Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/8RlA2CnQJRxEoaZbMyZEw3l-d9k.roa
File: 8RlA2CnQJRxEoaZbMyZEw3l-d9k.roa (raw, json)
Hash identifier: EYg0cgWDFIn+d7Zw2DNxAo1v16tlDc5XQ2nf5b186/s=
Subject key identifier: F1:19:40:D8:29:D0:25:1C:44:A1:A6:5B:33:26:44:C3:79:7E:77:D9
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D47CB7DCE2F71E3ACD954228982FF
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/8RlA2CnQJRxEoaZbMyZEw3l-d9k.roa
Signing time: Sun 01 Jan 2023 13:55:02 +0000
ROA not before: Sun 01 Jan 2023 13:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207609
IP address blocks: 2a0f:85c1:c080::/41 maxlen: 48
2a0f:85c1:c0d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:47:cb:7d:ce:2f:71:e3:ac:d9:54:22:89:82:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f11940d829d0251c44a1a65b332644c3797e77d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:a1:4d:63:2d:00:cb:cf:b8:bb:16:b8:f6:
1c:10:89:81:01:39:ce:47:af:02:7d:24:a6:ac:ba:
95:c5:58:b0:13:c3:e2:63:47:2b:36:5c:4f:31:5d:
05:44:2b:dd:54:ba:c9:a2:be:08:b8:c7:33:00:ba:
3d:dd:07:3a:31:0f:a5:1c:97:05:0b:76:8d:cd:f9:
90:90:85:2c:48:f1:72:39:14:ad:72:ae:0d:7d:0a:
8a:4f:23:17:51:0e:74:7b:a8:61:51:13:f1:7f:13:
78:c5:e3:33:c8:b4:d7:43:07:5d:33:40:aa:f1:71:
0e:d0:f4:b5:b6:11:92:b9:f7:29:42:8a:e6:97:b3:
bd:79:31:19:bb:88:fa:88:1e:2f:17:c3:4e:f2:c6:
24:77:23:75:1f:23:13:dc:a3:6d:b4:7f:ac:51:b4:
8b:65:4c:29:df:3c:0f:37:f6:69:88:06:4a:f8:ca:
77:1c:cb:4d:4f:e4:af:e7:a3:5f:b6:e8:ab:6f:07:
e0:b4:97:7d:7a:8b:bd:7d:18:c1:0b:c4:ad:c4:89:
cd:f5:b4:8e:dd:4e:79:6e:8d:68:d8:37:62:c2:11:
7e:b7:3b:e8:81:d8:17:e1:e7:89:e4:a6:2f:7a:47:
21:4c:cb:fc:86:64:78:ec:b9:02:71:3a:13:07:8c:
c6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:40:D8:29:D0:25:1C:44:A1:A6:5B:33:26:44:C3:79:7E:77:D9
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/8RlA2CnQJRxEoaZbMyZEw3l-d9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c080::/41
Signature Algorithm: sha256WithRSAEncryption
68:b6:9e:81:52:2f:05:29:b2:f7:5e:82:55:d8:08:48:31:3b:
49:91:a5:99:81:6a:21:ef:f5:9a:9a:70:b9:4e:76:7d:ea:0c:
c5:78:f1:1b:eb:b8:89:12:d0:95:f3:30:c9:33:c0:ec:c9:9b:
de:8f:9e:2d:d2:b3:1e:df:49:cb:f4:f4:85:52:12:3e:3d:19:
99:2e:94:c9:1d:6f:47:ce:30:15:be:56:d5:2f:2d:3b:c5:7a:
55:91:d3:ec:e4:73:f6:db:70:a8:82:ad:23:fd:34:fa:ff:a2:
85:9b:bc:fa:08:ae:59:42:57:5d:b2:7b:1b:05:53:d2:1b:01:
97:35:bf:f7:52:47:64:8e:ae:1f:dc:77:eb:76:ae:f7:11:7c:
5e:41:35:cc:a2:69:a5:6c:e0:06:0f:75:88:9a:6a:57:ee:1d:
e6:4d:85:2d:7b:e8:d4:92:fb:f3:0c:a9:dc:f0:b8:b7:15:04:
f6:0b:f6:d1:1c:de:cd:32:6b:e1:91:e8:45:6d:8d:5e:d0:ba:
fd:51:a7:a5:62:0c:15:91:19:fb:3f:aa:ec:f8:ef:a0:ec:70:
d5:1f:80:9f:3c:74:10:2f:13:bc:83:2a:0b:72:58:f0:7f:79:
ed:8d:4b:72:97:14:bd:a5:71:ae:32:a7:89:44:29:e3:1e:a8:
78:eb:e6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:02 2025 by rpki-client