Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/y26WG8nc3WtLJ--LDoD_qqbvKN0.roa
File: y26WG8nc3WtLJ--LDoD_qqbvKN0.roa (raw, json)
Hash identifier: IsaPyYRV1PfrNbR/hbS/+2jUAiqMcXM/8FqoPf9kZJg=
Subject key identifier: CB:6E:96:1B:C9:DC:DD:6B:4B:27:EF:8B:0E:80:FF:AA:A6:EF:28:DD
Certificate issuer: /CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Certificate serial: 018A704E9B069CEC8FA889F12C5A42ADAB01
Authority key identifier: 6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/y26WG8nc3WtLJ--LDoD_qqbvKN0.roa
Signing time: Thu 07 Sep 2023 15:41:54 +0000
ROA not before: Thu 07 Sep 2023 15:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216336
IP address blocks: 2a0f:85c1:400::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:4e:9b:06:9c:ec:8f:a8:89:f1:2c:5a:42:ad:ab:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb3ae11a3a6a5ee1e32ea6cce1f10df231ead88
Validity
Not Before: Sep 7 15:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6e961bc9dcdd6b4b27ef8b0e80ffaaa6ef28dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:d1:01:4c:2a:7f:e8:5b:d8:4f:74:65:ce:
8d:ce:e3:a5:ea:e5:35:ce:3d:f6:e4:c1:1a:8b:67:
11:5f:fb:69:a0:c5:01:d2:80:96:a9:f9:26:f1:1e:
0e:f6:b4:fd:57:b4:c3:6b:ab:4f:02:ea:fb:f6:b7:
1d:a1:3f:1b:7c:f1:86:6b:61:62:5d:4b:bc:b7:e3:
29:22:aa:9d:76:da:8a:a5:f8:53:ca:58:30:1a:4b:
6b:5e:64:ef:ac:86:48:a4:95:04:cc:fa:26:df:4c:
b1:48:6c:1a:56:ca:77:2c:37:a1:af:c9:66:7d:21:
ab:43:39:8a:aa:fc:4d:d7:28:30:d2:ff:4d:08:ff:
96:8a:0e:a1:5a:10:21:65:9c:72:76:94:58:bf:3f:
28:ff:ba:9b:a6:ef:f5:06:d1:a9:b9:5c:99:f7:fa:
74:74:63:80:0e:32:bd:af:31:ed:ac:3d:14:54:42:
9c:70:0d:1a:83:40:2c:13:31:80:02:e3:cc:f4:7d:
0f:0c:b0:3b:c2:a4:e6:4e:94:8a:fb:43:23:ad:9f:
ab:e3:b8:28:9b:3f:45:ec:9f:84:0f:f0:f7:d5:3e:
54:e5:8c:94:2b:b5:f6:c4:a7:1b:b3:fb:dc:f5:27:
8f:95:35:6c:bf:e3:11:e5:8b:3e:6f:10:87:c1:0b:
39:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:96:1B:C9:DC:DD:6B:4B:27:EF:8B:0E:80:FF:AA:A6:EF:28:DD
X509v3 Authority Key Identifier:
keyid:6B:B3:AE:11:A3:A6:A5:EE:1E:32:EA:6C:CE:1F:10:DF:23:1E:AD:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7OuEaOmpe4eMupszh8Q3yMerYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/y26WG8nc3WtLJ--LDoD_qqbvKN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cc11e8-d51b-4679-9c6c-1ef197d6dc69/1/a7OuEaOmpe4eMupszh8Q3yMerYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:400::/40
Signature Algorithm: sha256WithRSAEncryption
40:3e:b8:2d:a6:fc:c6:2b:02:c5:2d:e0:d4:4b:7c:3e:38:c0:
f8:ec:e4:f7:96:15:d4:7a:d9:e1:9b:fa:0e:7c:f1:73:92:da:
a1:be:2d:19:22:6f:ea:a7:80:60:47:57:15:bc:7f:b9:1c:9c:
4d:63:52:8f:b4:09:32:c4:35:51:0f:b6:37:b3:b0:fe:e4:16:
a1:b1:88:38:4e:61:09:c5:a5:d2:6b:c4:9b:ff:3d:07:51:89:
64:ea:f0:80:54:ad:06:06:c9:ef:63:c5:39:e3:d4:e4:dd:5d:
5f:b8:be:1b:f0:43:6f:3c:6c:58:35:a7:94:b9:d0:98:be:5d:
2f:51:ff:22:69:74:96:5b:24:3e:7d:6e:96:d8:54:2b:c1:3f:
27:e2:34:ef:f7:34:7d:41:f5:f3:01:3c:e3:83:35:dc:e1:31:
3a:ad:51:2a:56:63:18:40:73:d3:20:4d:f7:cf:64:47:24:2b:
ae:2e:73:e9:e8:de:6a:d6:00:4e:4a:a8:45:53:cc:81:b3:23:
a9:de:06:75:5d:3e:64:55:b9:07:b4:45:37:dd:78:7d:c9:d0:
b2:7e:a8:4c:52:5e:7e:eb:0c:21:2b:7a:b8:22:73:0b:05:9d:
94:bd:60:bf:93:ad:42:8d:9f:57:b8:7e:dd:b5:56:0a:04:c6:
9c:de:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:10 2025 by rpki-client