Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/38vXiqQZPIB_ndIixqn9keJJdEQ.roa
File: 38vXiqQZPIB_ndIixqn9keJJdEQ.roa (raw, json)
Hash identifier: rt1m1n2VeEyXUVdG4uJu5Hypiou5BlpDHoOxZ/otlLo=
Subject key identifier: DF:CB:D7:8A:A4:19:3C:80:7F:9D:D2:22:C6:A9:FD:91:E2:49:74:44
Certificate issuer: /CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Certificate serial: 072C2224
Authority key identifier: 8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/38vXiqQZPIB_ndIixqn9keJJdEQ.roa
Signing time: Sat 01 Jan 2022 13:55:00 +0000
ROA not before: Sat 01 Jan 2022 13:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56740
IP address blocks: 2a0a:7d80:2::/48 maxlen: 48
2a0a:7d80:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120332836 (0x72c2224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd06efda2a27638f376cd6918da2bacb201bbee
Validity
Not Before: Jan 1 13:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfcbd78aa4193c807f9dd222c6a9fd91e2497444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:91:4e:7d:f3:d3:37:87:c4:5d:1f:aa:e2:
10:42:ee:d2:79:c4:34:86:55:7b:c8:54:38:c6:f4:
c5:2b:6e:2a:50:97:f2:d7:70:51:58:ed:b9:4d:5a:
d8:71:d9:bc:3f:ac:05:a2:d3:69:8c:fb:b4:6c:1e:
ba:99:fa:52:50:f7:67:00:4a:9c:a8:1c:31:18:7e:
a6:c4:7d:5c:75:3f:c3:ad:50:06:bd:86:1a:3c:32:
63:c9:7c:2a:a5:34:b5:f8:39:7e:2e:1e:89:74:23:
7a:25:f6:51:7e:14:6c:4f:7d:dd:fc:a3:e1:2b:fb:
9b:5d:46:70:57:93:a8:95:0b:5d:de:53:b1:81:ea:
51:03:a2:f2:4c:6c:10:99:d7:e6:aa:69:1e:9e:62:
0a:ea:ef:2a:f7:ab:0f:44:2d:75:3d:e0:d0:5d:0d:
db:12:50:96:1c:be:da:52:56:86:da:b1:cb:c1:f6:
64:e2:a4:30:f5:a7:9f:19:1d:a5:ef:02:d4:41:f2:
e4:c1:e7:47:2a:69:b8:9b:9c:27:13:84:6c:70:f5:
8e:f0:31:6f:40:ca:48:c3:3a:9b:30:b3:73:48:f0:
c4:30:27:32:86:41:b7:55:83:cb:e1:c9:00:a9:b5:
2a:ae:d9:7e:51:ff:8b:5f:6b:99:4f:55:5a:f8:b4:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CB:D7:8A:A4:19:3C:80:7F:9D:D2:22:C6:A9:FD:91:E2:49:74:44
X509v3 Authority Key Identifier:
keyid:8B:D0:6E:FD:A2:A2:76:38:F3:76:CD:69:18:DA:2B:AC:B2:01:BB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9Bu_aKidjjzds1pGNorrLIBu-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/38vXiqQZPIB_ndIixqn9keJJdEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/97f9d5-082a-4920-9327-8e34c1655b0d/1/i9Bu_aKidjjzds1pGNorrLIBu-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d80:2::/48
2a0a:7d80:1000::/36
Signature Algorithm: sha256WithRSAEncryption
c6:ad:0c:15:b3:ba:0c:40:bc:c7:1c:77:2d:4b:6d:5d:09:21:
f3:18:ae:a0:da:e6:a1:1c:d9:23:b7:72:e5:7c:ca:23:5d:d3:
b8:ce:c6:d5:06:c3:ac:2c:18:c6:6b:50:97:7f:8b:aa:19:d9:
9c:92:4d:ad:12:09:5e:3a:65:8b:4d:94:42:31:9b:98:7c:30:
7a:bd:b2:45:b3:42:6d:56:3f:4e:2f:5b:e3:4e:1f:e0:8f:b7:
9d:0c:51:50:e1:1f:65:c0:0b:3b:27:84:87:8c:ad:61:a4:4c:
aa:56:88:a2:f1:a7:12:84:e1:17:30:b4:b1:3b:15:c5:d0:68:
59:dd:3e:70:8c:f6:22:c5:84:b6:75:5a:82:14:3c:0b:71:a8:
86:c6:84:08:63:52:d0:ae:ad:d8:58:46:3d:1c:35:83:a7:83:
62:ee:b4:db:11:a0:10:7f:92:59:c9:84:9a:57:90:74:87:9b:
58:34:89:1f:c0:d2:91:65:9d:f3:1f:41:d3:1c:10:64:3c:b5:
2a:57:8f:24:65:8f:83:43:9d:57:ac:e9:69:fe:eb:cd:1e:61:
32:85:52:ac:a2:11:cc:1e:3c:3f:51:0c:e0:85:87:6c:91:87:
d5:d5:16:bb:a5:69:5b:9d:cf:27:3a:23:0f:0f:c4:88:cb:65:
27:e2:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:19 2024 by rpki-client on console-fra.rpki-client.org