Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/F5r2zpZXIbb4xj5HV5Gi9ztGWdQ.roa
File: F5r2zpZXIbb4xj5HV5Gi9ztGWdQ.roa (raw, json)
Hash identifier: iQTMRAjk0F8I5W3X/Al6LFdn8ZfDqMX2LhWrtgXzQ58=
Subject key identifier: 17:9A:F6:CE:96:57:21:B6:F8:C6:3E:47:57:91:A2:F7:3B:46:59:D4
Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Certificate serial: 018CC4935546297F2DB9ADF6B412AB450F45
Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/F5r2zpZXIbb4xj5HV5Gi9ztGWdQ.roa
Signing time: Mon 01 Jan 2024 10:30:38 +0000
ROA not before: Mon 01 Jan 2024 10:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202410
IP address blocks: 2a0c:3800:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:55:46:29:7f:2d:b9:ad:f6:b4:12:ab:45:0f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f
Validity
Not Before: Jan 1 10:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=179af6ce965721b6f8c63e475791a2f73b4659d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:9d:ad:12:37:2a:c9:bb:4f:5e:ae:bc:a1:
d7:5c:a7:be:99:84:1e:be:a1:7f:91:24:09:62:30:
2b:0f:46:c2:19:f3:98:48:db:d2:4b:3e:8a:86:2c:
92:82:d7:71:ea:ea:b0:1f:cc:60:49:b5:51:90:1b:
e4:0d:48:6b:83:88:36:ec:cf:3e:b2:fa:dd:2a:1b:
4c:d2:9f:b0:23:4a:4e:06:e9:a7:2f:33:9f:4f:3e:
a8:ef:48:9a:07:df:d6:86:37:12:d2:d0:28:d6:c3:
78:2c:30:c9:ee:20:96:d3:c6:ad:5c:03:e3:29:dc:
af:7a:c5:0a:40:ba:b0:fd:48:a7:c3:64:ff:98:aa:
49:aa:21:1d:2c:48:2f:b7:ba:ab:f0:e9:e2:e0:d0:
68:ce:2f:df:73:4e:8c:9d:46:73:31:36:31:91:ee:
0a:d0:05:18:5b:e8:b5:4d:4e:25:0f:3f:44:44:f6:
17:d7:38:89:12:71:4b:47:bf:e0:37:03:b1:69:75:
77:60:42:9f:05:5d:1e:e4:60:85:92:a9:44:24:cb:
5a:bb:72:a8:51:76:fb:7d:c7:85:8c:49:58:77:ae:
db:c6:62:b7:2b:a5:9e:49:70:6f:01:07:dc:01:b2:
7f:01:6e:e0:50:87:70:23:b3:59:69:bc:c3:99:f7:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9A:F6:CE:96:57:21:B6:F8:C6:3E:47:57:91:A2:F7:3B:46:59:D4
X509v3 Authority Key Identifier:
keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/F5r2zpZXIbb4xj5HV5Gi9ztGWdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3800:400::/48
Signature Algorithm: sha256WithRSAEncryption
90:6f:35:79:60:9b:64:b3:b2:cd:e2:1b:c9:d8:75:37:45:f4:
2f:9b:55:49:62:a8:2a:d3:31:ed:36:c0:cc:ef:74:9e:df:fb:
a8:b2:31:e2:15:6f:b8:ae:ac:a6:d3:f2:1e:64:e2:ed:b0:47:
5e:05:fe:67:d3:50:19:1b:81:58:01:d7:37:b9:80:90:25:96:
cd:9f:7c:55:14:d5:80:25:73:7e:93:c6:22:54:52:ee:cd:12:
b5:09:f6:bc:b5:a0:7e:3f:07:ab:59:2c:96:38:b2:ea:f9:b4:
f9:dd:37:d3:89:a2:81:75:54:ba:6c:dc:aa:0a:7e:17:f7:a2:
21:27:56:c7:75:bc:bb:e1:7e:43:4d:c7:03:eb:39:ba:39:3b:
60:95:2b:73:4b:7a:3a:61:d9:60:c9:e7:6f:d5:d4:42:80:36:
e1:6c:21:36:21:74:e8:10:bd:27:62:63:e2:72:96:12:ca:bc:
f7:aa:c7:6c:55:09:9d:12:41:b2:41:37:9e:94:a1:1b:96:ab:
1f:fb:cc:25:02:26:cb:46:e6:47:12:97:f9:db:85:89:e2:af:
bf:e6:cc:b1:fe:d9:9a:68:6b:5b:da:08:de:bc:05:09:27:a1:
cd:bf:97:70:b9:fc:39:e9:8a:e1:b9:8f:ce:47:65:3e:17:e3:
f7:0e:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 03:20:26 2024 by rpki-client on console.sobornost.net