Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/4agEp4WNiB3_nYrBkvXUJUfy2JY.roa
File: 4agEp4WNiB3_nYrBkvXUJUfy2JY.roa (raw, json)
Hash identifier: L3sgQ17TKjt/JGogcG0BXRelvFBfveXxYIRSWbhfp8Y=
Subject key identifier: E1:A8:04:A7:85:8D:88:1D:FF:9D:8A:C1:92:F5:D4:25:47:F2:D8:96
Certificate issuer: /CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Certificate serial: 6E50B0
Authority key identifier: BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/4agEp4WNiB3_nYrBkvXUJUfy2JY.roa
Signing time: Tue 29 Mar 2022 18:50:15 +0000
ROA not before: Tue 29 Mar 2022 18:50:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 148996
IP address blocks: 2a12:6f44::/32 maxlen: 32
2a12:6f42::/32 maxlen: 32
2a12:6f40::/32 maxlen: 32
2a12:6f46::/32 maxlen: 32
2a12:6f43::/32 maxlen: 32
2a12:6f47::/32 maxlen: 32
2a12:6f45::/32 maxlen: 32
2a12:6f41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7229616 (0x6e50b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Validity
Not Before: Mar 29 18:50:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e1a804a7858d881dff9d8ac192f5d42547f2d896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:5a:d9:21:80:a5:3b:37:eb:f5:45:24:f4:
75:4b:fc:74:fc:70:73:6a:5f:63:51:cb:6a:bc:98:
97:8a:ec:07:73:e2:c4:4d:d3:4b:9f:f7:25:c0:b6:
de:08:76:e7:86:11:5c:ea:50:78:0b:6d:54:e4:02:
36:af:01:bb:4d:4f:51:56:88:6f:ec:8d:19:04:27:
33:9a:83:11:e9:12:b0:c7:ea:70:da:94:6b:8e:e6:
42:19:f6:76:a7:fa:47:dc:3d:67:2c:89:24:b1:b0:
d5:f3:40:75:d3:be:19:0f:43:eb:2f:88:b0:c5:e0:
e7:c1:73:3c:1e:be:15:a0:c0:e8:64:b6:28:79:c1:
d8:ea:7c:6c:65:54:0a:8b:93:b2:ae:6a:8f:de:cb:
29:8b:7c:fd:0b:3f:21:69:5e:7a:1c:c0:e5:c0:8c:
e7:65:01:18:71:13:63:5b:89:fa:16:03:cc:f5:4e:
09:f9:51:55:e8:90:32:db:7b:8b:18:b2:65:9b:c9:
04:12:87:64:c0:bd:fb:a2:66:19:28:d2:20:45:5e:
d7:37:f7:38:50:4d:58:48:0b:f9:ec:e5:ba:90:6f:
2b:2c:0c:31:30:42:a8:76:1a:a1:77:73:b3:da:b1:
35:09:a1:f6:54:ed:b5:b1:06:d6:ba:39:6c:bf:d7:
ef:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A8:04:A7:85:8D:88:1D:FF:9D:8A:C1:92:F5:D4:25:47:F2:D8:96
X509v3 Authority Key Identifier:
keyid:BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/4agEp4WNiB3_nYrBkvXUJUfy2JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/v_tqPY4iZPEFixKr_eu-ocJIxmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
99:11:04:ca:b4:94:1c:be:a6:16:c6:a9:1c:db:01:af:85:4b:
01:dd:9a:a1:be:c4:34:44:30:e9:e4:d0:bd:e7:9d:5d:ed:8a:
43:d7:5a:9a:1d:2c:37:58:39:03:de:81:9b:9e:88:d1:31:cf:
75:9b:05:3c:60:a8:bf:cd:c1:07:b9:6b:f0:12:c2:7e:3f:1d:
c9:f2:97:49:ed:1b:bb:78:a4:c4:06:ae:dd:d1:30:7b:b4:b1:
26:af:bb:36:69:86:af:25:01:46:bb:26:80:12:5c:90:db:39:
fe:5e:0c:e3:af:03:91:d9:13:a1:34:cb:54:85:6a:b9:6d:e0:
92:7b:27:63:fa:54:79:82:8e:ae:d3:8a:78:6f:ed:33:08:99:
f5:71:24:5b:c2:5d:3f:06:9e:0e:85:a5:ad:e8:1c:fb:22:96:
d9:2b:b7:07:a4:16:00:d3:fd:33:08:b8:14:c9:05:84:d1:0d:
89:29:c5:fc:85:85:45:40:08:c6:f9:95:82:ed:19:64:31:a9:
74:37:f6:a0:17:98:f7:c4:8c:c1:29:80:c3:16:84:20:b2:ed:
34:3a:04:1a:0e:ea:65:16:b4:2f:b2:ef:35:44:21:42:cd:32:
ab:34:bc:25:83:51:8d:ff:66:4c:73:34:29:7d:59:14:16:9d:
92:f5:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:31 2024 by rpki-client on console-ams.rpki-client.org