Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/6jJgE8COlWyqSVyMWBoCFKeh47Q.roa
File: 6jJgE8COlWyqSVyMWBoCFKeh47Q.roa (raw, json)
Hash identifier: 1FdyKaioS5K735jn3TY3FgYlgaH5nLJmn4x6E2jKS2Q=
Subject key identifier: EA:32:60:13:C0:8E:95:6C:AA:49:5C:8C:58:1A:02:14:A7:A1:E3:B4
Certificate issuer: /CN=77e2b3fb37aada1eb9a7412faff48f4c5a36f964
Certificate serial: 01856BDCB038F0E6F9AA30A53CDABE6FC9EC
Authority key identifier: 77:E2:B3:FB:37:AA:DA:1E:B9:A7:41:2F:AF:F4:8F:4C:5A:36:F9:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Kz-zeq2h65p0Evr_SPTFo2-WQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/6jJgE8COlWyqSVyMWBoCFKeh47Q.roa
Signing time: Sun 01 Jan 2023 05:45:03 +0000
ROA not before: Sun 01 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21286
IP address blocks: 80.79.96.0/20 maxlen: 20
2a03:4800:100::/40 maxlen: 40
2a03:4800::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b0:38:f0:e6:f9:aa:30:a5:3c:da:be:6f:c9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e2b3fb37aada1eb9a7412faff48f4c5a36f964
Validity
Not Before: Jan 1 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea326013c08e956caa495c8c581a0214a7a1e3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:72:3d:cc:9b:99:07:c7:3d:6c:e6:5b:34:
ee:a8:ca:f5:be:08:e6:58:d9:72:e4:b6:4a:8c:16:
03:e6:cf:02:7b:a2:a9:a0:d3:53:8e:97:58:1c:2e:
1f:a9:ca:fd:b5:5d:d1:ab:ac:3f:e3:0e:ba:47:76:
7e:39:0d:03:11:f3:ef:2f:df:be:49:94:61:27:bb:
75:12:43:fd:a5:ad:5e:d3:ed:6f:88:30:51:ea:79:
51:27:80:f3:85:5d:b8:ca:a4:a9:35:6f:b3:b6:2d:
2f:1d:71:75:8e:d9:28:a0:e2:7c:6e:89:8d:00:04:
7a:53:5b:e1:49:30:0c:22:4f:54:a2:46:01:c4:53:
73:cb:d0:9a:8e:f1:e4:51:39:ff:22:25:d6:60:8e:
cc:00:ab:d9:8b:f6:c4:2a:fc:29:7f:65:37:e2:3b:
28:95:a2:43:e2:69:e7:68:60:44:28:6a:60:15:75:
d9:43:84:00:e3:b3:b9:ac:98:51:e8:1a:4c:4e:ba:
a8:05:f5:1c:9c:e0:d0:1c:69:9a:c7:d4:1b:7a:23:
18:aa:37:b9:e9:01:d5:88:5b:87:61:3f:6f:18:c6:
2a:fc:1c:6b:04:f4:71:e5:55:60:7b:b6:7b:95:40:
c8:09:a7:a8:79:46:16:87:b1:ce:51:67:45:cf:c9:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:32:60:13:C0:8E:95:6C:AA:49:5C:8C:58:1A:02:14:A7:A1:E3:B4
X509v3 Authority Key Identifier:
keyid:77:E2:B3:FB:37:AA:DA:1E:B9:A7:41:2F:AF:F4:8F:4C:5A:36:F9:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Kz-zeq2h65p0Evr_SPTFo2-WQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/6jJgE8COlWyqSVyMWBoCFKeh47Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f91dc9-4e8a-4701-8cfb-b7bcd3d871b8/1/d-Kz-zeq2h65p0Evr_SPTFo2-WQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.79.96.0/20
IPv6:
2a03:4800::/39
Signature Algorithm: sha256WithRSAEncryption
62:dc:31:89:f5:59:d8:f3:80:35:6c:27:9d:1f:80:89:35:e6:
43:70:58:81:f8:c2:49:be:a6:c3:27:50:a4:0a:11:1e:d8:ee:
0f:27:ec:0a:7b:6f:5c:46:0c:82:89:b6:9d:05:d2:13:41:6f:
e1:e1:97:17:d7:13:74:da:32:b9:09:f4:dc:a0:54:40:b8:7f:
11:1c:56:35:f3:3e:1e:d0:8c:7f:cb:6f:74:9c:d7:65:ff:bc:
18:28:2f:3a:9d:f3:f0:07:9f:7f:d1:a2:91:42:f3:59:e9:d3:
94:c4:bf:65:92:db:56:95:b5:76:87:98:92:8e:79:41:6c:ad:
d6:70:11:8b:0c:45:39:a7:e8:a3:65:38:36:67:7e:55:56:8b:
d1:13:99:77:28:9b:33:a7:ce:03:f3:d6:32:99:58:64:c3:20:
d9:66:b0:a4:90:26:df:4f:b4:ae:7e:7a:c7:fb:0b:a1:86:8f:
1e:51:52:08:5d:a1:e6:2f:d9:ab:20:8d:08:c1:9a:78:95:3e:
2f:fc:19:cd:bc:e0:85:00:05:7f:ab:c5:de:40:bd:cc:bc:7e:
cc:54:87:30:72:fb:d6:1a:e7:51:d5:95:45:ad:9f:2a:11:69:
e9:07:da:dc:f5:c0:4a:16:9d:cd:f1:87:74:87:81:6e:8f:4c:
91:29:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:49 2024 by rpki-client on console-fra.rpki-client.org