Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/9T81oRsD5Hb0AKIQYfXJV53z-5I.roa
File: 9T81oRsD5Hb0AKIQYfXJV53z-5I.roa (raw, json)
Hash identifier: xMyXRerX/mBYd0p1YXtTCbFj0i5MQ2h3mamc+NZoXK0=
Subject key identifier: F5:3F:35:A1:1B:03:E4:76:F4:00:A2:10:61:F5:C9:57:9D:F3:FB:92
Certificate issuer: /CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Certificate serial: 018CC8DF7EDDFAAC96BDCF5C6B3A2BC590E3
Authority key identifier: B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/9T81oRsD5Hb0AKIQYfXJV53z-5I.roa
Signing time: Tue 02 Jan 2024 06:32:19 +0000
ROA not before: Tue 02 Jan 2024 06:32:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1836
IP address blocks: 2a01:bc60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7e:dd:fa:ac:96:bd:cf:5c:6b:3a:2b:c5:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d1901a7eba6e575bc79f936e94ade7b7b48b53
Validity
Not Before: Jan 2 06:32:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f53f35a11b03e476f400a21061f5c9579df3fb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:21:ab:b3:0d:5d:6d:81:c9:2f:b5:9a:4d:
7a:e1:b2:d4:7f:b0:09:a2:1e:52:be:48:c0:f5:59:
09:f8:8f:16:d3:09:fa:fe:19:13:1d:25:5b:44:22:
d6:48:2b:ca:67:67:c3:c3:ff:bb:e3:5f:c2:7d:b4:
4e:8b:a0:53:a3:d7:08:93:71:9a:6d:6a:f0:f5:ba:
9d:b0:db:c0:46:92:61:7a:50:c0:6c:ba:6c:4f:02:
2a:0c:b3:12:8a:c3:49:37:b9:58:b0:50:01:52:84:
0c:3c:64:69:f8:b6:24:93:7e:a5:25:33:10:ea:10:
f0:57:b7:0f:4c:e8:7d:1d:75:7f:23:83:b7:09:98:
02:20:4c:f8:15:19:11:20:15:24:09:8e:5c:46:a6:
fc:00:67:3c:9c:bb:22:b3:12:de:8f:fd:68:46:e9:
3f:60:47:9f:4d:b8:83:2a:6b:31:1b:1c:8b:f4:c7:
6d:56:2a:30:79:59:f9:53:e4:ac:5c:52:ad:dc:9f:
39:c8:99:85:52:dc:63:a4:99:14:e8:60:21:4e:ef:
19:48:80:51:6f:51:cc:41:c1:b0:c6:4c:c1:89:bd:
64:7b:0c:55:0f:88:bb:37:1f:91:bc:bc:62:86:d7:
fa:bb:07:56:45:ee:7e:e1:e5:0f:50:47:c0:72:c4:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3F:35:A1:1B:03:E4:76:F4:00:A2:10:61:F5:C9:57:9D:F3:FB:92
X509v3 Authority Key Identifier:
keyid:B4:D1:90:1A:7E:BA:6E:57:5B:C7:9F:93:6E:94:AD:E7:B7:B4:8B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNGQGn66bldbx5-TbpSt57e0i1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/9T81oRsD5Hb0AKIQYfXJV53z-5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bec153-160c-438b-862a-d81d3b616fa4/1/tNGQGn66bldbx5-TbpSt57e0i1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bc60::/32
Signature Algorithm: sha256WithRSAEncryption
9c:e3:c0:d7:23:b6:42:b0:98:bc:cb:4a:0d:e2:37:3c:6b:a2:
8d:cf:9b:fd:de:75:50:67:61:75:26:f2:c3:6e:8f:71:30:91:
73:5e:37:a3:8e:7f:60:82:5c:6c:8c:29:68:f7:c9:74:7f:6e:
4c:fb:21:fa:15:58:eb:2e:a6:40:dd:1c:77:2f:fa:54:9a:b1:
25:c0:75:09:9f:f7:e4:78:3b:41:79:6f:c4:63:60:4c:35:61:
12:e3:3c:a8:ba:fe:b8:66:17:aa:52:18:11:fb:bb:eb:07:72:
81:bc:7e:89:b6:b0:f2:e9:a8:00:3e:98:b0:a5:37:97:82:7a:
5b:7e:b0:c4:39:c3:1c:f4:5f:84:f6:d0:7c:b1:c9:fc:a0:16:
fb:c5:76:fa:a3:60:0c:ff:63:6f:1b:39:32:81:4f:df:e6:e4:
54:25:78:f0:dc:fb:36:bd:89:ff:03:bb:8d:af:d5:1e:0f:a1:
95:b2:e0:0f:8b:dd:7d:8d:46:f4:ea:02:35:ac:6c:dc:bd:db:
1c:83:bb:aa:01:58:53:1c:e7:a7:10:b2:4a:bc:32:77:89:76:
63:fd:04:e5:c7:62:b5:8b:84:5c:56:12:53:d1:5a:bc:e4:18:
a8:ff:aa:41:1c:88:31:5a:4a:7d:29:ef:3d:45:7f:81:7c:e4:
81:90:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:26 2024 by rpki-client on console-fra.rpki-client.org