Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/EWLduB6rdLx6cna_vsELPpw1qYE.roa
File: EWLduB6rdLx6cna_vsELPpw1qYE.roa (raw, json)
Hash identifier: bFP7MFvTRW2K1kuDuagJAT8NI0ioY6y9MJU7uMV2H7Y=
Subject key identifier: 11:62:DD:B8:1E:AB:74:BC:7A:72:76:BF:BE:C1:0B:3E:9C:35:A9:81
Certificate issuer: /CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Certificate serial: 018FC02FB2DF5F828F8F981A7BEDB8CE1233
Authority key identifier: 2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/EWLduB6rdLx6cna_vsELPpw1qYE.roa
Signing time: Tue 28 May 2024 17:11:42 +0000
ROA not before: Tue 28 May 2024 17:11:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215664
IP address blocks: 2a0d:b287:ec00::/40 maxlen: 40
2a0d:b287:ecc0::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c0:2f:b2:df:5f:82:8f:8f:98:1a:7b:ed:b8:ce:12:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fcb30fd7d6e449493ec7cb0d9f78600458be21b
Validity
Not Before: May 28 17:11:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1162ddb81eab74bc7a7276bfbec10b3e9c35a981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:cb:85:5a:a9:f0:ec:5b:45:b0:9e:f9:40:
10:a6:97:59:30:77:d2:1a:5a:50:d8:fd:31:f4:5b:
2b:84:47:5f:dd:a7:69:da:bc:98:14:f9:83:b2:72:
8b:8d:a0:ba:78:ed:e4:da:70:6e:22:42:d2:d4:bb:
5d:f4:c0:7f:53:cc:38:a3:30:2c:7e:25:46:2b:fe:
0d:78:c0:58:83:41:b7:87:0e:48:a4:43:d2:65:eb:
05:2c:9b:af:0a:4c:77:aa:94:e7:dc:c9:38:56:df:
96:13:6e:c9:4e:d8:3b:46:8a:50:ad:37:f1:18:b4:
78:e5:8a:52:25:74:45:f1:e4:b2:96:64:69:ae:8e:
8b:09:9f:5e:1f:a2:c3:d0:8e:32:d5:9d:04:6c:ef:
dc:5e:d0:49:14:b7:27:25:e7:10:3a:96:06:82:f9:
91:e1:7f:5a:90:09:d5:85:87:6c:74:e2:b4:a8:5d:
ca:78:c6:61:4a:ca:7a:88:fe:d8:31:b0:b2:da:0f:
c1:b1:a5:71:ea:ed:9a:97:81:f1:4e:47:51:2e:fb:
c4:67:fe:86:ae:15:b0:07:23:60:e7:5d:6e:90:1a:
14:2f:d5:6e:c4:4c:cf:1c:e9:be:fe:48:ab:a4:fe:
99:07:be:c1:3b:30:a8:49:a9:74:40:84:93:d2:7a:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:DD:B8:1E:AB:74:BC:7A:72:76:BF:BE:C1:0B:3E:9C:35:A9:81
X509v3 Authority Key Identifier:
keyid:2F:CB:30:FD:7D:6E:44:94:93:EC:7C:B0:D9:F7:86:00:45:8B:E2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8sw_X1uRJST7Hyw2feGAEWL4hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/EWLduB6rdLx6cna_vsELPpw1qYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b910bf-e49b-4cdc-be79-4dd4dc3391ac/1/L8sw_X1uRJST7Hyw2feGAEWL4hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b287:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
a1:31:10:74:a3:44:eb:97:59:09:1d:dd:6f:48:1e:d7:fb:6d:
b1:8b:db:a2:2f:ca:d3:1b:4b:44:d6:68:6c:6f:8f:fc:ea:91:
7c:cb:52:22:ed:8f:1c:8c:7c:f1:78:31:e7:c0:22:2a:60:c1:
c3:16:2f:ae:6f:56:72:32:50:b8:84:d2:d5:28:6d:c4:1e:77:
ab:f6:5d:ec:71:72:5f:b9:27:26:8a:f1:b0:20:81:7f:70:43:
0a:f3:8b:e8:b7:55:2a:00:09:1d:97:8f:be:6b:67:87:ac:0a:
5c:07:c0:88:35:6f:7b:76:91:83:94:c0:05:57:e0:e4:41:cf:
84:d4:34:1e:be:84:b7:9a:25:16:ea:07:2a:de:31:7e:da:21:
2b:a4:d6:f6:7a:46:b9:08:dc:dc:47:98:7a:59:52:94:d0:2e:
b0:ed:0f:28:10:31:1e:07:d9:ff:c2:f4:cf:50:e3:3b:7d:74:
08:0b:f5:96:5f:46:a0:6e:78:79:bc:d9:05:20:48:c3:c8:81:
32:b9:1e:8e:4c:a1:07:7c:36:bb:34:2e:cd:90:e4:33:de:e1:
19:21:3f:29:f2:44:3f:14:de:9f:46:4c:c2:b5:e9:96:59:ae:
bf:b6:50:82:7b:04:a7:db:61:1e:ba:60:a7:dc:2e:7d:55:8d:
a5:9b:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 18:55:02 2024 by rpki-client on console-fra.rpki-client.org