:a8:ac:6f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 15 03:09:21 2024 by rpki-client on console.sobornost.net