Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/0oJbbNg1XlkNyEVLeegdpLqglrk.roa
File: 0oJbbNg1XlkNyEVLeegdpLqglrk.roa (raw, json)
Hash identifier: 4roGToazL7jR26C1SsbT9mWwcxYd6KDj5C4pnOz450E=
Subject key identifier: D2:82:5B:6C:D8:35:5E:59:0D:C8:45:4B:79:E8:1D:A4:BA:A0:96:B9
Certificate issuer: /CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Certificate serial: 0CDA2C1B
Authority key identifier: 00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/0oJbbNg1XlkNyEVLeegdpLqglrk.roa
Signing time: Fri 06 May 2022 13:57:24 +0000
ROA not before: Fri 06 May 2022 13:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211883
IP address blocks: 2a0c:f280:1::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215624731 (0xcda2c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e643d0b67f4b333feacdc4616d4e4f3de32cd
Validity
Not Before: May 6 13:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2825b6cd8355e590dc8454b79e81da4baa096b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:ef:11:5a:3b:65:c6:58:dd:f8:5c:e5:86:
f2:1f:16:fa:9b:e8:fe:74:6a:d3:b5:ed:a3:f5:9e:
29:bd:84:d9:1d:22:26:81:81:51:e7:50:cf:c1:e5:
5c:ca:38:b2:a9:64:3a:9d:ba:5b:bd:9f:0e:22:f6:
59:c0:27:7f:ee:e1:c3:ff:be:43:0b:2b:c6:94:b7:
6c:92:d2:55:ac:1d:03:c3:ec:c8:1e:13:2d:23:c0:
86:f6:2e:f6:1b:9d:b5:41:76:af:e0:e9:9f:92:09:
b6:de:37:65:e4:6a:35:95:51:80:96:cc:d4:02:d8:
80:e8:e9:34:99:c6:0b:06:80:d3:9c:30:4a:04:9b:
61:ac:f7:76:84:bc:67:e2:10:bf:72:f3:c6:21:10:
21:82:46:e2:24:ae:cd:f1:2c:ad:2c:d9:83:91:09:
4d:b3:65:9c:a7:f7:e2:8d:25:b6:c1:52:10:a1:7c:
54:85:c1:0d:3d:bb:4c:43:40:9a:2e:5c:72:1f:50:
34:8d:8a:c0:34:4a:a1:ea:80:52:af:ee:de:5b:c6:
5d:c6:67:c7:95:8b:ea:a2:45:9c:d3:d9:2d:2e:6d:
c3:0c:30:4b:d5:9d:53:53:a9:b3:78:d4:b0:48:87:
2f:c2:b6:6c:af:99:5e:73:6b:2f:3e:ef:ad:c7:a5:
a0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:82:5B:6C:D8:35:5E:59:0D:C8:45:4B:79:E8:1D:A4:BA:A0:96:B9
X509v3 Authority Key Identifier:
keyid:00:6E:64:3D:0B:67:F4:B3:33:FE:AC:DC:46:16:D4:E4:F3:DE:32:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5kPQtn9LMz_qzcRhbU5PPeMs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/0oJbbNg1XlkNyEVLeegdpLqglrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b7aa7b-97c2-4bd8-8caa-dcce28e9346a/1/AG5kPQtn9LMz_qzcRhbU5PPeMs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f280:1::/48
Signature Algorithm: sha256WithRSAEncryption
95:25:b5:1d:37:c0:48:60:65:3c:73:80:20:6f:c3:f2:bc:7b:
f7:a5:d3:f0:42:91:27:c4:d7:1b:27:87:7f:d8:97:a9:d7:a2:
ac:0d:25:5a:ae:0b:b9:08:ad:94:0d:e3:28:90:59:dc:07:ad:
28:8e:20:26:f8:14:c7:a3:38:20:71:a4:68:61:62:71:95:43:
3c:16:3c:68:f6:6b:9e:69:af:54:d0:66:f2:48:96:bb:46:dd:
bd:c8:b2:eb:7a:d9:ea:69:46:4d:db:f3:79:af:7b:9c:46:ad:
5c:75:2c:79:68:09:cf:88:0d:0b:7d:00:68:32:d4:ce:f1:ca:
a8:9b:31:92:30:2e:a6:0b:ab:ce:cc:1f:75:f3:31:5b:7f:4b:
33:6f:02:fb:f1:f9:99:00:09:34:c4:3b:6a:95:2f:82:55:20:
e0:60:d6:07:e5:b8:9b:6b:b9:dc:48:b9:ae:4e:ed:de:73:d0:
56:fc:ce:37:3c:d3:b2:4a:81:75:fc:e1:e5:40:6a:e3:6a:90:
ed:22:ec:54:db:fe:0b:a3:f3:b5:38:c2:03:19:9f:97:fd:74:
69:4f:49:c2:b0:44:b1:e0:f0:d2:aa:22:27:8b:86:10:db:e7:
b6:28:14:82:6e:5a:3f:b4:d9:ca:f4:80:bb:f1:6c:5a:55:83:
b0:99:e7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:58 2024 by rpki-client on console-ams.rpki-client.org