Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/DQLgpfDRElGbKRJJan69mA-UNgs.roa
File: DQLgpfDRElGbKRJJan69mA-UNgs.roa (raw, json)
Hash identifier: brWmk/4Be14gV3f27iH+PCoUYo4j0J0D2WcucCBZ0Qo=
Subject key identifier: 0D:02:E0:A5:F0:D1:12:51:9B:29:12:49:6A:7E:BD:98:0F:94:36:0B
Certificate issuer: /CN=b7d4de6d626863478e95bce683a87f0aaf49b5d0
Certificate serial: 018D07B2E4B8FB527138F8AEC8E158290E7F
Authority key identifier: B7:D4:DE:6D:62:68:63:47:8E:95:BC:E6:83:A8:7F:0A:AF:49:B5:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9TebWJoY0eOlbzmg6h_Cq9JtdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/DQLgpfDRElGbKRJJan69mA-UNgs.roa
Signing time: Sun 14 Jan 2024 11:19:40 +0000
ROA not before: Sun 14 Jan 2024 11:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215745
IP address blocks: 2a14:7580:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:07:b2:e4:b8:fb:52:71:38:f8:ae:c8:e1:58:29:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7d4de6d626863478e95bce683a87f0aaf49b5d0
Validity
Not Before: Jan 14 11:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d02e0a5f0d112519b2912496a7ebd980f94360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:68:70:e1:49:8f:66:d3:e8:79:dc:e3:55:2b:
a9:8d:42:cb:03:d0:33:bf:a3:73:e8:4c:f6:ea:f1:
cf:69:6e:83:d8:c3:37:cb:c2:7b:7f:0a:07:5f:83:
e1:02:1a:4d:b0:16:bd:9a:dc:ba:f2:7c:f4:b9:e3:
28:dd:d0:65:e3:e9:95:29:73:0e:0b:7b:f6:04:29:
80:92:b8:63:74:da:8e:7e:53:54:27:87:52:6a:70:
37:fc:55:cd:22:59:69:59:65:20:32:1f:60:09:24:
57:fe:59:0a:b8:d4:05:3d:ae:42:2a:ec:d8:a6:48:
ac:6d:9f:25:78:3a:6a:3a:10:b9:5d:17:e4:67:78:
df:e4:cb:db:17:ba:cb:5c:55:74:ef:8b:d7:dd:ca:
bc:59:62:5b:1b:03:f5:a4:81:be:c7:f8:2d:4c:e6:
f3:f9:aa:20:3b:53:51:b4:fd:0e:07:e5:a6:5d:d7:
ca:05:f6:4c:73:8c:73:d0:a5:c1:2b:e8:2d:44:d3:
2c:16:d8:c7:a0:fe:a6:4c:b0:36:e2:f3:66:5e:ba:
5e:50:bf:23:fc:e9:e1:53:5a:d2:2e:79:26:bc:8e:
c9:b9:e2:d3:9b:bf:6d:61:33:8f:65:87:e5:a8:fa:
13:50:c1:b3:11:2f:c4:a8:15:98:24:9e:2b:c5:29:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:02:E0:A5:F0:D1:12:51:9B:29:12:49:6A:7E:BD:98:0F:94:36:0B
X509v3 Authority Key Identifier:
keyid:B7:D4:DE:6D:62:68:63:47:8E:95:BC:E6:83:A8:7F:0A:AF:49:B5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9TebWJoY0eOlbzmg6h_Cq9JtdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/DQLgpfDRElGbKRJJan69mA-UNgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/502a56-7e08-467f-802c-9d23b562118f/1/t9TebWJoY0eOlbzmg6h_Cq9JtdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7580:beef::/48
Signature Algorithm: sha256WithRSAEncryption
3f:c0:d0:0b:00:11:07:66:3b:1b:cb:62:98:8c:10:2f:68:39:
c1:d2:3f:5e:f6:f7:f7:d7:a5:5f:18:d5:b2:fc:e6:1a:b5:04:
1b:26:e0:e2:42:92:2d:64:24:8f:e4:bd:ad:d4:1a:f2:aa:d5:
52:86:a7:0e:5a:31:49:c1:e1:33:8b:db:7e:0a:70:03:12:c8:
08:a8:96:09:24:1a:1f:d0:ef:ba:ba:c4:1f:af:a4:08:4e:dd:
10:1a:05:12:24:93:ec:f2:d8:86:ba:bf:a6:d2:e9:e9:0f:29:
4e:00:d8:c0:c8:be:1b:d8:c0:64:ff:ab:cd:c8:e8:14:39:d0:
c6:e9:82:3b:ce:f7:1e:df:db:79:92:17:05:75:c1:99:39:6b:
3f:55:cb:18:c1:d7:f3:e7:7b:28:d1:3f:06:43:17:7e:f0:e1:
17:a4:72:e5:8f:d2:24:c3:a0:6d:79:cd:47:40:e5:3a:3c:3d:
18:51:d7:41:84:d3:bc:b5:31:63:69:b0:e1:d7:4f:dc:db:9c:
76:43:ad:bd:50:10:e0:d3:a3:e2:15:a1:e6:e5:9a:5a:56:b8:
b6:01:b1:56:a8:48:e3:8f:6e:f2:3c:1e:f9:e6:59:2d:51:6f:
fb:44:4e:aa:3a:13:2a:c0:b4:67:a1:24:0b:98:70:79:49:13:
ef:6a:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:24 2024 by rpki-client on console-fra.rpki-client.org