Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/8FiJUzd11rTQlQH26jvXSze1_pQ.roa
File: 8FiJUzd11rTQlQH26jvXSze1_pQ.roa (raw, json)
Hash identifier: UQw/FSGSx2v7XARm/ut9d3amTHR/lsrKXfThd+UpwnM=
Subject key identifier: F0:58:89:53:37:75:D6:B4:D0:95:01:F6:EA:3B:D7:4B:37:B5:FE:94
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 07B37975
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/8FiJUzd11rTQlQH26jvXSze1_pQ.roa
Signing time: Mon 07 Mar 2022 17:14:06 +0000
ROA not before: Mon 07 Mar 2022 17:14:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207842
IP address blocks: 2a0f:85c1:220::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129202549 (0x7b37975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Mar 7 17:14:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f05889533775d6b4d09501f6ea3bd74b37b5fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:fb:93:23:7d:16:51:82:8f:98:f9:71:08:
a0:14:da:e6:cc:a4:74:78:e4:f1:e6:2c:38:1e:63:
92:28:e9:58:46:5a:b8:7b:a7:fa:27:9c:11:a3:76:
a4:54:54:62:b6:e1:88:e6:2e:d2:6e:96:0f:52:74:
54:44:59:c3:ac:d5:ae:a5:d6:0d:ca:67:e8:cc:7a:
87:e0:9f:ed:c1:ad:f9:98:d1:d6:da:59:4d:93:e2:
44:30:7c:52:13:58:57:c3:bd:42:09:24:35:d6:5f:
26:25:27:18:d6:ee:dd:b1:dd:0c:b7:87:d7:5a:8a:
ee:c6:2a:f9:ce:d3:5b:78:b3:e9:df:b3:32:1c:a7:
3d:25:7d:4b:20:88:b6:19:74:bc:20:78:98:66:66:
64:5e:b4:cb:40:7f:44:48:c4:9d:2f:14:fe:13:cd:
04:da:57:07:c4:60:da:4b:52:8b:79:31:d7:9d:60:
8f:48:f4:18:7f:46:4a:5b:31:40:f1:44:42:59:eb:
61:51:49:e9:8c:55:28:0c:5e:68:77:43:98:c7:3b:
8d:dd:f9:c1:d1:ce:6b:89:7b:97:97:08:51:07:c3:
7a:ac:ae:76:31:df:41:9f:3f:39:e7:71:74:92:1e:
9d:10:aa:30:84:ae:bc:91:5a:b6:32:90:97:9d:26:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:58:89:53:37:75:D6:B4:D0:95:01:F6:EA:3B:D7:4B:37:B5:FE:94
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/8FiJUzd11rTQlQH26jvXSze1_pQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:220::/44
Signature Algorithm: sha256WithRSAEncryption
a3:ac:37:17:c2:ec:9d:1e:48:6d:e7:e5:04:0e:86:38:01:9d:
3a:55:ae:8f:5f:d0:35:74:b8:5b:3a:d7:b0:b5:86:38:28:4d:
0e:36:0d:7c:36:f4:3b:87:b3:e8:46:15:13:a6:17:24:fb:75:
5e:0b:9e:ab:97:51:12:cc:62:16:8a:f9:89:0b:fb:9b:fc:72:
34:8e:04:01:d3:46:e8:60:90:b1:34:5e:36:66:5b:a8:8a:fe:
c6:67:85:1a:bd:5e:0a:c5:15:79:a5:8a:4a:6d:a0:64:c6:19:
cc:da:7f:f5:94:f8:3c:58:ee:ad:d4:6e:f2:8c:17:8a:cb:22:
84:02:15:e6:de:6f:5b:a2:c3:86:4a:ba:a8:73:0b:96:6c:fc:
a1:35:59:2c:c0:ad:e3:aa:ba:42:d4:a4:e9:14:30:b5:cd:3d:
40:8f:3a:e0:38:84:46:0e:c8:14:07:21:1d:8e:e6:6e:43:55:
a7:bd:97:e8:08:17:79:d3:e6:1e:fb:2b:73:98:8f:ce:2c:eb:
69:cb:dc:39:6a:ed:ed:02:5e:c3:97:97:2b:79:45:61:16:bd:
ed:e6:f3:06:d1:58:7a:35:a0:0b:91:dd:0f:37:5e:9d:6d:1a:
6b:04:d0:f6:a5:3d:64:bc:72:b8:59:32:76:7c:c4:01:a5:f5:
c2:61:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org