Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/tbiA57WyJ1Bf72kIw__8wvXAe8o.roa
File: tbiA57WyJ1Bf72kIw__8wvXAe8o.roa (raw, json)
Hash identifier: Eo+/QA7UEPkjLt8UFfLiPS+JB8BL5cGqltzkc6clTC0=
Subject key identifier: B5:B8:80:E7:B5:B2:27:50:5F:EF:69:08:C3:FF:FC:C2:F5:C0:7B:CA
Certificate issuer: /CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
Certificate serial: 018E2440300520841736EC5D7C3EFFA56DFB
Authority key identifier: C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/tbiA57WyJ1Bf72kIw__8wvXAe8o.roa
Signing time: Sat 09 Mar 2024 17:26:10 +0000
ROA not before: Sat 09 Mar 2024 17:26:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215513
IP address blocks: 2a14:14c1:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:24:40:30:05:20:84:17:36:ec:5d:7c:3e:ff:a5:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06386f1458ea6253b1b5ca3fb1f135c58cb3318
Validity
Not Before: Mar 9 17:26:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5b880e7b5b227505fef6908c3fffcc2f5c07bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:d9:31:03:5f:8c:18:5d:3b:04:62:31:38:
1c:7a:a0:b0:38:f2:b6:a6:6d:64:14:f0:37:6c:aa:
d8:9f:a3:b9:03:7b:19:85:bd:be:e4:9b:60:34:7a:
e8:55:23:84:26:d0:77:21:92:23:41:2b:da:32:c9:
97:d4:5d:6d:15:f7:36:eb:06:bb:4a:9d:8f:7a:f2:
17:eb:03:b3:be:80:32:d5:1a:b4:c1:3e:2a:12:4f:
e5:54:34:71:67:41:35:34:e9:0e:a7:8a:b3:c3:79:
10:dd:c4:2e:87:ec:9f:e9:03:a2:da:f9:f7:ca:9a:
7f:a2:7a:14:ce:cd:b2:a6:91:26:4f:b4:c4:90:0c:
82:c2:49:da:cc:42:7e:b7:e3:9d:30:36:78:a1:5e:
1c:10:60:97:71:72:06:ea:08:a4:c2:58:8f:99:b0:
b3:8b:d3:1a:b4:74:7c:6d:5a:d8:7e:56:62:87:91:
0e:26:d7:ac:bf:eb:80:1a:fa:49:7a:8f:ff:f1:c2:
f7:95:24:a1:e3:9d:fc:36:c4:06:33:d2:16:9b:f0:
0b:ad:b0:f7:59:58:52:a0:e5:de:8e:c7:2f:4f:4d:
bc:08:cd:49:28:8a:05:07:5f:36:5a:fb:98:2c:66:
4c:97:d4:05:5e:d5:38:af:26:b2:a3:f4:f3:89:9c:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B8:80:E7:B5:B2:27:50:5F:EF:69:08:C3:FF:FC:C2:F5:C0:7B:CA
X509v3 Authority Key Identifier:
keyid:C0:63:86:F1:45:8E:A6:25:3B:1B:5C:A3:FB:1F:13:5C:58:CB:33:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGOG8UWOpiU7G1yj-x8TXFjLMxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/tbiA57WyJ1Bf72kIw__8wvXAe8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/75e648-7de2-4e6d-b901-760b408cb0eb/1/wGOG8UWOpiU7G1yj-x8TXFjLMxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:14c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
69:5d:6a:7d:5b:e6:e6:ff:07:57:49:2b:19:bb:e6:2b:c8:53:
d6:e8:7d:0a:98:6b:57:23:9d:9a:ef:be:ce:11:54:ec:70:ff:
60:b2:87:4e:44:a3:12:38:93:9e:e2:84:f8:3f:df:95:93:04:
b9:c7:a5:c9:99:3a:4a:5b:1a:53:6a:10:00:46:d9:5c:41:71:
ff:c2:5c:fb:2d:c9:85:de:77:3f:7e:1e:ae:60:76:01:ca:b3:
48:96:40:dc:7d:8e:4b:d3:a9:ac:b2:00:6a:d3:29:8d:45:9e:
00:ac:1f:a8:2e:2a:42:af:62:5b:9d:90:b2:c1:d6:b3:9e:d3:
c4:38:3b:cf:a3:a6:26:e0:e3:04:45:89:09:20:aa:c4:0a:25:
89:bf:b9:cb:c6:92:18:ee:58:cd:f4:4d:ac:b3:87:1a:ff:f3:
51:0c:9a:82:8c:96:b4:03:d6:94:ff:9d:e9:99:e1:7b:95:87:
1f:9c:f3:0c:ca:6d:0b:eb:92:c7:11:c8:4b:3f:d1:15:08:b1:
fd:b6:a8:ab:f3:c1:21:c4:10:ac:4d:a0:39:39:30:d3:fe:1e:
95:c1:ef:2a:fa:ca:8b:52:df:b2:86:f6:22:a4:c8:20:5a:94:
c7:3b:e2:35:47:c2:8d:6f:86:fe:26:89:60:37:df:cf:c3:06:
48:7c:10:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org