Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/IVMT5GqVqIZM0ASs-l9vbORizFQ.roa
File: IVMT5GqVqIZM0ASs-l9vbORizFQ.roa (raw, json)
Hash identifier: SoSLBG4kwCsuzTV1gZSXBmfA64yWwe6hf/G2hrZ1oXU=
Subject key identifier: 21:53:13:E4:6A:95:A8:86:4C:D0:04:AC:FA:5F:6F:6C:E4:62:CC:54
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D44A7C5DDF1B89EC53BCACC8B6750
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/IVMT5GqVqIZM0ASs-l9vbORizFQ.roa
Signing time: Sun 01 Jan 2023 13:55:01 +0000
ROA not before: Sun 01 Jan 2023 13:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204829
IP address blocks: 2a0f:85c1:56::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:44:a7:c5:dd:f1:b8:9e:c5:3b:ca:cc:8b:67:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=215313e46a95a8864cd004acfa5f6f6ce462cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:51:d6:1c:b9:35:e8:f4:9f:36:f1:1a:21:55:
5c:59:7e:20:e7:e0:04:dd:dc:6a:24:26:05:ce:37:
d2:9a:03:c8:cb:ca:6e:95:c7:51:01:2c:53:2d:85:
60:a8:72:05:f1:28:21:bd:92:b9:ca:54:eb:80:f4:
d6:ec:4f:ff:f7:a8:a0:3c:e9:5b:d9:d0:9a:6d:e8:
56:7c:02:75:05:23:e6:06:e9:bb:52:65:38:9d:2d:
ec:22:4a:06:33:4e:a4:e5:04:cc:59:c2:77:87:05:
09:03:ed:9a:0f:e0:bb:45:92:ad:d4:ff:94:26:0c:
13:c2:87:c6:d9:fd:45:f2:65:78:d1:50:fb:a0:34:
f8:8e:5c:76:97:26:fa:ca:a9:da:ff:ce:53:75:c5:
7c:66:db:02:e2:fd:8b:fb:8e:6c:1f:38:f6:3f:ff:
7a:07:94:73:7e:31:e7:52:49:83:94:80:8d:50:6c:
66:bb:57:be:92:c3:ff:00:14:6e:70:3f:bc:ac:1a:
25:8a:1a:1b:6e:15:c7:1c:fd:66:ca:38:d7:c7:52:
5f:8d:d3:16:8b:07:33:bb:35:26:bc:ac:69:4d:42:
cd:56:df:ec:a4:7c:c9:df:c8:0c:94:62:aa:49:55:
0c:32:ee:72:31:8d:9e:33:19:5f:fb:5d:03:35:10:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:13:E4:6A:95:A8:86:4C:D0:04:AC:FA:5F:6F:6C:E4:62:CC:54
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/IVMT5GqVqIZM0ASs-l9vbORizFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:56::/48
Signature Algorithm: sha256WithRSAEncryption
51:3a:9b:cb:fb:fe:e6:33:7d:fb:05:02:78:de:2d:61:21:d3:
7f:6f:13:86:6e:2e:74:30:d5:e6:ec:3d:19:6b:ce:ec:7c:9a:
91:cd:43:9d:ac:56:fe:e1:2a:db:d3:62:c0:28:53:4a:b3:cb:
fe:97:a3:b8:74:f5:85:fe:3f:5c:40:41:9c:ea:f3:a2:77:4c:
1e:46:ca:7e:5d:66:cb:eb:63:4d:d4:44:f1:63:af:9b:13:6a:
e3:3f:07:6e:14:4a:4e:ef:47:0f:b5:a2:91:48:0d:81:fe:1b:
23:2b:99:d2:c9:20:59:ff:8d:12:dc:10:75:0d:eb:a6:c2:73:
6e:55:42:23:0b:b7:ea:24:41:c6:94:e9:31:b2:3c:82:b0:ff:
02:bd:6c:bb:65:de:f6:d8:d3:b7:00:16:5d:0f:ff:30:d2:af:
6c:2e:35:cc:1c:a2:e6:51:9f:48:a4:2c:39:bd:d6:7a:1f:da:
b3:72:6f:16:6f:41:96:2e:da:2f:76:9b:5b:5a:eb:f5:e3:1c:
33:70:75:4d:b2:ad:92:6d:4f:c0:e6:f4:b0:ee:96:9d:33:a4:
c8:a4:56:97:b3:65:7c:cf:56:45:45:15:b3:fc:1e:e9:ef:dd:
f5:ef:18:e3:a8:35:02:70:c8:6c:83:47:02:f5:e6:6d:a1:09:
52:38:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:14 2024 by rpki-client on console-ams.rpki-client.org