Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/8Ljr9m-HxFQJhH8HNcjGpebauBQ.roa
File: 8Ljr9m-HxFQJhH8HNcjGpebauBQ.roa (raw, json)
Hash identifier: dqhT1ZJr7PbefNYyqMUY0GbAn7qezeda6mI0HXX0NoE=
Subject key identifier: F0:B8:EB:F6:6F:87:C4:54:09:84:7F:07:35:C8:C6:A5:E6:DA:B8:14
Certificate issuer: /CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Certificate serial: 018281A441F3EF9325289CB4BCAB69ADAEB9
Authority key identifier: 6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/8Ljr9m-HxFQJhH8HNcjGpebauBQ.roa
Signing time: Tue 09 Aug 2022 08:06:41 +0000
ROA not before: Tue 09 Aug 2022 08:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38230
IP address blocks: 2a0e:7d46::/48 maxlen: 48
2a0e:7d46:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:a4:41:f3:ef:93:25:28:9c:b4:bc:ab:69:ad:ae:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6deeca7b9858c2de6ccb41e5d35de0795c79ed96
Validity
Not Before: Aug 9 08:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0b8ebf66f87c45409847f0735c8c6a5e6dab814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:5b:d7:46:52:aa:1c:e2:19:7c:bd:5e:dc:
9e:77:93:c4:51:cc:c3:1b:2c:c8:fc:fe:a7:4f:93:
25:ce:92:1c:fc:02:48:08:9b:b2:5e:56:77:76:dd:
27:09:9d:35:cc:66:1c:43:1c:e4:ee:79:bb:a6:b4:
5c:2b:2b:3c:b6:e6:2f:68:a4:65:cd:26:e1:4e:8a:
3e:88:5b:3a:ff:7c:9c:72:5a:21:ef:d5:d6:b4:26:
14:2b:93:a0:f3:01:c0:cf:90:9e:c0:9e:aa:4e:77:
fc:c7:6e:36:c0:4f:3e:a2:2b:99:47:82:ef:35:11:
3b:46:1e:9e:53:be:9c:a2:49:2b:4a:72:79:a3:84:
54:79:1b:fa:b3:6e:92:6b:2c:32:46:a0:0d:fb:ce:
40:4f:40:05:66:32:2f:20:3a:17:98:fe:9d:2a:5a:
b1:18:9e:4b:ce:11:6b:18:6f:ae:b8:82:0a:36:48:
9a:3b:2b:50:05:26:2c:45:9a:7d:19:80:1a:e7:b6:
4c:d0:ff:35:f1:54:fc:8f:b9:b2:ff:7f:0d:40:92:
ce:26:06:49:ef:26:78:7d:b0:cf:0a:52:56:95:d2:
56:17:53:a8:a4:58:60:63:46:11:15:51:99:a9:bc:
82:d2:f0:cc:a6:95:ab:18:97:56:46:06:cd:71:de:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:EB:F6:6F:87:C4:54:09:84:7F:07:35:C8:C6:A5:E6:DA:B8:14
X509v3 Authority Key Identifier:
keyid:6D:EE:CA:7B:98:58:C2:DE:6C:CB:41:E5:D3:5D:E0:79:5C:79:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/be7Ke5hYwt5sy0Hl013geVx57ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/8Ljr9m-HxFQJhH8HNcjGpebauBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ce38df-f0a7-4e34-9704-a45a6317a13d/1/be7Ke5hYwt5sy0Hl013geVx57ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d46::/48
2a0e:7d46:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
1f:ce:9c:19:09:7f:93:16:15:59:c2:a4:60:aa:c7:f1:98:35:
24:c9:df:52:fc:f4:6f:77:25:4d:2f:1e:6c:31:d9:83:b0:06:
a1:8c:bd:22:f0:42:20:84:ae:0a:a2:fd:f5:d5:89:6a:2a:1c:
60:28:84:f8:8b:3a:db:cd:35:c2:75:16:b2:4a:68:91:a7:1c:
43:e0:53:3b:01:41:dc:87:65:1b:54:bd:a1:39:03:61:8f:7a:
66:e1:fb:14:ca:cd:11:f2:3a:98:d6:10:d2:cf:6e:82:79:11:
53:20:80:e3:5f:f1:12:b1:7f:af:76:37:b5:0d:2e:ce:66:cf:
a2:e2:67:70:ca:7b:93:32:28:b8:7c:7b:ec:09:10:b5:a0:7d:
53:b7:f3:32:d0:5d:d8:ef:aa:c9:63:b5:e5:67:bc:da:17:ea:
af:3d:2b:2c:d6:d3:b9:46:e3:0d:40:17:d3:a2:75:84:ed:04:
27:c9:7d:b9:e6:06:fd:7d:06:b9:ef:53:fd:7d:5e:bc:ae:0f:
ca:29:9c:bf:a5:d6:62:dc:74:03:2e:8a:3e:a9:28:cd:e5:7e:
56:4d:33:e1:65:54:72:9f:6a:8f:f0:58:07:87:dc:f4:67:22:
b4:2d:59:ab:a5:7a:1c:9c:60:d6:8c:13:17:09:33:5c:ae:35:
80:41:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:41 2024 by rpki-client on console-fra.rpki-client.org