Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/X3NcFoQ59EjIJruIcRGSUDaO8zw.roa
File: X3NcFoQ59EjIJruIcRGSUDaO8zw.roa (raw, json)
Hash identifier: NPOW4LUShISxfNAOcjn3hn4xMeDF1vsPhz22HHei8Ss=
Subject key identifier: 5F:73:5C:16:84:39:F4:48:C8:26:BB:88:71:11:92:50:36:8E:F3:3C
Certificate issuer: /CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Certificate serial: 03207380
Authority key identifier: 09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/X3NcFoQ59EjIJruIcRGSUDaO8zw.roa
Signing time: Wed 18 May 2022 05:31:34 +0000
ROA not before: Wed 18 May 2022 05:31:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205037
IP address blocks: 2a0e:d487:fff8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52458368 (0x3207380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b9d37450b62ae3f144eb42ac52ce243b628a7a
Validity
Not Before: May 18 05:31:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f735c168439f448c826bb8871119250368ef33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:dc:52:24:26:22:b7:63:20:0b:ee:e8:43:
01:45:6b:fb:e2:f8:a9:df:85:5d:f8:4a:26:2e:cf:
ae:2b:29:72:dc:ec:98:5f:c6:7e:01:a7:4b:97:5f:
ae:6b:0b:7e:34:8b:26:4d:3c:dd:78:8e:c8:23:e5:
09:45:d9:8b:69:cf:72:d6:c5:7f:49:39:f3:a5:65:
de:ba:e1:15:dc:6d:26:43:05:ec:ee:78:ea:5f:48:
80:4c:2c:eb:b7:7f:7d:37:cc:f3:c3:02:4c:82:60:
72:e8:58:3d:a5:d4:ff:bd:78:a5:21:e3:6a:36:1d:
51:32:f0:a0:a2:82:d7:a0:1f:c3:07:3f:8f:37:ad:
d5:6a:08:ad:4e:d4:d9:8a:cd:c2:30:62:71:27:ac:
e7:3b:50:b2:b8:11:18:25:fb:63:75:0f:01:a2:cc:
87:36:08:78:25:70:03:10:34:cb:12:a7:36:9f:a6:
b9:b4:ec:74:c8:a6:b7:57:55:47:dd:7a:f8:f4:84:
2d:98:97:99:6b:6c:01:da:b4:44:26:46:c9:3b:c9:
57:fe:60:2e:f6:0e:b0:87:56:26:a9:08:f3:55:cb:
f8:a1:66:8c:02:15:d8:31:19:14:04:1a:bf:f6:1d:
10:a7:a1:ef:24:fb:b0:0a:90:d7:aa:20:f9:b2:40:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:73:5C:16:84:39:F4:48:C8:26:BB:88:71:11:92:50:36:8E:F3:3C
X509v3 Authority Key Identifier:
keyid:09:B9:D3:74:50:B6:2A:E3:F1:44:EB:42:AC:52:CE:24:3B:62:8A:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbnTdFC2KuPxROtCrFLOJDtiino.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/X3NcFoQ59EjIJruIcRGSUDaO8zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/e5c0b6-8788-4bb9-b885-3fbfb94d9100/1/CbnTdFC2KuPxROtCrFLOJDtiino.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d487:fff8::/48
Signature Algorithm: sha256WithRSAEncryption
80:14:04:f8:eb:96:b0:dd:9a:3b:25:39:ce:69:32:36:0c:a5:
6e:cc:0c:60:32:d2:74:99:ab:71:ee:e9:d1:ea:8b:4d:6f:ca:
7c:67:2b:cb:07:45:d3:df:ec:81:e0:e0:29:0f:cb:c3:8d:6e:
2a:4b:d1:ba:de:4c:66:4c:79:a1:73:f6:7c:d8:5d:16:2c:46:
40:80:a0:4b:e8:d1:52:ff:ba:24:88:04:5d:d4:d9:6d:ac:d0:
47:74:b1:d6:e4:e2:a7:6a:ea:27:01:7a:62:0f:6b:19:7f:91:
ba:30:e9:11:d7:e7:a7:d9:ed:53:53:fe:2a:ac:74:15:1f:85:
cb:82:ec:af:6d:da:ea:34:84:1b:17:ef:3c:4b:68:3a:d8:c6:
ab:ac:ff:2f:8e:10:a1:73:45:e0:ff:b9:db:87:88:9f:ac:4f:
e6:47:1f:3f:70:d6:40:09:b5:46:1f:fb:a9:b9:05:2c:34:26:
e4:02:c9:3c:61:d0:5f:f6:ea:8c:55:eb:05:e1:3b:c9:15:7d:
db:1f:8b:9f:84:f4:0d:09:39:0b:52:66:02:40:56:ed:9b:b7:
2b:ff:e0:54:84:1a:54:ff:c8:fd:ab:6e:6c:36:c0:57:6c:37:
cf:57:60:f4:df:bd:75:c7:37:bc:07:6f:25:24:01:97:b8:c1:
e8:08:7a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org