Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/CbSUkQiSRjjwcIBt3vDmdRJblsU.roa
File: CbSUkQiSRjjwcIBt3vDmdRJblsU.roa (raw, json)
Hash identifier: J8fBUsq2+MsXiAWiBVvPglXItMYRY8JCGIGum7kdBMU=
Subject key identifier: 09:B4:94:91:08:92:46:38:F0:70:80:6D:DE:F0:E6:75:12:5B:96:C5
Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial: 03E8FA8E
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/CbSUkQiSRjjwcIBt3vDmdRJblsU.roa
Signing time: Sat 01 Jan 2022 12:54:18 +0000
ROA not before: Sat 01 Jan 2022 12:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 2a01:b960::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65600142 (0x3e8fa8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Validity
Not Before: Jan 1 12:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09b4949108924638f070806ddef0e675125b96c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:98:84:49:92:6d:bf:9d:45:6a:45:50:52:
b9:f3:4f:fb:24:ae:23:b7:04:54:ca:c6:7b:e8:48:
8e:ae:ff:7d:fb:13:5f:13:3e:09:5d:57:7e:45:2a:
b5:31:36:b6:06:27:1f:c4:2a:c3:52:7a:b5:72:d9:
c2:35:6d:9a:73:05:76:c7:32:84:7c:da:c3:6d:fb:
19:42:b1:cc:03:1b:14:91:45:8b:77:b4:bf:77:73:
67:6f:31:67:ec:81:7c:e2:a0:8f:d7:07:64:cb:99:
c1:28:b3:b1:20:d3:15:c7:50:39:97:7c:87:c6:69:
ec:f9:a5:12:29:e2:d4:40:e3:1d:23:a1:3c:bd:d4:
ec:7f:19:89:10:75:5f:b3:73:bd:a6:88:04:5e:f1:
59:d2:c7:38:7e:6e:97:2b:3f:a9:8d:fd:f5:6a:e5:
86:40:dd:5c:ed:b0:15:ce:18:fc:30:a6:86:3f:74:
c9:13:6a:67:76:7a:ec:7d:94:46:2a:d7:5e:09:a1:
07:44:2b:d2:d5:89:1d:cb:9d:17:e4:b5:ef:65:5c:
76:55:69:25:be:46:dd:60:d6:64:91:d8:f4:a6:df:
6f:e0:46:5c:81:42:92:25:92:4f:0f:f2:8f:fb:8c:
43:8e:9a:79:d8:25:d3:62:50:71:5a:fc:8f:ac:81:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B4:94:91:08:92:46:38:F0:70:80:6D:DE:F0:E6:75:12:5B:96:C5
X509v3 Authority Key Identifier:
keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/CbSUkQiSRjjwcIBt3vDmdRJblsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:b960::/32
Signature Algorithm: sha256WithRSAEncryption
69:b0:d7:e5:55:c2:31:e1:59:6b:67:2c:85:b7:c1:0c:78:d0:
ce:14:3b:f5:7f:bb:34:04:92:d0:3f:58:4a:39:71:d2:87:77:
97:47:77:f0:e1:c0:87:a1:96:b3:b5:bc:12:97:07:fe:1d:ca:
a2:1d:f7:7e:50:29:c8:44:aa:68:29:c0:2b:d0:8c:4c:23:ee:
bb:6c:7e:ff:87:0d:3a:18:90:e1:5e:7a:a3:b8:3f:aa:20:93:
0c:af:86:83:fa:85:25:06:67:a3:8b:06:89:78:62:38:cd:ab:
22:a3:09:f0:57:f4:36:27:ba:71:76:cf:c5:72:1e:02:b4:35:
16:11:d5:6b:9f:37:6a:e6:5c:a6:ef:97:6c:48:85:7d:c7:e5:
07:a1:01:e3:11:f1:2b:0f:9a:ef:ae:98:b8:bb:85:e9:82:b3:
4f:b3:bc:fd:1b:f8:01:5b:92:07:30:63:56:78:a5:57:30:50:
f1:ec:e4:61:9e:a2:f7:1a:d5:1e:6a:ae:0d:40:75:9d:44:e0:
38:92:ab:b3:59:0a:c0:db:f0:da:c0:fd:83:93:c9:fe:b6:ce:
15:ca:24:dd:a6:08:d0:88:ed:9e:d6:ee:7b:76:f2:03:c6:16:
59:27:e6:b9:43:62:78:10:f4:65:ed:63:27:ba:d8:44:9b:f0:
d6:b7:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:42 2025 by rpki-client