Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/A4vUcx5ehjP6f2coHveQ4AdSzkg.roa
File: A4vUcx5ehjP6f2coHveQ4AdSzkg.roa (raw, json)
Hash identifier: pvhmP6kggOQ9g00F3Swb2I6wKYQHqXlkI1BO3aH1KTA=
Subject key identifier: 03:8B:D4:73:1E:5E:86:33:FA:7F:67:28:1E:F7:90:E0:07:52:CE:48
Certificate issuer: /CN=8ce02524bc3d25fc873a2f5c454a728cc508009e
Certificate serial: 07F6915F
Authority key identifier: 8C:E0:25:24:BC:3D:25:FC:87:3A:2F:5C:45:4A:72:8C:C5:08:00:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/A4vUcx5ehjP6f2coHveQ4AdSzkg.roa
Signing time: Thu 20 Jan 2022 09:11:00 +0000
ROA not before: Thu 20 Jan 2022 09:11:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 2a0f:7803::/32 maxlen: 32
2a0f:7801::/32 maxlen: 32
2a0f:7805::/32 maxlen: 32
2a0f:7807::/32 maxlen: 32
2a0f:7804::/32 maxlen: 32
2a0f:7802::/32 maxlen: 32
2a0f:7800::/32 maxlen: 32
2a0f:7806::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133599583 (0x7f6915f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce02524bc3d25fc873a2f5c454a728cc508009e
Validity
Not Before: Jan 20 09:11:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=038bd4731e5e8633fa7f67281ef790e00752ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4d:21:95:a1:ed:f3:d4:4f:a0:fc:8c:0f:c1:
53:b6:19:ad:d6:db:65:72:55:59:57:b4:58:ed:9c:
2c:e7:0e:19:94:2f:6f:e4:f3:a2:17:7e:87:18:6f:
3a:3b:85:6f:42:5b:7d:b0:be:90:59:7a:3e:f4:5b:
1c:cb:6f:9e:45:e8:aa:95:22:b5:fe:6c:7a:e4:5c:
48:8b:f1:da:e1:fe:b7:d0:1a:74:13:b3:63:69:91:
e7:9c:7f:20:37:8d:3d:b5:a9:67:00:12:36:d6:43:
26:00:7b:2e:12:0d:45:b9:6f:7d:64:8a:cb:c3:88:
5c:48:32:f4:37:9e:39:6d:f5:d8:1d:57:7b:14:64:
cb:41:c6:fb:02:0d:06:d3:33:ab:dc:87:18:63:14:
77:81:25:7b:0b:cf:e8:2a:e1:62:2e:6e:ba:c5:8b:
c7:1e:50:63:7c:c9:13:70:a1:b4:a9:aa:d0:4e:2a:
8a:85:89:bf:61:47:9f:eb:6c:4e:aa:70:61:c4:81:
fc:73:70:4a:ca:1c:dc:88:52:b2:a3:61:8e:fc:d2:
48:35:88:9c:37:ae:43:6c:b2:d0:9c:86:42:be:65:
db:ad:2e:7d:b9:80:fc:36:9a:a2:54:30:0c:39:13:
90:59:70:75:61:f5:48:e0:15:22:44:d9:5b:b3:97:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:D4:73:1E:5E:86:33:FA:7F:67:28:1E:F7:90:E0:07:52:CE:48
X509v3 Authority Key Identifier:
keyid:8C:E0:25:24:BC:3D:25:FC:87:3A:2F:5C:45:4A:72:8C:C5:08:00:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/A4vUcx5ehjP6f2coHveQ4AdSzkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a9e8d1-e8a9-467b-8b7c-1dfd8de34e84/1/jOAlJLw9JfyHOi9cRUpyjMUIAJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7800::/29
Signature Algorithm: sha256WithRSAEncryption
1c:a1:2d:ed:35:00:43:d2:31:52:49:ce:78:91:e0:49:36:88:
30:0e:b6:40:81:4d:46:a9:cb:62:76:6e:5d:93:d8:d6:09:26:
d5:be:67:93:4e:4b:fe:22:71:39:89:a5:5f:0b:cc:72:9d:fd:
79:cb:3e:1a:1f:ba:9c:81:ab:27:34:53:fc:64:9f:58:29:20:
7f:63:23:3b:6c:53:36:64:ac:a4:76:da:97:98:62:27:4b:73:
88:01:62:cd:c5:16:8a:6f:db:83:da:06:df:61:90:ee:9d:8d:
2c:3c:0c:13:ae:cf:ab:0e:ca:89:14:a5:87:a5:b2:41:17:fb:
36:f6:98:c2:17:17:dd:33:33:3d:12:03:2b:11:5c:95:d8:7e:
51:18:b5:31:37:77:11:0f:6e:ee:52:6f:db:e6:71:39:f3:7e:
78:55:51:08:63:c9:1e:9d:20:fa:1f:46:cd:01:10:de:b5:14:
ec:90:7f:4d:51:c8:38:d1:96:88:ff:c2:a2:0e:cd:63:9f:d2:
20:bd:92:62:3e:7a:9c:76:61:f8:58:d4:8d:7e:f6:09:70:59:
dc:a9:f0:cf:40:de:ca:4c:08:7b:08:03:80:8f:ff:78:dc:87:
0f:27:82:93:84:03:71:1a:d2:d2:f0:57:e8:f3:8e:d9:5f:1c:
a9:39:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:39 2023 by rpki-client on console-ams.rpki-client.org