Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/BCcTQWv2Fe3VZz4lksk-rFrVfA4.roa
File: BCcTQWv2Fe3VZz4lksk-rFrVfA4.roa (raw, json)
Hash identifier: JYAHKLXVGfHjy+X5KXy080okiXAysEFdokew+GsGCOk=
Subject key identifier: 04:27:13:41:6B:F6:15:ED:D5:67:3E:25:92:C9:3E:AC:5A:D5:7C:0E
Certificate issuer: /CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Certificate serial: 01857371633C81BF8B7FF22E1129AF32642A
Authority key identifier: 6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/BCcTQWv2Fe3VZz4lksk-rFrVfA4.roa
Signing time: Mon 02 Jan 2023 17:04:48 +0000
ROA not before: Mon 02 Jan 2023 17:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:3280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:71:63:3c:81:bf:8b:7f:f2:2e:11:29:af:32:64:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Validity
Not Before: Jan 2 17:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=042713416bf615edd5673e2592c93eac5ad57c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:ef:87:df:cd:95:be:42:b3:cb:d0:16:f1:
f0:39:62:fe:35:47:7c:0b:b9:d7:0b:3f:01:bc:2d:
43:23:8e:91:24:5b:e8:31:74:37:8f:d6:42:05:c9:
cf:24:49:2d:e8:9e:d2:74:c3:1f:ef:aa:e8:cd:46:
08:38:d0:9b:4d:cf:72:7d:ac:6d:c5:f8:58:76:86:
d9:4a:a4:e3:6f:81:ea:aa:f0:18:ef:f1:d5:c4:50:
d7:50:f3:86:10:ef:d9:cf:95:41:35:40:e1:04:fa:
09:d6:5d:dd:b2:a5:67:e5:5e:88:02:42:6d:f4:3e:
9f:c1:20:34:9d:03:40:ec:86:65:2d:68:a3:c2:4c:
de:cc:a0:a2:10:e9:e4:c7:cf:0d:71:22:68:ed:a2:
1c:ea:25:4f:28:ac:72:93:8e:c7:17:47:f2:3a:26:
ff:fa:73:ed:a2:1a:7b:14:17:12:e9:8c:f5:ab:b1:
1f:77:84:f7:81:6f:f7:de:b8:c8:bd:24:bb:5a:03:
52:a0:49:f2:a9:0f:4c:86:17:d8:c7:7c:5d:24:fc:
3f:33:ac:5c:57:06:50:d4:8a:1b:6f:0a:1d:7c:cc:
63:30:39:3d:35:76:62:70:f3:e0:14:06:b5:95:a8:
0e:ad:62:5b:82:54:5a:55:ce:c4:27:17:50:33:2e:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:27:13:41:6B:F6:15:ED:D5:67:3E:25:92:C9:3E:AC:5A:D5:7C:0E
X509v3 Authority Key Identifier:
keyid:6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/BCcTQWv2Fe3VZz4lksk-rFrVfA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3280::/29
Signature Algorithm: sha256WithRSAEncryption
3e:b4:90:3a:2f:d0:6d:19:64:bb:19:bf:be:b5:8d:ad:04:82:
dd:de:ff:a4:8f:ac:82:52:14:60:b3:ac:55:12:d0:ef:fb:97:
37:01:65:04:a4:e5:cd:8d:cf:26:40:9d:09:be:92:e4:96:35:
e6:4e:b5:6d:64:10:9f:89:55:5a:42:1c:b7:ab:58:47:bd:0d:
4c:f0:09:ea:1b:dc:88:51:60:38:e0:a9:9b:07:85:3f:71:2d:
8f:cf:71:79:da:b5:2b:a2:66:eb:99:a6:57:71:d3:82:43:cc:
af:48:5b:f4:3a:a2:9e:a4:d0:08:02:c2:74:14:32:53:30:ed:
88:43:a2:0d:b4:40:9c:5a:62:d9:60:aa:11:75:75:59:1b:ba:
75:42:58:59:94:e4:83:86:2b:03:97:37:28:8f:bb:78:cd:54:
44:b1:7f:5b:9e:3d:30:17:ed:44:93:a0:ca:8f:dc:39:4b:5c:
d1:84:67:04:92:0f:c7:30:cd:ce:e6:b4:53:a8:e5:14:9d:1a:
c1:d6:a0:6d:a8:d3:e6:bd:52:f5:7c:4e:5e:11:db:41:16:a8:
58:ee:5e:d7:c3:f2:6d:70:c2:5b:a2:07:d1:6b:20:4b:40:c4:
5c:00:fd:c4:5d:5a:e9:1d:bf:17:4c:b2:46:1a:4c:3e:ff:b6:
79:a4:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:12 2024 by rpki-client on console-fra.rpki-client.org