Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/IbnC_BQPVRcSpbox13MSpXRUuAs.roa
File: IbnC_BQPVRcSpbox13MSpXRUuAs.roa (raw, json)
Hash identifier: AzzOt26JViHd+VCF6hjkKjVKy2BF8dJz67pcBhI5xi4=
Subject key identifier: 21:B9:C2:FC:14:0F:55:17:12:A5:BA:31:D7:73:12:A5:74:54:B8:0B
Certificate issuer: /CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Certificate serial: 0193ACDCA98064DA79D5DB88EDABB1079D92
Authority key identifier: B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/IbnC_BQPVRcSpbox13MSpXRUuAs.roa
Signing time: Mon 09 Dec 2024 19:19:22 +0000
ROA not before: Mon 09 Dec 2024 19:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:8f80::/32 maxlen: 32
2a11:8f82::/32 maxlen: 32
2a11:8f84::/32 maxlen: 32
2a11:8f87::/32 maxlen: 32
2a11:f183::/32 maxlen: 32
2a11:f185::/32 maxlen: 32
2a11:fb44::/32 maxlen: 32
2a12:1803::/32 maxlen: 32
2a12:1805::/32 maxlen: 32
2a12:1cc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:dc:a9:80:64:da:79:d5:db:88:ed:ab:b1:07:9d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f619ef200840dfa8fd43567c7a978c15312d7f
Validity
Not Before: Dec 9 19:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21b9c2fc140f551712a5ba31d77312a57454b80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:5e:6a:a1:08:f3:06:c4:41:4a:4e:e2:d8:
d3:c3:b4:18:2f:c1:30:a0:d3:10:7a:37:72:a5:81:
18:50:6d:dc:3a:ad:0e:f6:87:65:3d:df:fc:30:40:
2b:ec:2f:15:ba:90:b3:bb:45:18:36:7c:da:66:74:
9c:ec:68:6b:e2:a8:27:6c:bf:a3:e4:c0:be:41:65:
5f:e2:5d:ee:ae:c2:1a:87:6f:48:7f:97:92:97:95:
37:24:23:0c:c5:dc:df:26:06:21:2b:4c:88:4b:45:
11:42:23:b6:c0:a0:3c:21:84:8b:77:b5:78:ae:da:
ad:49:4a:89:7d:31:cb:e3:6d:f1:6b:4b:e0:bc:26:
d8:ce:b2:a0:0f:8f:55:a3:ba:25:ad:e2:22:cd:d5:
b1:f2:da:c5:33:ca:12:58:25:ce:34:2b:3b:cf:6f:
aa:ef:5b:24:b7:6d:cf:3b:fe:02:b7:ec:e2:21:f6:
f7:0c:cb:87:ca:76:b4:7d:c4:43:a9:49:5e:2e:24:
e6:91:9d:b6:2e:61:6b:79:e4:e3:b7:6a:b9:67:0e:
27:46:40:68:b0:cb:4c:d3:a9:9e:f2:8d:1e:2e:ea:
2e:26:cf:fb:8b:92:6b:c8:60:b1:9d:42:90:c8:7f:
65:32:28:36:b2:b6:3b:3a:9a:bf:c3:5f:53:a0:43:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B9:C2:FC:14:0F:55:17:12:A5:BA:31:D7:73:12:A5:74:54:B8:0B
X509v3 Authority Key Identifier:
keyid:B0:F6:19:EF:20:08:40:DF:A8:FD:43:56:7C:7A:97:8C:15:31:2D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/IbnC_BQPVRcSpbox13MSpXRUuAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0e18d2-d80b-4aa0-aaef-069661675106/1/sPYZ7yAIQN-o_UNWfHqXjBUxLX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8f80::/32
2a11:8f82::/32
2a11:8f84::/32
2a11:8f87::/32
2a11:f183::/32
2a11:f185::/32
2a11:fb44::/32
2a12:1803::/32
2a12:1805::/32
2a12:1cc5::/32
Signature Algorithm: sha256WithRSAEncryption
11:97:9c:a1:72:16:10:cd:b0:ef:46:f2:fa:25:71:fa:98:6b:
f3:d4:4d:84:3b:fb:6c:8c:d7:70:d0:a6:17:cc:25:ff:d7:ac:
44:1a:54:75:c4:57:b6:6d:51:12:41:36:d5:14:06:dd:5e:9a:
fd:9d:a5:a7:76:4b:d2:bf:44:0a:b9:aa:1c:1a:ab:e3:e8:63:
0f:86:be:34:07:b6:2e:1f:ad:cb:80:b9:20:f7:2e:13:06:b6:
17:d0:58:42:77:0e:9a:6e:bd:6a:d4:e0:53:11:0f:36:3b:52:
c1:60:20:3a:e1:65:36:41:c5:76:5f:9e:4c:b1:b6:b6:0a:39:
2d:f9:7d:28:67:ac:d4:2e:94:d8:44:57:4c:a0:77:10:d8:13:
71:f2:88:b9:d6:2c:ba:7d:df:3f:ef:73:a7:88:78:b0:48:aa:
3d:89:cc:0b:d6:ca:8d:25:f0:27:f0:8b:e2:2d:7e:0c:ea:99:
0a:47:9b:2c:37:5b:18:e6:fc:00:af:97:46:a4:aa:f5:b7:9e:
90:9d:ed:53:8b:11:c1:e9:a3:ec:48:f2:12:3d:2e:77:e0:71:
47:1a:a8:6f:dd:51:11:55:da:a1:d2:c6:7b:79:25:19:83:f0:
cd:1d:91:d1:a0:9c:d6:56:ee:76:e7:c4:7f:d0:df:da:95:6d:
a9:62:c7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:06 2025 by rpki-client