Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/IfNs4HF7V0mOm7lX28soYOXKMdw.roa
File: IfNs4HF7V0mOm7lX28soYOXKMdw.roa (raw, json)
Hash identifier: e32TLy62q4VKV81mh0ne+zz4JElbQNMB30l9kHEiIdo=
Subject key identifier: 21:F3:6C:E0:71:7B:57:49:8E:9B:B9:57:DB:CB:28:60:E5:CA:31:DC
Certificate issuer: /CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Certificate serial: 018BC8A19F8AFF6FEA9BAE63D464D2242C39
Authority key identifier: 54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/IfNs4HF7V0mOm7lX28soYOXKMdw.roa
Signing time: Mon 13 Nov 2023 12:21:57 +0000
ROA not before: Mon 13 Nov 2023 12:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216006
IP address blocks: 2a13:ee40:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:a1:9f:8a:ff:6f:ea:9b:ae:63:d4:64:d2:24:2c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Validity
Not Before: Nov 13 12:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f36ce0717b57498e9bb957dbcb2860e5ca31dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:03:f0:58:2f:d2:49:d4:f5:20:6f:17:01:a5:
d2:93:9d:0b:54:8d:b2:e9:b4:af:c2:86:68:a2:4a:
1d:a2:b0:24:ad:27:30:a4:40:2f:c4:f0:6c:8b:f8:
20:df:f2:c6:ea:3f:e7:4f:6b:f3:f1:07:2f:cd:8b:
b5:d8:57:e6:4b:17:a1:a5:72:0a:92:dc:51:2a:a9:
d8:49:05:74:b7:1c:6f:29:90:76:6f:15:d8:b1:25:
8f:3e:77:3a:e3:06:77:4f:8c:3b:1f:c9:77:ea:83:
39:bc:6d:e5:f6:21:7c:c3:1d:7a:59:a4:a9:3d:7a:
4e:aa:c4:88:0a:15:c0:e8:09:05:4c:b3:a5:2c:8b:
f2:f2:d5:80:29:8d:93:9d:2d:4b:7f:39:6c:86:0d:
3c:83:5a:50:9a:54:18:ed:de:97:33:3e:1b:c6:a1:
a4:e4:2c:a9:03:09:08:67:25:6c:ad:5b:a2:d0:54:
e8:94:41:f0:f4:ef:77:bb:a9:46:3c:2b:bf:4c:6f:
24:f8:d0:b3:d5:e6:98:32:30:b9:a4:79:04:f5:88:
95:ac:f6:ac:d3:a2:1c:b4:08:d7:9a:9e:d3:2c:cb:
9f:4d:21:f6:57:bd:35:a5:4b:4c:f3:41:ec:62:10:
26:db:88:c6:38:47:71:87:12:6e:79:1a:06:c7:86:
49:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:6C:E0:71:7B:57:49:8E:9B:B9:57:DB:CB:28:60:E5:CA:31:DC
X509v3 Authority Key Identifier:
keyid:54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/IfNs4HF7V0mOm7lX28soYOXKMdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ee40:200::/40
Signature Algorithm: sha256WithRSAEncryption
5a:13:ef:ea:62:f0:54:0b:4b:72:26:37:b0:c7:4e:08:1d:fa:
a9:04:06:81:0b:2b:d2:37:a4:d7:f6:02:ba:41:c4:c9:0f:bd:
fb:8c:ce:81:6f:75:fd:fa:85:ee:f3:58:bb:c1:64:4e:de:aa:
f8:a6:91:ad:a8:0d:db:c1:35:33:0f:75:42:47:e0:3b:a1:a7:
df:93:bc:6e:5d:08:d4:bf:ab:7f:e6:fd:58:ef:d0:57:82:f6:
53:43:72:0e:03:71:e4:2e:41:85:57:e4:87:f9:a0:a2:15:09:
e9:c4:b1:7b:20:fb:ba:35:de:1e:1a:2b:c3:c8:af:45:66:22:
3f:07:34:50:d0:8c:4f:f9:d8:82:1a:c9:84:55:b5:49:1d:a8:
f3:7d:76:0a:3a:53:9e:4e:e4:4d:18:4a:64:95:96:10:d5:d0:
dc:2c:20:d8:61:c0:f9:31:18:52:ec:ab:0e:77:44:47:94:ff:
78:6b:b4:8a:f0:63:e1:a9:23:01:af:8e:9e:7a:39:50:1d:48:
ea:28:db:c7:21:8d:c5:d6:f3:27:87:97:f6:fe:b4:74:67:7a:
d6:6c:84:c6:dd:4e:05:b2:7d:ae:bb:3b:17:da:45:7a:7b:5a:
92:f7:f6:9f:21:e6:27:e2:8e:0c:c8:ba:7d:fa:7b:52:21:6a:
93:00:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:46 2024 by rpki-client on console-fra.rpki-client.org