Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/CggmvCa0fTEIR6RN947f6LnBnl4.roa
File: CggmvCa0fTEIR6RN947f6LnBnl4.roa (raw, json)
Hash identifier: 6ucaXGt6eDN1Cs2x4GqxyJ9qQS3m1WR0ceyad0H7njo=
Subject key identifier: 0A:08:26:BC:26:B4:7D:31:08:47:A4:4D:F7:8E:DF:E8:B9:C1:9E:5E
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D4EB73446CE7D9DA8F176E2EC6007
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/CggmvCa0fTEIR6RN947f6LnBnl4.roa
Signing time: Sun 01 Jan 2023 13:55:03 +0000
ROA not before: Sun 01 Jan 2023 13:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210376
IP address blocks: 2a0f:85c1:29::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:4e:b7:34:46:ce:7d:9d:a8:f1:76:e2:ec:60:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a0826bc26b47d310847a44df78edfe8b9c19e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:5c:2b:f7:f8:ce:e3:7b:3f:f9:6d:75:d2:
0b:28:85:da:bf:ce:cc:b5:12:b0:d4:f1:c6:0e:7d:
a8:19:72:8e:25:51:15:10:26:bf:0c:33:05:80:dd:
74:24:e1:71:fb:3e:98:80:ff:a3:c8:a7:74:a5:40:
3c:3a:2c:2e:16:a0:c7:90:9d:a1:56:f3:a4:d2:e3:
e5:68:3b:2f:63:c9:ec:3e:82:e5:a9:e6:01:48:1b:
91:ce:31:45:35:35:e7:c7:f4:58:8f:d8:98:68:50:
5b:32:c6:05:47:e1:4f:fb:e6:da:f1:ef:cd:db:2f:
1d:45:09:d8:c1:7c:1b:eb:b5:4c:b3:92:a8:22:c0:
cf:09:f2:97:f3:ab:3f:e4:78:0f:7d:28:9d:a0:4b:
ca:aa:30:88:b7:02:aa:22:95:92:5f:de:f8:91:10:
02:fe:b6:70:b3:59:8d:01:9a:57:6a:5e:05:1a:ba:
d9:2f:98:60:c8:73:57:65:15:ac:8f:fb:23:15:b8:
21:e1:8a:08:52:6c:d7:c7:e8:89:e1:eb:88:b6:7c:
04:5d:8e:29:16:70:27:e4:aa:84:02:5d:41:3c:dd:
0a:b8:a5:2e:1d:78:1e:36:b2:d9:b7:31:73:3d:c9:
fa:22:20:25:c8:0b:67:03:19:03:64:a2:71:09:ae:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:08:26:BC:26:B4:7D:31:08:47:A4:4D:F7:8E:DF:E8:B9:C1:9E:5E
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/CggmvCa0fTEIR6RN947f6LnBnl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:29::/48
Signature Algorithm: sha256WithRSAEncryption
9f:87:70:a4:50:86:2a:de:5a:27:6a:a9:6b:b1:b6:d7:b3:a0:
7b:5e:2d:ad:85:fe:37:f2:e8:ea:7f:33:06:41:a6:8c:b0:ff:
41:7c:7a:0b:42:4b:77:8c:4d:18:fc:3b:04:66:6d:b6:ff:6d:
83:64:79:53:97:2d:f1:ad:61:76:22:0d:31:18:01:ca:0b:09:
6e:1f:d9:19:3b:c5:c8:a7:60:78:82:d4:30:fd:62:ae:39:32:
ba:11:53:87:31:67:5b:fa:3c:88:c4:ff:03:8b:3c:70:ff:f0:
e2:fc:16:1d:83:42:39:1c:c2:7c:f7:66:17:d6:6c:b5:a0:32:
f6:14:5b:63:c6:95:23:79:48:6f:63:8b:34:43:2f:26:b2:af:
8d:8c:f5:22:2e:ab:8a:9d:28:ba:28:01:c8:1e:f0:9a:f6:7c:
8f:89:99:c4:8c:62:46:3f:28:5b:7f:cb:f8:ee:1d:de:91:1a:
7d:5b:5d:42:02:8c:42:ed:d9:43:3b:6f:b1:a7:6c:15:bd:bf:
43:de:8b:eb:9c:a1:77:dc:20:42:fa:92:e6:4a:86:40:cf:4b:
5f:20:cd:43:fe:5d:5b:2e:20:9e:8b:75:ca:30:8c:55:d1:fa:
11:1d:41:26:bf:3d:6d:94:55:2a:a4:57:b8:15:27:2d:1f:7f:
19:7f:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:41 2025 by rpki-client