Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa
File: SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa (raw, json)
Hash identifier: gP7artmh6fIWmpukLVqDcjJQWf8ab/rAl4dSn8duGks=
Subject key identifier: 49:B1:E9:45:BF:45:F8:F6:6D:FE:B6:59:62:B0:78:49:A5:77:E1:74
Certificate issuer: /CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Certificate serial: 018793EAA63A4BD9C4A30A4284ED6A0D623F
Authority key identifier: F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa
Signing time: Tue 18 Apr 2023 10:30:41 +0000
ROA not before: Tue 18 Apr 2023 10:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a06:fc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:ea:a6:3a:4b:d9:c4:a3:0a:42:84:ed:6a:0d:62:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e2e9b5fb967a7d3d78d0fbb930c080ec9d91e5
Validity
Not Before: Apr 18 10:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49b1e945bf45f8f66dfeb65962b07849a577e174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:da:b8:23:5e:60:5d:8e:e4:19:e0:55:9f:23:
32:01:6f:f2:0b:cd:d0:46:8a:21:d2:02:e4:e5:e0:
e2:1a:ef:49:a1:14:3c:16:5c:9d:6c:00:8c:e0:a3:
de:b1:db:18:b3:15:54:45:11:23:eb:e1:52:3b:23:
24:96:2e:16:05:0f:ea:4c:20:5a:61:4d:9b:35:2c:
d2:98:eb:ed:fc:e4:15:de:6a:eb:1d:c3:8a:9b:22:
72:3b:14:0b:3d:cf:13:fa:6b:aa:c5:bc:91:59:b7:
92:b4:f9:c7:e6:a3:1b:c9:6d:ec:22:c2:3c:e8:c7:
e8:65:54:a1:81:b2:c7:a5:08:e7:82:0c:a5:f1:d3:
18:0c:5c:54:5a:3c:a5:65:1d:f9:95:c2:9d:90:c8:
b8:ca:93:70:6a:d8:4e:e5:21:db:bb:db:50:d1:21:
18:9f:1f:c1:38:af:e2:1e:89:04:5c:6e:16:4c:5f:
6f:6c:33:ff:82:2d:ce:0d:be:f3:dd:e1:00:48:40:
02:f7:ae:96:bc:6f:ff:f9:ff:2e:16:32:8e:e4:ba:
36:8a:18:3a:1f:1b:5d:83:b0:99:07:1f:d1:b9:8e:
14:d1:03:ae:08:1c:67:a6:30:8b:cf:70:96:09:54:
04:29:e2:fa:ad:8e:ce:f3:03:4d:c2:50:39:86:f9:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:E9:45:BF:45:F8:F6:6D:FE:B6:59:62:B0:78:49:A5:77:E1:74
X509v3 Authority Key Identifier:
keyid:F4:E2:E9:B5:FB:96:7A:7D:3D:78:D0:FB:B9:30:C0:80:EC:9D:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OLptfuWen09eND7uTDAgOydkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/SbHpRb9F-PZt_rZZYrB4SaV34XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3debfc-df2e-49d4-bdc6-6d54bf44995e/1/9OLptfuWen09eND7uTDAgOydkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:e5:a7:26:02:f8:3f:78:01:0c:3a:73:3c:4e:9a:e4:92:c4:
6c:74:07:ec:51:26:c4:2d:92:62:db:3d:1e:5e:80:48:9d:da:
eb:0a:25:01:a8:fc:53:61:42:94:74:3e:59:ee:88:dd:d5:61:
67:89:1a:8c:75:e8:da:b8:18:4e:59:c1:8f:ec:fb:ef:ca:5f:
ef:86:c1:85:0f:0f:37:2a:57:a8:b6:9a:cc:42:9c:1d:5c:3c:
f1:2c:47:38:1f:9d:a7:9f:19:62:a1:b6:4c:c8:ed:a9:54:3f:
3a:b8:28:2e:de:93:4e:43:b3:b6:d0:f6:76:d4:8d:0b:6a:24:
58:cd:fd:95:e8:2d:77:bb:8e:92:7b:1c:a0:1e:53:8d:07:42:
a6:27:c4:f4:94:6a:c3:08:0f:bc:3f:d2:a8:ec:a2:53:81:1b:
87:61:d3:a2:cb:53:30:c6:87:a5:67:bf:4a:a7:6d:f2:7b:55:
43:54:59:0a:56:41:a2:46:98:75:f5:b9:88:fb:27:02:20:67:
88:2b:31:07:6b:92:d3:28:be:5b:5a:56:ea:c1:ba:3f:b1:21:
66:3a:8e:b3:07:91:88:3d:f1:19:f0:68:f8:32:28:72:a5:d5:
70:71:b0:8f:d8:20:ef:d5:32:9a:df:9d:10:d5:7f:be:b1:11:
28:c3:87:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 09:24:11 2023 by rpki-client on console-fra.rpki-client.org