Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/bSsyAd_p0iREhgcTkwpA6Yfa6-o.roa
File: bSsyAd_p0iREhgcTkwpA6Yfa6-o.roa (raw, json)
Hash identifier: i0m15w7eUGgQmpuDtOkbn+WWVpGrki2REtuWkujqb3s=
Subject key identifier: 6D:2B:32:01:DF:E9:D2:24:44:86:07:13:93:0A:40:E9:87:DA:EB:EA
Certificate issuer: /CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Certificate serial: 0189AFB62243554720219B8E34E65AF48E3D
Authority key identifier: CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/bSsyAd_p0iREhgcTkwpA6Yfa6-o.roa
Signing time: Tue 01 Aug 2023 06:08:16 +0000
ROA not before: Tue 01 Aug 2023 06:08:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a0d:3c80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:af:b6:22:43:55:47:20:21:9b:8e:34:e6:5a:f4:8e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca0a1f8cf3b8016be8832f78b101b364e1114025
Validity
Not Before: Aug 1 06:08:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d2b3201dfe9d22444860713930a40e987daebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c4:4e:2e:fe:b8:4a:bd:00:c7:b2:5b:06:5a:
24:f3:0b:9e:4a:9e:82:8b:7c:a5:5b:52:96:a2:bb:
0e:5a:0e:17:3b:b8:34:ff:66:50:8f:0c:5c:34:2a:
ad:26:02:34:c9:fb:87:84:18:b9:bf:78:57:cf:18:
86:d9:1f:0f:08:15:65:17:a1:04:a4:af:35:4d:94:
f7:f1:7c:ae:55:64:c3:18:da:5d:3a:57:58:a3:cf:
c5:6e:90:4b:8e:37:a1:27:9f:49:c1:b2:7f:88:1c:
c1:cb:2d:ac:6b:67:eb:fc:44:50:65:df:40:f8:a0:
95:4f:41:8e:42:6a:30:e1:1c:54:88:a6:7e:3c:a6:
87:19:3a:69:96:b7:0d:83:89:68:2f:97:8f:2f:5a:
7d:56:0c:f2:d0:d3:d1:be:14:3f:db:33:66:be:d6:
9f:98:db:69:26:be:3b:8c:f9:4b:61:9d:52:3c:f8:
e2:1e:07:9a:14:ab:92:ec:09:25:95:99:19:4a:83:
46:21:ae:15:29:ff:25:36:e0:84:9d:9d:40:8e:6a:
49:4a:13:ad:1a:f4:8f:b0:c2:01:62:80:58:a7:f7:
ef:05:7f:45:20:e4:44:91:38:79:de:0c:e1:db:da:
ec:82:df:29:7c:f7:0d:0c:d6:49:c8:6c:bb:5e:86:
4a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:32:01:DF:E9:D2:24:44:86:07:13:93:0A:40:E9:87:DA:EB:EA
X509v3 Authority Key Identifier:
keyid:CA:0A:1F:8C:F3:B8:01:6B:E8:83:2F:78:B1:01:B3:64:E1:11:40:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ygofjPO4AWvogy94sQGzZOERQCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/bSsyAd_p0iREhgcTkwpA6Yfa6-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/77f03f-9938-458f-8107-b594740a40a7/1/ygofjPO4AWvogy94sQGzZOERQCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
6f:a0:4e:98:46:32:a7:99:a2:30:93:c9:66:d7:36:3c:f2:2a:
98:3a:bb:98:09:4d:93:8b:08:65:eb:84:0f:24:72:93:3c:3e:
7c:f9:3f:ef:17:53:a1:ac:6c:ad:61:2e:5b:61:ec:2d:53:23:
c2:57:cd:88:4c:ca:fb:25:c4:33:b9:9f:d6:75:11:7b:d6:d0:
be:fb:8a:82:a8:34:03:38:de:ea:92:0c:dd:ce:6f:5e:31:8a:
0d:c8:b2:65:33:86:de:ac:d6:e6:e3:48:a3:c2:43:a3:54:f4:
74:8e:19:46:77:59:1e:87:c9:14:f6:0f:95:56:2a:91:86:51:
f6:d4:ae:5c:cf:a0:3b:b8:9d:87:09:06:e4:4d:6c:51:5d:85:
aa:a6:09:fb:3b:9a:56:aa:92:b1:fc:44:52:c3:91:de:ff:1a:
a6:d2:df:8b:f9:a9:59:49:77:8b:78:6f:36:13:99:39:a1:94:
e4:4f:e4:d3:5a:2a:12:ef:68:51:df:d1:f7:ef:14:c3:81:34:
8b:42:11:b5:80:14:85:09:4b:e0:eb:7d:dc:12:20:ff:bf:62:
7c:14:14:51:72:54:7c:19:3a:e0:0a:9e:93:c3:06:f5:39:16:
cc:16:19:05:82:30:53:a6:d9:4e:05:0e:9d:26:30:ea:78:ac:
3b:5d:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:25 2025 by rpki-client