Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/N7fhIE1GstQEjmwlW0UO855Wk9Q.roa
File: N7fhIE1GstQEjmwlW0UO855Wk9Q.roa (raw, json)
Hash identifier: +NkD2kjmNCgXUfGKOodA1y+wpTKb39d7yoNvmTIE3uU=
Subject key identifier: 37:B7:E1:20:4D:46:B2:D4:04:8E:6C:25:5B:45:0E:F3:9E:56:93:D4
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D4B1BC274098FF2323C39E3ACEBFD
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/N7fhIE1GstQEjmwlW0UO855Wk9Q.roa
Signing time: Sun 01 Jan 2023 13:55:02 +0000
ROA not before: Sun 01 Jan 2023 13:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209267
IP address blocks: 2a0f:85c1:70::/44 maxlen: 44
2a0f:85c1:70::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:4b:1b:c2:74:09:8f:f2:32:3c:39:e3:ac:eb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b7e1204d46b2d4048e6c255b450ef39e5693d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:15:a9:e6:a7:3b:db:96:19:ad:3e:91:ee:
05:c2:ce:9c:bb:f2:94:ce:ee:32:8e:0c:64:d3:0e:
04:ef:51:91:92:00:b3:6c:9b:b2:cc:cf:6f:59:f8:
9f:14:df:36:41:ab:1c:41:a9:d9:38:38:ea:64:7d:
a9:b6:64:e8:ba:ad:09:9b:f1:e8:6e:67:ea:97:2f:
c0:74:09:7f:a7:83:39:c9:73:72:e9:86:75:a1:0e:
55:e2:1a:fa:50:5c:ee:9c:0e:fb:a7:b5:17:7a:ea:
e4:46:11:b4:cf:e8:92:cd:80:50:84:5c:4d:97:0a:
17:91:05:b7:5f:51:ea:b2:7b:4a:a1:be:0b:ed:2f:
cd:2c:50:7f:a9:5e:63:2e:56:c3:46:e7:e1:59:88:
84:26:1e:1e:00:73:07:0f:cc:72:06:5e:8a:0a:ec:
54:cc:c7:b5:f6:b2:cf:7f:2b:d3:a3:c1:f5:7a:54:
26:68:10:a1:eb:8d:11:e3:1d:f3:31:03:56:55:9a:
ad:16:ee:f6:42:f2:bf:03:c3:70:df:4e:22:e2:d2:
92:49:03:49:5e:39:f3:a9:89:29:8e:61:38:41:f6:
67:42:21:42:ba:4c:c1:b3:9f:66:b2:2d:f6:1f:01:
ee:5e:c4:65:34:7d:35:72:49:29:fb:7c:c3:fe:7e:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:E1:20:4D:46:B2:D4:04:8E:6C:25:5B:45:0E:F3:9E:56:93:D4
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/N7fhIE1GstQEjmwlW0UO855Wk9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:70::/44
Signature Algorithm: sha256WithRSAEncryption
24:fa:16:c0:f3:17:c3:47:4f:88:a7:eb:f4:10:ab:58:4f:4f:
e3:05:e3:75:d5:6b:f6:35:ab:4e:4c:a7:65:8f:29:aa:48:b4:
2c:83:c2:41:29:52:06:9b:d8:96:3f:34:c4:1e:fa:a6:3c:ee:
3e:9e:2d:8f:35:d6:d8:43:29:82:c6:7a:9f:77:72:c2:22:6f:
92:73:c9:15:58:bf:0d:43:db:b6:0a:0c:40:2c:4a:bf:81:7d:
20:cc:f6:3a:38:cc:7a:21:b3:ba:0c:cf:20:df:a8:35:b8:01:
6f:71:a2:54:79:bd:96:98:56:9a:d0:e7:36:42:41:9d:e3:2f:
16:33:f6:1d:9e:e9:83:7e:a9:68:01:79:ab:08:35:95:3c:78:
8f:30:b7:ba:51:af:1f:3c:90:a1:b6:4c:bf:e7:1e:88:a1:d9:
f8:16:1c:ca:02:f3:53:dc:4b:0b:b2:a4:8e:51:03:8a:bf:e7:
7a:ac:90:5e:6f:13:32:eb:27:58:95:b2:46:f1:fc:99:c8:01:
d7:38:85:e8:a7:c3:39:53:8a:e9:c5:81:73:5f:04:c7:3b:b7:
0d:31:1c:3b:91:f7:bb:58:f6:15:c2:17:28:a0:a9:eb:01:0e:
af:3c:a3:e3:2c:9d:9c:48:3a:87:2f:ed:ec:7b:4f:fe:96:b7:
1a:5c:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org