Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/97kXbgb9yOk9hUF05Agv0RgoXGo.roa
File: 97kXbgb9yOk9hUF05Agv0RgoXGo.roa (raw, json)
Hash identifier: h1t7Rz2V76wAGQE69GotV8mLDMcRvCgpmxK59539mBs=
Subject key identifier: F7:B9:17:6E:06:FD:C8:E9:3D:85:41:74:E4:08:2F:D1:18:28:5C:6A
Certificate issuer: /CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Certificate serial: 01857139D9E0DC60E0551E10ECE4C96C4B4F
Authority key identifier: BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/97kXbgb9yOk9hUF05Agv0RgoXGo.roa
Signing time: Mon 02 Jan 2023 06:44:54 +0000
ROA not before: Mon 02 Jan 2023 06:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 2a12:6f40::/30 maxlen: 30
2a12:6f44::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:d9:e0:dc:60:e0:55:1e:10:ec:e4:c9:6c:4b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Validity
Not Before: Jan 2 06:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7b9176e06fdc8e93d854174e4082fd118285c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:66:20:89:39:29:2a:35:35:ef:69:d7:af:
84:e2:1f:11:62:c6:0c:ee:65:ab:3b:01:90:51:f2:
30:a5:b3:77:3c:72:3e:2c:66:35:9f:de:35:4f:70:
c1:b7:9f:44:82:35:57:1a:d6:f2:83:18:d9:6f:96:
ec:7a:8d:6a:23:9e:62:d6:56:43:5a:ae:08:78:3e:
fe:dc:a7:0b:91:f4:2a:06:46:8d:c7:25:0d:e4:96:
0a:99:b8:6e:7b:d0:c6:a8:dc:23:6b:6c:1a:59:96:
e3:0d:04:90:4a:03:d8:76:ed:9f:04:15:51:4c:1a:
8d:5b:f8:d5:ee:43:0a:d9:d9:7e:c4:68:8a:0d:43:
73:e6:ff:89:21:09:90:c8:08:83:02:9a:38:00:1a:
24:07:0c:73:31:ce:13:2a:a0:04:24:e7:54:44:57:
13:a4:39:d2:b3:12:64:d3:98:d4:c7:80:55:d7:2a:
02:98:d1:51:0c:09:0b:5a:10:5c:c5:c9:fe:d7:18:
fb:0d:d1:a2:85:f0:a5:1b:32:fb:88:23:ad:dc:d3:
32:cc:6f:64:24:04:74:de:b8:2f:5b:c0:3b:6d:4b:
7a:35:61:c9:2f:49:86:af:1c:92:ed:f9:75:bd:7d:
62:bb:1f:eb:0c:59:06:8e:b4:4c:c6:2a:f6:80:13:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B9:17:6E:06:FD:C8:E9:3D:85:41:74:E4:08:2F:D1:18:28:5C:6A
X509v3 Authority Key Identifier:
keyid:BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/97kXbgb9yOk9hUF05Agv0RgoXGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/v_tqPY4iZPEFixKr_eu-ocJIxmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
da:62:de:18:bd:46:32:1a:fd:a1:1c:42:5a:62:ef:3c:b1:1b:
9f:89:14:df:8b:c7:00:10:d5:77:31:ce:42:2b:50:0c:a8:b9:
5f:eb:dd:6a:88:e5:1d:e4:d9:d6:75:f9:e5:ca:3a:32:58:7d:
b0:93:50:4e:be:da:ab:e5:20:fc:c0:f0:7e:1e:a7:7b:d1:bb:
92:8b:49:42:c0:42:76:36:5d:0a:04:f0:03:78:76:9b:1f:d3:
85:96:30:df:8f:bf:1b:d9:04:74:76:fa:eb:2c:8f:63:25:1f:
75:4b:17:f7:a0:66:9d:fb:27:7f:a4:6c:6c:61:99:52:7f:2f:
c0:b5:ba:18:a3:e7:46:de:ef:31:e8:88:c2:49:90:f7:80:83:
74:ce:85:5b:3a:e5:11:b4:6d:7b:ba:87:20:8b:14:8c:d3:51:
09:72:4b:21:8f:3d:6e:25:b2:20:2f:89:94:ff:14:bf:8a:06:
66:dd:ac:df:0b:86:7b:1a:7d:32:d3:15:61:9a:88:8e:4d:65:
db:00:c7:4a:3e:f5:09:d6:1e:36:d9:69:55:95:89:b9:bf:76:
bb:b1:d9:9b:6f:77:04:fa:da:9f:5e:f0:f3:39:b0:2c:7d:9b:
f2:67:79:cb:f6:29:e7:d2:de:29:46:97:c0:a8:d8:08:48:cf:
f8:62:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org