Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/fPV_ng7xinjbM1uPLLZ1Aa6gw20.roa
File: fPV_ng7xinjbM1uPLLZ1Aa6gw20.roa (raw, json)
Hash identifier: 7W0LmdtNFyhzAQJ2sodPAkkfhtd3BXUjEVE4vkd3Gpc=
Subject key identifier: 7C:F5:7F:9E:0E:F1:8A:78:DB:33:5B:8F:2C:B6:75:01:AE:A0:C3:6D
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 01856D9D4891843F49D8B093CF86AFD397AA
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/fPV_ng7xinjbM1uPLLZ1Aa6gw20.roa
Signing time: Sun 01 Jan 2023 13:55:02 +0000
ROA not before: Sun 01 Jan 2023 13:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207781
IP address blocks: 2a0f:85c1:beef::/48 maxlen: 48
2a0f:85c1:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:48:91:84:3f:49:d8:b0:93:cf:86:af:d3:97:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 13:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cf57f9e0ef18a78db335b8f2cb67501aea0c36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e8:48:e5:5e:f2:ce:5e:df:c5:5b:54:27:fc:
d3:79:47:79:a6:2b:26:f6:ff:fb:22:9f:99:13:7b:
e5:8b:05:be:53:13:b9:17:f8:cd:61:9a:62:9c:9c:
3d:f9:75:59:46:a7:f3:a5:b3:06:98:cf:cb:66:dd:
d4:17:9d:c5:ea:17:8d:04:d1:f5:2f:2a:db:fa:71:
f5:3e:41:ae:69:3f:36:a0:ae:e6:5f:23:fa:b2:4a:
19:d2:91:a7:fb:c6:26:bb:ab:42:5e:68:eb:3a:e9:
ed:35:8b:74:bb:99:18:51:27:f9:25:d6:51:d2:f4:
e0:16:73:f6:0a:38:f6:11:9f:80:71:b6:8b:c2:fa:
4c:b0:19:b7:ec:98:35:37:f3:b1:d8:22:6b:49:e6:
a4:7a:39:17:7e:fd:fb:55:10:3e:7c:30:a5:b9:b1:
4d:af:2d:cb:af:98:50:0f:fd:5b:21:ca:fe:59:f3:
4e:bc:2a:6d:2e:58:a3:05:49:cb:27:8d:b4:89:bc:
a7:c6:99:7d:49:39:f5:6a:65:c1:e1:80:0d:57:45:
66:d8:a9:a2:f9:24:d3:74:f8:01:5c:2a:89:47:18:
31:6e:67:7b:ff:33:da:ce:e5:20:7d:66:fe:ba:7a:
be:dc:3a:78:e6:a3:2d:ff:ce:ef:1f:18:6a:3b:95:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F5:7F:9E:0E:F1:8A:78:DB:33:5B:8F:2C:B6:75:01:AE:A0:C3:6D
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/fPV_ng7xinjbM1uPLLZ1Aa6gw20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:beef::/48
2a0f:85c1:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
76:5f:5f:36:15:eb:f2:14:3f:b3:f1:23:58:33:ec:5b:64:87:
96:7f:c1:61:9c:ea:04:88:d5:e4:f9:15:8c:ae:3e:cc:d7:08:
f3:65:14:e5:fc:ea:bd:16:35:e1:09:ca:17:6b:15:a2:aa:95:
d1:89:ac:6f:13:c9:65:0d:35:b5:c1:a2:ab:9b:53:e6:66:4b:
8c:a7:22:63:5d:7e:d3:91:b0:b2:df:a2:88:7c:63:27:e3:31:
49:f6:77:d9:78:f0:18:ec:10:01:be:74:99:d5:3d:e5:cd:ed:
2f:91:02:f0:54:54:fb:7e:58:cc:7e:38:8d:d5:b1:3e:74:ce:
0a:86:fd:b2:5c:87:0f:6d:30:e9:bc:bd:2d:f3:e9:d8:7e:2a:
f9:b7:e2:d7:3d:24:35:39:52:0e:10:ce:07:3c:92:32:d8:94:
64:78:e5:04:8b:08:d8:49:3e:33:29:b1:99:e4:a9:d2:78:46:
19:b2:17:99:e4:dd:9f:20:1d:96:20:21:06:ab:84:40:2e:19:
23:1a:7f:1d:5d:69:77:f4:94:b7:71:2b:ff:05:18:4a:4f:c4:
d8:ed:0c:79:fa:bb:7d:1e:ef:28:eb:ed:94:7f:48:1f:3e:99:
d8:79:0b:9a:37:68:ff:49:95:3d:47:29:01:45:94:35:31:57:
14:d6:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org