Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/0oauh14i6eL_rOD3f9Mj8Co8nGU.roa
File: 0oauh14i6eL_rOD3f9Mj8Co8nGU.roa (raw, json)
Hash identifier: DUU3icOu8XX+Np5xfPqvWOlyUfc1isDJOq/9mzgzyYU=
Subject key identifier: D2:86:AE:87:5E:22:E9:E2:FF:AC:E0:F7:7F:D3:23:F0:2A:3C:9C:65
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D4F53450A18690E32A835BFB56A39
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/0oauh14i6eL_rOD3f9Mj8Co8nGU.roa
Signing time: Sun 01 Jan 2023 13:55:04 +0000
ROA not before: Sun 01 Jan 2023 13:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211224
IP address blocks: 2a0f:85c1:60::/44 maxlen: 48
2a0f:85c1:23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:4f:53:45:0a:18:69:0e:32:a8:35:bf:b5:6a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d286ae875e22e9e2fface0f77fd323f02a3c9c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c0:2d:fd:92:0a:64:be:7b:f5:ca:85:4b:83:
45:6d:65:53:8b:eb:b7:f6:c7:af:e7:7d:e2:65:84:
cf:38:b4:3c:eb:06:53:fd:bf:3e:7c:05:5b:db:cb:
45:0c:34:7c:d1:e8:ea:72:5e:c3:25:73:a3:ef:c6:
b5:98:4f:bb:c3:bf:84:3f:21:d5:73:c3:16:2a:e4:
4c:43:ba:aa:7b:19:63:1f:39:12:51:75:d4:cd:a7:
85:24:3e:0f:4e:58:93:dd:f1:f9:01:47:57:8d:7b:
a4:ad:96:e4:48:b9:4d:e3:e1:2c:2b:a1:0b:66:2d:
3a:db:05:52:e5:64:19:85:b8:a0:fe:b2:f3:0c:7d:
ce:73:87:e9:b8:11:b5:91:cc:23:d4:14:e7:0a:c1:
b0:4f:6b:e8:dd:57:c8:11:19:89:25:ae:c2:6c:1f:
76:79:85:f0:e4:ff:7b:61:c3:ac:59:e0:5b:d3:c6:
13:5b:ef:61:34:b0:d1:8a:db:b4:91:bb:d6:b9:56:
b0:c5:5a:ed:e6:d2:98:c1:d4:8d:2a:d2:35:d0:44:
bf:17:0f:a8:81:e7:4d:08:6e:4c:83:a8:66:5f:24:
cb:1e:91:19:4b:fc:ca:31:60:ac:ea:a9:28:07:42:
44:0c:70:77:33:a8:b9:f6:9d:ca:30:23:ff:82:a0:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:AE:87:5E:22:E9:E2:FF:AC:E0:F7:7F:D3:23:F0:2A:3C:9C:65
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/0oauh14i6eL_rOD3f9Mj8Co8nGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:23::/48
2a0f:85c1:60::/44
Signature Algorithm: sha256WithRSAEncryption
75:12:f9:db:79:b0:38:65:42:b8:22:3d:26:70:61:68:6d:75:
a2:99:12:91:ed:00:4d:5b:ab:1c:35:41:97:b9:9b:18:65:b4:
05:d6:b1:06:ff:93:6c:a2:3b:2c:1a:2f:51:92:7a:ca:e0:d3:
02:72:ea:c5:3f:3d:87:38:92:77:1b:dc:5e:57:a2:cc:32:24:
2e:b3:e5:ad:c7:54:cd:03:fc:3f:69:ba:6a:98:34:68:d6:97:
3d:56:21:96:0a:f0:fb:92:87:9b:49:5b:a8:ac:88:6e:b7:71:
f4:6e:d9:ca:1a:b0:e4:1e:78:67:52:56:c8:9f:c1:4e:dd:4a:
fe:7f:43:3c:99:8d:ac:37:0c:80:71:4d:82:c3:1f:e2:61:a4:
ae:1f:26:a8:a0:39:26:87:f5:97:b3:f8:16:0c:89:81:0a:7f:
6e:2e:db:90:76:87:13:88:b9:4e:cf:58:3e:1f:c6:df:a1:0a:
f9:90:0c:a1:81:54:30:b5:aa:5c:ab:7b:5b:ef:21:59:05:93:
a2:e3:6b:c8:91:f7:4c:0d:5d:26:2c:b1:07:34:71:e5:df:4b:
d1:4d:1e:85:de:1b:35:23:a2:6f:13:e6:8f:68:d1:72:94:ae:
74:0e:14:3c:f6:77:81:6b:46:5d:3b:f9:55:3a:8e:3b:75:a2:
10:5d:3b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org