Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/IgWwrdQtkfKVdfgngoDYh6N6ORs.roa
File: IgWwrdQtkfKVdfgngoDYh6N6ORs.roa (raw, json)
Hash identifier: dVQJ0Sm21HweDsPvdWytzMMWJljqLBBALDGnc4dpjcs=
Subject key identifier: 22:05:B0:AD:D4:2D:91:F2:95:75:F8:27:82:80:D8:87:A3:7A:39:1B
Certificate issuer: /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial: 01918EB5F05B61525E719248127D1F9E87D7
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/IgWwrdQtkfKVdfgngoDYh6N6ORs.roa
Signing time: Mon 26 Aug 2024 12:42:53 +0000
ROA not before: Mon 26 Aug 2024 12:42:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201453
IP address blocks: 2a06:6380::/29 maxlen: 29
2a06:6380::/32 maxlen: 32
2a06:6381::/32 maxlen: 32
2a06:6382::/32 maxlen: 32
2a06:6383::/32 maxlen: 32
2a06:6384::/32 maxlen: 32
2a06:6385::/32 maxlen: 32
2a06:6386::/32 maxlen: 32
2a06:6387::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:b5:f0:5b:61:52:5e:71:92:48:12:7d:1f:9e:87:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Validity
Not Before: Aug 26 12:42:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2205b0add42d91f29575f8278280d887a37a391b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:df:c4:4a:3e:da:24:1d:2b:24:12:a9:11:
f8:6c:fd:14:6b:08:e3:bd:40:a0:ed:33:e4:68:5d:
25:0f:e1:37:a4:5e:7b:3b:a8:cf:e8:02:0c:33:79:
8f:20:83:18:08:62:f2:b3:98:c5:9e:d3:ff:d9:6c:
ec:18:e4:ce:4f:3d:d2:00:a8:ae:ae:fc:98:42:84:
05:38:91:19:91:02:4b:72:23:f1:ed:33:70:5c:52:
c1:5a:b0:90:d2:d7:8c:11:0e:6d:e6:9f:1b:35:9e:
a7:86:a9:16:d2:cd:c1:98:4f:5b:85:2f:52:ef:f3:
a7:2c:e7:98:10:59:44:97:78:6c:12:b1:77:1a:b6:
d7:64:67:38:43:bc:50:15:23:77:76:62:6e:39:c7:
e9:c2:09:37:3a:e3:98:f4:55:03:6b:8d:02:1c:61:
75:88:be:c5:8f:73:5d:70:99:ac:ef:e8:12:cf:c0:
fe:07:87:d6:5e:7a:83:72:62:4c:8e:4a:0e:3b:6b:
80:53:40:59:e0:fc:a4:bd:9b:77:96:88:76:e9:9b:
3b:a3:bc:6e:95:3b:55:f7:a6:76:d7:8b:5c:64:ae:
80:7b:65:b1:25:a4:06:b1:3d:5c:ee:85:9e:2b:c9:
4d:7d:0e:ae:6c:4a:65:0d:9f:a8:d8:d8:d4:9a:ad:
e2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:05:B0:AD:D4:2D:91:F2:95:75:F8:27:82:80:D8:87:A3:7A:39:1B
X509v3 Authority Key Identifier:
keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/IgWwrdQtkfKVdfgngoDYh6N6ORs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:6380::/29
Signature Algorithm: sha256WithRSAEncryption
38:68:08:d8:90:1e:c5:90:83:5c:5e:0d:29:80:de:a8:af:bd:
16:25:28:ff:21:28:d2:e3:90:8f:c7:c1:8a:8e:64:23:f9:96:
72:6c:fc:c9:ea:50:d7:e7:2e:f3:aa:ed:ba:9d:01:e3:f5:3e:
2b:42:43:53:b3:c3:26:fa:ac:f5:e9:63:00:16:30:be:87:61:
51:59:eb:ca:95:5a:b2:f8:b2:0c:92:8c:fe:04:9a:f5:df:39:
46:9f:2e:24:73:1f:a6:e2:01:5c:12:0d:82:e2:87:bb:05:09:
df:64:f4:c1:bd:0c:4b:d0:46:d2:8a:35:1e:40:63:4e:4e:59:
e1:b5:2f:af:c9:7b:45:c1:0c:da:8b:e4:60:b0:f7:ee:5b:83:
3a:07:64:28:9e:2a:42:99:db:1f:e8:25:0d:9c:36:74:7e:11:
14:7c:fb:31:4d:2d:bd:bc:b9:43:9d:44:4e:9e:8b:51:2a:6a:
bc:a9:4a:1b:74:d6:c8:90:db:a4:f3:59:e3:09:4f:b7:35:1a:
b4:cf:0c:f0:81:f1:17:73:f0:df:61:7b:a2:72:e9:30:69:82:
3a:e2:8c:24:80:fe:45:17:dc:c6:10:40:b9:39:f1:bc:4c:4b:
31:03:01:a1:a2:dc:d9:f2:e2:b1:39:e1:4b:31:6f:8a:77:f7:
ea:97:52:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 15:00:46 2024 by rpki-client on console-fra.rpki-client.org