Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/G_cea4AUXi-lsZXNe4EdBQ9eonE.roa
File: G_cea4AUXi-lsZXNe4EdBQ9eonE.roa (raw, json)
Hash identifier: tewlrgB2tUcQ0AbTHMrvXmw0fZ7i04jxBLW6EcX7zy0=
Subject key identifier: 1B:F7:1E:6B:80:14:5E:2F:A5:B1:95:CD:7B:81:1D:05:0F:5E:A2:71
Certificate issuer: /CN=6e076b504cb95e5dfdde794c8981c8f6c9c9505d
Certificate serial: 0A9E7131
Authority key identifier: 6E:07:6B:50:4C:B9:5E:5D:FD:DE:79:4C:89:81:C8:F6:C9:C9:50:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgdrUEy5Xl393nlMiYHI9snJUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/G_cea4AUXi-lsZXNe4EdBQ9eonE.roa
Signing time: Sat 01 Jan 2022 16:03:30 +0000
ROA not before: Sat 01 Jan 2022 16:03:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57436
IP address blocks: 2001:678:118::/48 maxlen: 48
2001:678:110::/48 maxlen: 48
2001:678:114::/48 maxlen: 48
2001:67c:88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178155825 (0xa9e7131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e076b504cb95e5dfdde794c8981c8f6c9c9505d
Validity
Not Before: Jan 1 16:03:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bf71e6b80145e2fa5b195cd7b811d050f5ea271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:ce:00:20:ac:be:be:d8:91:81:4d:44:76:
df:1c:54:e4:23:cb:d3:66:81:3a:30:2b:f7:2b:33:
1d:97:a2:ee:a7:23:53:4f:d1:6a:1f:f0:a9:3d:62:
0d:94:e2:ca:59:97:97:cd:f8:f7:d8:eb:e4:e8:86:
8d:8d:6e:72:76:f4:14:2d:0e:43:6b:f7:fc:87:41:
d3:10:c6:5b:5a:93:cb:7d:56:79:e2:01:d2:2f:77:
28:3d:34:1d:11:b4:a1:18:a4:dd:72:6f:f9:d2:59:
90:a9:f5:4a:74:57:75:a8:bb:d6:08:4e:09:71:40:
78:90:3b:49:00:0d:e2:f4:3d:76:a0:15:c4:5c:09:
db:a8:8d:ab:d9:32:8b:31:7d:b9:f0:db:89:b3:b0:
dd:0a:2a:37:51:4f:30:f4:96:fc:0c:b1:34:36:8b:
35:68:92:82:0e:8d:66:a1:1c:66:6e:74:61:a6:3a:
ff:7f:2b:fb:0f:bd:e5:9a:ca:72:6c:2d:31:ca:89:
19:7b:7b:64:61:dc:6c:57:52:8c:51:f9:16:8c:8d:
f4:c9:23:2d:74:f5:53:be:f9:b2:f0:34:69:e5:3a:
5c:18:97:fb:77:2a:f2:9d:f6:63:9f:4f:55:e8:a2:
6f:51:9d:c1:3c:59:f1:c1:4c:72:af:bf:7a:07:2b:
d1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F7:1E:6B:80:14:5E:2F:A5:B1:95:CD:7B:81:1D:05:0F:5E:A2:71
X509v3 Authority Key Identifier:
keyid:6E:07:6B:50:4C:B9:5E:5D:FD:DE:79:4C:89:81:C8:F6:C9:C9:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgdrUEy5Xl393nlMiYHI9snJUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/G_cea4AUXi-lsZXNe4EdBQ9eonE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/46c7f2-d47b-4e07-83e2-a39962fbea4f/1/bgdrUEy5Xl393nlMiYHI9snJUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:110::/48
2001:678:114::/48
2001:678:118::/48
2001:67c:88::/48
Signature Algorithm: sha256WithRSAEncryption
4d:7f:f3:a0:d5:5f:79:1e:4f:f6:67:e4:b5:7e:13:2f:8a:16:
cb:01:0c:38:d6:74:88:ce:4a:23:b7:72:f6:a8:8f:60:2e:8b:
36:46:66:bf:1b:e4:c9:c8:ff:79:35:36:ce:90:7a:8f:03:3b:
9b:97:47:e9:d1:3b:e6:0d:46:1c:ee:ef:80:f1:67:e1:ae:34:
aa:21:10:3a:9c:68:f1:37:71:ed:78:a1:6d:af:2a:99:6b:dd:
be:f6:e1:44:38:9b:26:66:0e:ec:c2:73:52:8d:30:16:78:a0:
0f:bc:b3:a4:95:ec:b1:fb:79:09:3b:5f:11:da:5b:3b:76:b8:
a9:a6:10:97:db:3e:c6:2a:5f:b6:7b:a9:13:d3:55:8e:51:77:
85:3a:c7:b4:42:5c:59:23:e9:3a:b1:8e:3c:5f:1c:9b:50:31:
84:53:cb:4e:9a:3d:cc:e0:c9:80:39:57:59:db:29:26:46:0f:
4c:cc:dc:78:f6:33:60:4e:cc:30:d8:61:a8:ea:81:51:af:4d:
19:aa:4c:76:fd:d8:cc:aa:87:1d:06:b0:d3:50:9f:92:34:7d:
d7:7d:75:fe:ef:b6:9a:cc:3e:ac:2e:8a:56:0a:3b:82:3a:d1:
ca:e8:e2:b2:90:fc:7a:5f:46:61:ca:5e:e1:33:b2:ea:4f:69:
65:80:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org