Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/QVQV5ueDFDUJWatCiSuMxtnyqik.roa
File: QVQV5ueDFDUJWatCiSuMxtnyqik.roa (raw, json)
Hash identifier: 9+FV6TnxliggBsOeBGu8B7eKAKq0qfrSXp7y7Dcp41s=
Subject key identifier: 41:54:15:E6:E7:83:14:35:09:59:AB:42:89:2B:8C:C6:D9:F2:AA:29
Certificate issuer: /CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Certificate serial: 08EC237F
Authority key identifier: EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/QVQV5ueDFDUJWatCiSuMxtnyqik.roa
Signing time: Sat 01 Jan 2022 14:06:17 +0000
ROA not before: Sat 01 Jan 2022 14:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42993
IP address blocks: 2a0e:4000::/40 maxlen: 40
2a0e:4000::/48 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149693311 (0x8ec237f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec68368c5d294160f4d2d0ceaf7531e4475fa533
Validity
Not Before: Jan 1 14:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=415415e6e78314350959ab42892b8cc6d9f2aa29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:4c:a5:14:b9:3e:eb:a9:b1:00:e1:3a:21:
30:3d:39:65:77:c0:9e:11:df:d4:26:1e:9d:bd:65:
56:1e:2c:c0:73:ec:0a:98:08:dc:d0:a9:d1:00:9c:
4c:fb:83:6b:20:10:45:c3:34:aa:fd:c2:39:c5:12:
96:8c:4a:f5:67:3f:20:42:42:d8:64:c7:da:a8:2e:
d8:01:4c:76:27:4c:59:84:07:16:25:b6:a0:fa:4a:
ba:7c:26:74:74:f9:fc:87:54:73:ca:1b:68:e0:f6:
bd:08:13:de:25:58:1b:56:da:c5:f7:de:f8:95:a9:
f3:dc:7a:56:69:86:ed:ef:8d:2a:d5:58:45:67:23:
2a:12:f4:33:2e:50:6c:96:1d:47:d9:2d:b0:14:50:
c6:13:b1:0c:00:0b:a4:ce:2c:62:ab:ec:8e:47:43:
83:cd:9d:72:c0:d9:ff:49:ce:83:6b:23:d4:e6:b2:
6d:ec:b4:82:f2:ce:9f:31:af:d1:f0:ab:bb:b4:03:
54:84:02:7b:6a:74:ca:a3:3a:f8:d0:0b:0a:c2:b8:
9b:a9:ab:2a:e7:40:4e:8d:ac:15:04:9e:f4:09:98:
78:18:ef:fd:71:66:12:54:05:e7:0c:99:32:b7:43:
dd:ee:3d:c2:23:0d:1f:66:22:8e:2d:8c:72:30:28:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:15:E6:E7:83:14:35:09:59:AB:42:89:2B:8C:C6:D9:F2:AA:29
X509v3 Authority Key Identifier:
keyid:EC:68:36:8C:5D:29:41:60:F4:D2:D0:CE:AF:75:31:E4:47:5F:A5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/QVQV5ueDFDUJWatCiSuMxtnyqik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7fbb64-ff75-4082-9d1c-50f597043655/1/7Gg2jF0pQWD00tDOr3Ux5EdfpTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4000::/40
Signature Algorithm: sha256WithRSAEncryption
69:ff:5e:43:f0:c7:08:00:59:27:e5:bf:6c:73:51:88:b1:29:
2f:94:b2:1e:49:27:82:5d:d7:da:fc:50:4d:23:8d:f3:85:47:
f2:7f:15:6d:05:47:58:a4:12:92:ea:ef:18:28:ae:b9:a1:d5:
20:64:d8:76:13:85:ea:32:6d:f2:31:63:7f:12:b0:61:93:d7:
43:64:41:c6:07:8c:e7:c3:e2:f4:86:3b:36:fd:93:9a:ea:b9:
72:ce:5f:51:eb:a2:c9:d2:42:dd:87:21:10:9d:b6:44:cc:6b:
84:85:3b:75:e2:0e:d5:55:0a:92:06:70:b3:a9:c1:c5:38:c3:
87:d7:e8:ce:08:12:fe:46:55:8b:cd:6a:be:d7:e7:0e:f2:e1:
a4:6e:b3:90:86:55:91:0e:fe:9d:6a:98:21:f2:a5:76:30:83:
0a:a1:d5:ec:f9:d4:db:8b:76:63:9e:a0:ea:42:09:b6:08:79:
33:cc:6b:3e:37:16:93:38:4a:ac:df:d9:20:10:f2:29:45:80:
97:4d:57:57:09:bf:e2:1f:a3:f5:c2:8c:ea:94:5f:bc:69:62:
89:82:31:0e:4a:cc:33:5f:a3:cb:75:85:fd:4b:dc:77:15:3a:
3b:56:16:ba:d8:29:7c:10:38:cb:a6:55:31:5a:52:16:25:bb:
76:ac:b0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:48 2024 by rpki-client on console-fra.rpki-client.org