Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/Bn28cA5lAnJKRPiBRunUzXZUSuc.roa
File: Bn28cA5lAnJKRPiBRunUzXZUSuc.roa (raw, json)
Hash identifier: ZISm/TzgvTN1qSaVbV0dTuh7aS8XAsROLUL8W5CW8nY=
Subject key identifier: 06:7D:BC:70:0E:65:02:72:4A:44:F8:81:46:E9:D4:CD:76:54:4A:E7
Certificate issuer: /CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Certificate serial: 16B273C8
Authority key identifier: 70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/Bn28cA5lAnJKRPiBRunUzXZUSuc.roa
Signing time: Sat 01 Jan 2022 06:59:39 +0000
ROA not before: Sat 01 Jan 2022 06:59:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34655
IP address blocks: 2a03:9c40:800::/48 maxlen: 48
2a03:9c40:600::/48 maxlen: 48
2a03:9c40:400::/48 maxlen: 48
2a03:9c40:200::/48 maxlen: 48
2a03:9c40::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 380793800 (0x16b273c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704eb0324b167299dd6064dbbf340d2f99c402c2
Validity
Not Before: Jan 1 06:59:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=067dbc700e6502724a44f88146e9d4cd76544ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:9b:da:43:e4:68:ad:a8:85:98:c2:c2:fd:
cf:3d:aa:41:f2:36:fb:df:62:fd:00:9d:b6:29:28:
8e:12:a8:06:13:19:83:0a:8d:57:49:8a:f3:b5:f8:
7b:b7:16:4a:50:f2:7a:ca:08:37:c4:8a:a6:cf:63:
e4:fa:84:1d:1e:68:a1:cf:fb:15:50:7c:c8:59:86:
9f:44:dc:0a:49:50:61:51:99:42:d6:fd:fb:0b:bf:
c5:54:fa:cf:fb:5c:13:6e:72:4b:dd:5c:39:be:e7:
e5:b7:3d:70:4a:8b:5d:50:b6:1a:78:f5:be:c0:3d:
bc:47:ff:bd:2d:5e:08:f4:4a:fe:5b:2c:66:a6:ec:
19:a4:ff:80:5a:69:54:bf:2d:94:6b:fe:12:ee:46:
21:a9:8c:4b:0f:a2:ff:9f:80:59:9a:d4:fd:54:db:
7d:0f:63:35:0d:db:a4:b0:b5:88:53:3f:8a:d6:7d:
d4:84:e1:8d:ed:07:e1:8a:14:16:44:5e:3a:d0:83:
08:7e:e0:1a:d7:f0:c0:e0:48:05:c4:ca:03:7a:82:
b2:5c:47:fd:d2:e5:05:99:87:79:2e:d2:01:c7:9a:
ed:cd:e0:a4:5f:ee:95:81:56:fb:29:df:57:03:19:
00:70:1a:e3:e7:33:b5:b4:a9:f9:fb:03:75:fc:62:
e8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7D:BC:70:0E:65:02:72:4A:44:F8:81:46:E9:D4:CD:76:54:4A:E7
X509v3 Authority Key Identifier:
keyid:70:4E:B0:32:4B:16:72:99:DD:60:64:DB:BF:34:0D:2F:99:C4:02:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cE6wMksWcpndYGTbvzQNL5nEAsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/Bn28cA5lAnJKRPiBRunUzXZUSuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ada691-0e3a-488f-89de-4cf298576b01/1/cE6wMksWcpndYGTbvzQNL5nEAsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:9c40::/48
2a03:9c40:200::/48
2a03:9c40:400::/48
2a03:9c40:600::/48
2a03:9c40:800::/48
Signature Algorithm: sha256WithRSAEncryption
77:83:d3:0d:d4:5b:46:c1:a4:67:13:9f:c2:fc:ef:90:9a:1c:
22:42:6b:3b:eb:d4:db:50:02:5c:f2:50:1e:98:fb:0f:ba:4f:
52:c6:e8:4b:91:27:a9:2e:d9:7b:b8:42:32:ac:2d:47:ab:17:
16:93:74:6a:da:71:35:57:6c:5e:64:43:33:2b:b6:c6:02:36:
5b:e2:3d:ed:ff:93:d5:ff:38:70:e1:6d:29:12:1c:a3:a1:c7:
fd:33:aa:ec:34:11:d0:f0:ac:28:82:b1:11:20:03:f3:01:c3:
94:bb:03:dd:d8:17:3b:cc:d5:71:42:7a:e6:3f:2f:23:b2:54:
0c:1a:3d:c5:c4:13:2a:fe:18:2e:06:42:09:a2:41:79:24:6b:
92:36:37:a1:0f:c6:cb:1d:b3:24:7e:f5:92:2f:96:c5:64:d7:
1f:47:ca:3b:ae:c4:bc:35:e7:8a:7e:32:cf:73:4c:6b:da:75:
af:aa:f5:e8:05:0d:13:ae:2b:c1:77:fa:68:bc:f7:25:84:9a:
e9:46:f3:b3:3c:8a:3a:d0:4d:71:53:f6:e0:88:68:f3:ab:4c:
3e:3f:b6:54:db:f4:89:b7:3f:a6:f8:97:a9:03:b6:5e:7f:bd:
22:e6:d3:a4:b0:5f:dc:e1:5e:5e:cc:49:8b:28:58:e5:88:8a:
fd:f1:11:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:27 2024 by rpki-client on console-ams.rpki-client.org