Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/jeMYEGwHauEeUma8mImfKf24Fgk.roa
File: jeMYEGwHauEeUma8mImfKf24Fgk.roa (raw, json)
Hash identifier: mbkSP0la2aQs1fcnScT9GxKKau+4YM9sfwdva7bk3NU=
Subject key identifier: 8D:E3:18:10:6C:07:6A:E1:1E:52:66:BC:98:89:9F:29:FD:B8:16:09
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 073852C3
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/jeMYEGwHauEeUma8mImfKf24Fgk.roa
Signing time: Sun 16 Jan 2022 03:21:03 +0000
ROA not before: Sun 16 Jan 2022 03:21:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211224
IP address blocks: 2a0f:85c1:60::/44 maxlen: 48
2a0f:85c1:23::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121131715 (0x73852c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 16 03:21:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8de318106c076ae11e5266bc98899f29fdb81609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:28:01:db:f9:c7:21:49:8e:9f:b3:f1:07:
bc:33:a3:8c:45:2f:23:e0:de:6f:7d:83:90:76:70:
df:6b:7b:1c:f6:a6:97:0a:23:e2:8e:71:8c:ca:2b:
67:5b:87:6f:38:ce:e9:74:29:48:e9:9d:e5:16:7d:
0e:54:83:a3:05:18:7a:eb:82:29:9d:02:25:78:97:
e9:8a:2e:ec:89:00:e3:f7:1b:58:43:8b:cf:df:5d:
c3:34:3c:cc:5c:6a:00:fa:c7:12:2a:30:05:59:de:
35:69:e8:c5:05:64:50:a6:44:55:d2:5c:32:b9:c1:
7f:f0:38:a9:ca:08:b6:6f:93:f2:9d:1d:3d:c4:64:
98:8d:73:98:dc:ce:8e:84:21:12:1a:94:a3:54:5b:
0a:98:e5:5a:cd:70:dd:ae:5b:8a:db:df:e0:2e:67:
e6:a5:f5:69:54:44:20:45:82:29:66:d3:0e:3e:ad:
00:ff:18:cb:e9:30:d2:93:1e:4f:ae:23:5f:75:d9:
92:95:75:92:3b:89:61:63:3a:35:24:c9:56:a8:34:
56:8f:3d:fc:f3:44:0a:1f:21:6e:86:11:91:47:01:
d3:4f:97:2f:bd:63:d3:78:29:63:a7:8e:10:63:8b:
7b:dd:15:e2:ff:34:88:a1:75:e1:0e:95:7e:e3:63:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:18:10:6C:07:6A:E1:1E:52:66:BC:98:89:9F:29:FD:B8:16:09
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/jeMYEGwHauEeUma8mImfKf24Fgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:23::/48
2a0f:85c1:60::/44
Signature Algorithm: sha256WithRSAEncryption
a0:5d:79:aa:15:66:ac:c6:fc:b1:6f:b1:bd:7f:e9:9c:d9:1b:
95:5b:c1:72:07:2c:92:46:bc:21:1a:05:4b:2a:6f:0c:59:df:
a3:b0:b9:74:9d:ab:21:27:f7:59:e4:9a:2c:e4:9a:71:b3:92:
bc:3b:2c:1b:05:81:43:2a:e0:25:00:f3:38:3a:f2:de:1b:99:
b2:42:78:a3:55:49:8e:4f:ef:c4:cb:c3:8d:7e:39:b7:19:75:
56:36:09:d8:0e:ba:5a:d3:dc:49:bb:5a:b7:bc:0f:36:98:b1:
bd:ed:02:cc:2c:f2:83:08:12:12:30:2e:31:1a:dc:8d:3f:46:
89:f5:d2:d6:40:41:25:1a:7d:ed:c3:62:34:be:39:ca:12:d8:
6b:9a:1c:95:18:03:4d:ef:92:39:31:15:c3:9f:88:b7:22:a7:
a8:56:94:86:96:14:90:e7:b7:05:4a:99:09:06:23:64:29:b9:
e1:bc:d6:61:4a:d1:1d:6a:74:57:de:cf:71:fa:90:ee:f3:6e:
f3:dc:07:5e:15:3d:4c:08:c8:2b:fa:48:d9:3d:51:ae:ca:80:
9c:19:1f:7d:2b:b4:0e:ab:5e:ee:7d:99:d3:0e:ed:0a:bf:b2:
e8:97:63:57:31:c2:48:43:c3:08:2c:16:df:bb:68:19:7f:0f:
3e:13:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org