Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/67evLvCfucis6_sSClPIYP3S2j0.roa
File: 67evLvCfucis6_sSClPIYP3S2j0.roa (raw, json)
Hash identifier: 6JG87qAwpEidsNrP3hKXLjrK877Xmry86fgQGcPzW74=
Subject key identifier: EB:B7:AF:2E:F0:9F:B9:C8:AC:EB:FB:12:0A:53:C8:60:FD:D2:DA:3D
Certificate issuer: /CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
Certificate serial: 0B23ED9E
Authority key identifier: A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/67evLvCfucis6_sSClPIYP3S2j0.roa
Signing time: Sat 01 Jan 2022 14:02:26 +0000
ROA not before: Sat 01 Jan 2022 14:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39080
IP address blocks: 2a0d:f47::/32 maxlen: 128
2a0d:f40::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186903966 (0xb23ed9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0a5a0f1693a9742d7faaf4f8fd17e81cc2ab6
Validity
Not Before: Jan 1 14:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ebb7af2ef09fb9c8acebfb120a53c860fdd2da3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:25:c0:06:d4:55:5a:94:25:04:c0:b9:9e:
20:2d:53:4f:b8:80:35:6e:9c:86:ba:40:f1:ea:14:
03:7d:b2:be:79:dd:2d:9f:9a:d8:db:ae:73:99:8a:
42:8f:a7:60:8b:86:06:72:5e:e6:d3:49:d8:01:20:
dc:df:e5:eb:76:03:3a:10:44:17:13:51:78:d1:06:
30:13:4e:61:99:5d:f8:5f:52:18:c7:a1:25:37:7e:
f9:36:36:ef:76:e5:01:19:66:bb:29:ac:02:37:2e:
26:2c:db:ff:4d:44:c9:8f:b8:01:7f:98:94:cf:22:
75:3b:6c:d8:0e:dd:07:6e:05:97:d1:ed:58:37:f6:
79:b1:fe:17:12:60:cd:e8:15:fb:54:df:ff:15:e3:
d3:d8:d4:68:54:1e:54:f4:f0:c0:1e:ab:85:4d:59:
8a:03:0c:93:30:91:d9:43:0e:7a:47:ee:83:de:33:
21:f7:7e:21:c6:46:5e:93:64:9e:c4:26:54:51:a1:
df:c3:56:14:1f:64:bc:fe:70:82:57:8a:8e:4f:5b:
20:a0:9a:8c:95:e7:08:b5:84:6a:b4:55:c5:9a:94:
c0:6b:73:4a:44:de:d8:b0:71:54:49:a0:b4:de:c3:
90:43:e7:5d:a1:42:67:2b:4f:00:04:1b:5c:e3:1e:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:AF:2E:F0:9F:B9:C8:AC:EB:FB:12:0A:53:C8:60:FD:D2:DA:3D
X509v3 Authority Key Identifier:
keyid:A4:F0:A5:A0:F1:69:3A:97:42:D7:FA:AF:4F:8F:D1:7E:81:CC:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPCloPFpOpdC1_qvT4_RfoHMKrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/67evLvCfucis6_sSClPIYP3S2j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f28922-fc7f-4fc6-92a9-871c3e9b1c4c/1/pPCloPFpOpdC1_qvT4_RfoHMKrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:f40::/32
2a0d:f47::/32
Signature Algorithm: sha256WithRSAEncryption
ac:0d:9a:3d:38:cd:86:fe:fa:b3:78:2b:28:45:d3:5f:21:1c:
69:f5:da:46:6b:17:00:c1:82:6a:2c:98:68:6c:13:7b:85:90:
e5:e3:7d:20:cd:b6:c2:98:d6:b5:c7:12:43:ee:e7:93:6a:4c:
2e:26:61:47:17:d8:fc:41:5a:df:70:06:ec:d5:ea:c1:1c:85:
34:2c:4e:54:1b:24:c0:3a:08:1b:e9:ae:fa:11:40:ea:41:d9:
19:5b:20:9f:36:e6:0a:73:cc:1c:71:3d:1f:c6:76:99:fe:a8:
61:a6:7f:3b:58:4b:f7:29:67:31:3f:93:e0:b1:5d:7a:a2:b9:
27:a1:97:1e:fb:1a:35:06:36:13:bd:41:29:11:c7:35:2a:26:
d3:cf:14:b2:0a:40:51:2e:3f:74:2a:bf:13:3a:9d:0a:93:13:
47:cb:a5:3d:da:06:8e:88:a2:6e:8d:c7:3b:e8:e5:24:c2:84:
4b:89:e8:90:3c:d2:f3:93:97:7a:1c:33:b0:2b:10:c7:9a:42:
4b:bd:d9:1a:37:a2:8a:a7:cd:20:74:4e:1f:ac:15:58:df:af:
f8:80:95:1f:2b:c6:1a:3a:34:38:e4:89:00:c6:8d:4f:86:10:
04:b7:c3:c9:77:06:1b:6b:ad:7f:eb:0c:0c:06:37:42:72:12:
e9:fb:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org