Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/fXNPQ4muOfQo80YCNSlGysYSE6w.roa
File: fXNPQ4muOfQo80YCNSlGysYSE6w.roa (raw, json)
Hash identifier: atdVbsUBJc+EKR+FoQwn7LoIeLbBJFvLD/vR32jN3OY=
Subject key identifier: 7D:73:4F:43:89:AE:39:F4:28:F3:46:02:35:29:46:CA:C6:12:13:AC
Certificate issuer: /CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
Certificate serial: 018E7964AEBBEB8E04CAC15AB2FDE4F6C27B
Authority key identifier: C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/fXNPQ4muOfQo80YCNSlGysYSE6w.roa
Signing time: Tue 26 Mar 2024 06:13:45 +0000
ROA not before: Tue 26 Mar 2024 06:13:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207487
IP address blocks: 2a14:14c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:64:ae:bb:eb:8e:04:ca:c1:5a:b2:fd:e4:f6:c2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
Validity
Not Before: Mar 26 06:13:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d734f4389ae39f428f34602352946cac61213ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:2b:76:8c:98:eb:28:14:1c:e2:1f:a4:3b:
e7:60:2e:c8:b8:9a:d1:84:67:92:ed:de:01:f8:e8:
f8:06:6a:dd:c9:e6:fb:c4:84:d2:61:e4:1e:c7:09:
75:e3:d5:d6:d3:d5:f6:22:b1:dd:38:85:69:3e:94:
e1:92:31:42:12:69:d8:1e:fd:33:1a:48:0b:2e:3e:
47:8e:5a:89:de:34:0a:70:bd:75:95:7f:0b:0d:31:
d7:f9:73:a3:18:e2:07:cb:ed:8b:c0:1a:3b:1b:92:
34:da:8c:c1:69:88:2e:fd:44:9d:87:55:33:56:e3:
55:0f:49:76:44:f6:3f:50:a7:cd:92:61:8b:20:58:
b8:de:5d:82:b7:ce:6e:de:34:f2:ee:f4:6c:28:43:
ea:96:17:d8:f0:52:a5:6c:84:f7:c5:63:1a:48:1c:
a4:e6:f5:11:ea:ce:37:4f:87:ae:42:c9:20:dc:1f:
92:8f:21:42:d4:ad:21:75:2b:c1:85:4a:0e:ad:48:
c1:e8:60:a7:fd:6a:11:fc:89:69:23:a3:fd:a9:bd:
0a:02:5f:1b:06:07:fd:a2:6f:60:72:d2:48:c0:6d:
76:d4:99:ea:34:33:1b:e4:20:bd:80:33:30:47:e4:
91:01:42:3a:09:4a:10:09:e2:91:45:08:c5:3d:b2:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:4F:43:89:AE:39:F4:28:F3:46:02:35:29:46:CA:C6:12:13:AC
X509v3 Authority Key Identifier:
keyid:C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/fXNPQ4muOfQo80YCNSlGysYSE6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/wGOG8UWOpiU7G1yj-x8TXFjLMxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:14c0::/48
Signature Algorithm: sha256WithRSAEncryption
9e:ee:e3:d7:e6:53:2b:9c:88:8f:50:0c:29:ac:f2:23:13:58:
1d:15:f6:e0:32:9a:0d:73:4e:7e:3f:65:14:7b:65:a5:12:c1:
b0:89:e3:fe:7c:58:f1:ef:32:7b:2a:75:f6:60:62:82:1f:a5:
6d:c4:7b:ff:99:9b:5c:3a:57:e8:95:b6:0b:6b:1e:e0:30:d6:
17:9a:47:71:12:59:e9:15:c8:71:d1:8b:c3:e9:cb:4e:57:5b:
25:49:f3:f4:ca:34:e8:61:3d:6b:70:f7:26:df:6b:c0:40:00:
c1:97:a0:72:ce:61:a9:c7:23:4a:85:e0:98:a5:76:35:06:11:
bf:2b:e9:66:98:c9:a6:4c:b0:47:2d:d7:96:32:51:4b:a4:40:
6d:9f:82:8c:e9:3c:87:87:66:ad:cb:a9:51:1a:83:d0:38:ee:
71:6c:a6:6a:65:bb:38:6c:4a:ac:24:85:28:ca:bd:79:b5:4e:
fa:d3:1d:cc:06:2a:9c:09:b7:9f:c0:15:c6:1a:63:88:18:45:
4e:94:0a:7b:1a:4c:b1:4d:62:8b:f2:2a:b8:f5:83:af:e1:b7:
8b:9d:9f:7e:af:21:7c:af:36:15:65:79:67:74:8f:79:3a:34:
90:13:84:42:2c:17:29:d7:ae:3f:1a:b7:ed:36:07:b6:25:7f:
7d:1b:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org