Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/F21LbS66YlT8k9SDxfYy5CYomp0.roa
File: F21LbS66YlT8k9SDxfYy5CYomp0.roa (raw, json)
Hash identifier: 36GkmMqjBZP2vPFFMsFoshKx+bPg7rKtL7AsStVM0wI=
Subject key identifier: 17:6D:4B:6D:2E:BA:62:54:FC:93:D4:83:C5:F6:32:E4:26:28:9A:9D
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 01856C01173CB5011BF9BC5F6CB575087A42
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/F21LbS66YlT8k9SDxfYy5CYomp0.roa
Signing time: Sun 01 Jan 2023 06:24:48 +0000
ROA not before: Sun 01 Jan 2023 06:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211066
IP address blocks: 2a0e:d487:f00e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:17:3c:b5:01:1b:f9:bc:5f:6c:b5:75:08:7a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: Jan 1 06:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=176d4b6d2eba6254fc93d483c5f632e426289a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:67:8c:24:9b:cc:64:58:b5:13:f0:2c:f8:96:
ff:35:6f:ef:99:5d:84:6e:07:46:4b:79:57:cb:0a:
99:54:04:46:cb:17:81:0d:fa:f2:e7:8a:8a:11:73:
07:63:c4:c7:9b:0b:c6:b9:05:a7:90:30:95:eb:5d:
68:65:6f:56:37:60:b5:26:ac:59:83:4d:9c:5d:00:
73:25:eb:97:05:45:14:2f:7d:21:11:e5:c8:4e:c6:
e2:4d:16:da:19:71:30:06:42:dd:d7:ab:f4:42:15:
09:f4:61:a1:db:17:e9:3f:de:7e:5d:96:de:fb:38:
86:6c:f9:1a:f7:0d:c2:ec:4f:11:10:2c:05:5c:26:
1b:39:42:50:3b:c3:d3:d3:bf:88:11:c5:c3:60:b4:
6e:39:03:96:9a:37:55:05:9d:92:e5:62:21:ba:10:
90:a4:1c:5d:ba:9b:f7:91:da:f6:1f:a0:ce:68:79:
53:47:91:13:80:78:ec:6d:ff:a8:6c:ec:1b:77:51:
05:8b:93:7b:df:98:87:c8:3a:e9:fa:3b:e0:27:72:
56:4d:fc:05:4e:24:3a:78:7b:de:86:f6:a2:54:2e:
c8:8d:62:7a:0a:ee:84:77:f5:8b:b7:aa:ea:1c:34:
a7:d9:de:e7:84:f7:2a:bb:f6:30:77:a6:5d:08:bc:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:4B:6D:2E:BA:62:54:FC:93:D4:83:C5:F6:32:E4:26:28:9A:9D
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/F21LbS66YlT8k9SDxfYy5CYomp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d487:f00e::/48
Signature Algorithm: sha256WithRSAEncryption
15:86:52:ed:8f:c0:f9:1b:32:4f:a3:10:be:b6:92:a1:12:b5:
6e:9e:94:0a:fa:20:be:d7:15:51:45:20:f2:49:5a:a1:a7:39:
a0:5e:70:1d:ba:f5:82:c1:2c:55:63:3d:24:6d:c7:8b:2b:a5:
d3:16:0a:b9:f6:5f:4e:25:98:4a:69:19:d1:59:a6:dc:42:57:
9f:af:27:84:48:2d:6a:cd:d0:37:cc:9b:11:68:01:0f:ba:92:
32:a5:23:6f:37:95:ed:a9:f7:6b:31:77:1a:66:94:16:6e:42:
e3:d7:d0:66:1d:1f:ed:12:cb:8c:87:a8:13:fa:1a:0d:bc:fe:
37:f2:60:be:96:fa:52:21:34:7e:89:6a:84:e2:ba:82:51:c7:
b6:d3:aa:d9:8d:ff:39:cb:da:48:52:50:ac:95:5d:30:fb:43:
94:44:47:58:0a:77:0c:57:65:3c:c3:ae:e7:4d:18:7a:bb:99:
a6:6f:03:0d:8d:7a:51:2a:ac:bd:c7:32:69:b8:b0:42:9d:9f:
09:80:c6:8e:ae:ad:2c:13:b4:aa:e6:db:46:70:79:25:b5:38:
03:18:06:c0:38:1e:00:07:e7:b5:1a:79:84:c1:73:1f:25:7a:
93:45:8e:2d:6e:7a:27:a4:29:16:cb:9e:c5:a6:c2:29:94:12:
70:49:f6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org