Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/KBCpr_HpWn7ATJ0F-oUUT7Fw1aU.roa
File: KBCpr_HpWn7ATJ0F-oUUT7Fw1aU.roa (raw, json)
Hash identifier: xT73mAfBMJi4/ixZ0UgTuHRxcqqxVx64RTlMDICr/EY=
Subject key identifier: 28:10:A9:AF:F1:E9:5A:7E:C0:4C:9D:05:FA:85:14:4F:B1:70:D5:A5
Certificate issuer: /CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Certificate serial: 084AB7E3
Authority key identifier: 5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/KBCpr_HpWn7ATJ0F-oUUT7Fw1aU.roa
Signing time: Sat 01 Jan 2022 07:59:18 +0000
ROA not before: Sat 01 Jan 2022 07:59:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56796
IP address blocks: 2001:678:9c8::/48 maxlen: 48
2001:678:9e0::/48 maxlen: 48
2001:678:a80::/48 maxlen: 48
2001:678:9d4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139114467 (0x84ab7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Validity
Not Before: Jan 1 07:59:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2810a9aff1e95a7ec04c9d05fa85144fb170d5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:9b:41:08:47:ca:0c:51:60:d5:49:c2:fd:
64:1c:fe:b5:6f:58:91:fd:d4:04:22:a4:82:fa:c0:
fb:4c:ee:fb:05:d2:bf:9c:66:64:64:fe:ac:d9:91:
65:d0:6e:32:dd:86:9a:b9:7a:b0:04:a8:08:79:5a:
1b:44:0e:74:52:9c:55:3b:33:df:eb:a0:57:c4:70:
01:66:3b:87:e1:5e:29:d6:9c:66:ab:1c:34:f8:e8:
69:13:79:03:9b:e8:97:51:fc:33:15:06:35:a6:eb:
d9:6e:87:ff:2f:f2:7a:ff:79:b6:2e:7c:b4:8f:f9:
f9:87:22:9f:aa:a6:38:c8:4f:85:da:86:4b:c6:47:
72:fc:06:43:c0:51:b1:b5:e7:aa:a0:92:01:53:d3:
29:2b:8f:7c:bb:11:77:ab:a7:1b:b5:c7:a7:73:6a:
87:62:3b:2b:ec:59:a5:fd:f5:b9:a1:10:40:0c:5d:
4e:ff:6a:f5:01:47:24:7e:db:68:ba:d1:99:84:4c:
f9:72:e3:63:3a:ee:44:bc:8e:78:52:ab:8d:5c:1e:
0b:48:83:f9:18:3b:b6:7d:f2:47:e9:5b:52:f4:da:
8c:3a:66:35:0d:d2:b2:9b:8a:90:89:4c:a1:47:18:
72:60:41:21:22:23:ff:8d:0f:3e:c0:a6:a3:f6:b8:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:10:A9:AF:F1:E9:5A:7E:C0:4C:9D:05:FA:85:14:4F:B1:70:D5:A5
X509v3 Authority Key Identifier:
keyid:5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/KBCpr_HpWn7ATJ0F-oUUT7Fw1aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9c8::/48
2001:678:9d4::/48
2001:678:9e0::/48
2001:678:a80::/48
Signature Algorithm: sha256WithRSAEncryption
9d:d7:67:15:0c:7a:3a:12:8c:b8:37:03:26:83:46:df:8b:8e:
95:c6:a7:ae:70:a6:2a:dc:17:d2:9c:e9:96:8a:c8:73:6b:01:
82:38:b9:bf:51:9a:4f:3b:fa:79:ff:c6:be:27:7a:e8:9d:d0:
55:fd:bf:8d:70:60:af:f2:9f:54:ca:af:d3:3c:8f:95:55:8f:
b6:31:91:c1:6b:6a:c4:f0:e4:03:61:d3:fd:9f:ce:9b:68:e5:
82:ce:bd:3c:e9:77:99:43:b6:66:67:a2:98:52:5a:3f:a8:04:
07:0d:30:52:c0:4d:95:53:bb:c6:a3:00:50:5c:7e:fb:a2:da:
1d:f7:ee:b6:8e:ff:3a:01:2f:54:b0:1b:3c:7c:a6:8b:7f:ab:
53:f6:ae:6b:bb:41:2d:0e:40:91:29:79:9e:fb:1a:fa:d7:7a:
9a:2c:0f:8e:04:63:58:e0:36:40:95:5a:f6:6a:10:8d:b9:36:
28:ac:09:3d:28:eb:f7:89:94:a8:f9:a3:54:09:26:d5:a3:11:
8c:b1:e0:18:f9:f9:0d:4c:c2:e1:7c:df:55:1a:0d:f9:18:93:
55:bf:e3:5f:53:c6:f9:66:a4:95:a6:b9:87:45:e6:48:d5:1b:
b5:fd:fe:ae:89:13:3a:cb:4a:ad:fd:30:8e:3b:85:d2:55:56:
10:e3:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:41 2024 by rpki-client on console-fra.rpki-client.org