Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/k00HJiB5MPLCawmQTjUGIQg7WjI.roa
File: k00HJiB5MPLCawmQTjUGIQg7WjI.roa (raw, json)
Hash identifier: A+wt0c0O6U/EsWbpdXi2RDPI/4/fs/z4pug7rZghWWc=
Subject key identifier: 93:4D:07:26:20:79:30:F2:C2:6B:09:90:4E:35:06:21:08:3B:5A:32
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 07077B65
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/k00HJiB5MPLCawmQTjUGIQg7WjI.roa
Signing time: Sat 01 Jan 2022 00:56:43 +0000
ROA not before: Sat 01 Jan 2022 00:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207609
IP address blocks: 2a0f:85c1:c080::/41 maxlen: 48
2a0f:85c1:c0d0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117930853 (0x7077b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Jan 1 00:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=934d0726207930f2c26b09904e350621083b5a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:78:d7:06:f1:52:99:83:0a:7b:83:c6:75:
24:e0:fd:ee:b9:64:10:87:69:c4:8e:82:f2:64:65:
f5:24:85:b6:9e:ec:09:31:7b:92:90:92:f8:c1:00:
47:9a:8f:a5:10:67:e9:ab:6e:84:0d:c9:35:d1:0d:
4b:2f:56:de:28:12:d6:65:62:96:98:24:a5:d0:7d:
51:c8:9a:64:a9:d5:9f:83:52:97:9e:1b:0c:12:77:
fe:87:34:52:e5:c4:dc:d6:97:fb:85:de:22:db:91:
fb:7a:b3:c3:4d:32:7d:ac:43:35:2e:e6:4d:b9:7c:
db:4e:84:9c:7a:95:18:38:43:2e:a5:77:3a:8d:46:
62:64:b7:ec:57:19:62:39:a7:06:75:c5:4a:8e:2f:
f6:9a:93:e2:29:2c:b0:76:19:78:6d:70:13:aa:1f:
52:81:e7:25:cc:9f:ec:28:17:93:df:31:fc:fd:ae:
85:6b:bd:d1:46:47:b8:41:20:86:c6:96:ba:44:12:
84:30:d7:5f:78:ea:06:36:64:17:0b:b0:f2:a4:0e:
3b:e5:7b:a3:bb:81:46:4e:2e:75:e2:14:69:c1:4a:
b9:44:09:38:55:f7:7b:84:f4:3d:7d:b6:63:54:5c:
ae:c2:1e:70:5f:fb:33:40:c6:79:a3:c3:52:0f:f3:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:07:26:20:79:30:F2:C2:6B:09:90:4E:35:06:21:08:3B:5A:32
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/k00HJiB5MPLCawmQTjUGIQg7WjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:c080::/41
Signature Algorithm: sha256WithRSAEncryption
09:87:9b:4c:ca:d2:4d:ab:5c:4c:91:8f:f6:9b:35:e7:f7:76:
01:ed:f2:7d:cd:02:29:63:d3:95:4b:f8:3a:b6:95:ee:49:08:
95:57:c4:b2:45:72:83:f9:a7:c6:58:c4:80:99:0c:62:90:b0:
3c:18:16:76:92:53:35:28:40:19:d9:ee:4f:9f:61:a3:14:0e:
28:ef:36:21:39:a9:04:36:b4:69:05:49:f3:5e:ae:03:cf:f8:
ab:b5:17:0d:fb:8d:bc:09:01:72:38:41:67:91:88:e4:9e:88:
c5:96:1f:10:f3:97:b1:5c:17:53:0d:2a:57:5f:d0:bb:e3:32:
4e:88:e5:5f:0d:7c:d6:e9:1e:a5:1e:bc:97:10:02:1a:50:2d:
e4:d7:99:f7:82:38:6c:1f:b4:ba:62:3f:8e:cb:d5:a5:47:4b:
ed:f3:f9:5d:9e:3b:9a:e5:a4:fd:e2:ef:0b:4c:13:db:46:98:
1f:bb:4a:e0:f6:f4:02:17:22:66:de:f8:c0:11:ac:0c:d1:1b:
45:61:b9:5f:09:dc:98:28:31:f2:bb:5c:78:f2:39:c4:0c:2b:
39:d0:61:91:00:29:cf:6c:32:70:d3:6b:27:f3:ce:61:1b:6a:
cb:e2:0c:82:ac:f3:55:fd:75:31:c3:71:8c:1d:c2:6d:e4:fc:
02:d2:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:48 2024 by rpki-client on console-fra.rpki-client.org