Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/DkV8Zbj3UqtTeygQIl6Mm_h1JCo.roa
File: DkV8Zbj3UqtTeygQIl6Mm_h1JCo.roa (raw, json)
Hash identifier: rgVEM8f4iit+QJ5VqUqtHt5J2TyCfDntIyhKia/s+58=
Subject key identifier: 0E:45:7C:65:B8:F7:52:AB:53:7B:28:10:22:5E:8C:9B:F8:75:24:2A
Certificate issuer: /CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Certificate serial: 01857315C1EE1BE47E20944A9603C6FFA3A1
Authority key identifier: E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/DkV8Zbj3UqtTeygQIl6Mm_h1JCo.roa
Signing time: Mon 02 Jan 2023 15:24:43 +0000
ROA not before: Mon 02 Jan 2023 15:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24641
IP address blocks: 2a02:6c20:819::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:c1:ee:1b:e4:7e:20:94:4a:96:03:c6:ff:a3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3daa57a1853db3fb943b9fb0b28819db370b271
Validity
Not Before: Jan 2 15:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e457c65b8f752ab537b2810225e8c9bf875242a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:fa:1b:87:da:cc:61:5c:23:d5:ba:97:d9:
f0:bc:36:86:da:c4:db:6a:5f:0c:83:cf:95:c9:0f:
7b:e2:b8:07:bc:2f:b3:f9:b7:23:de:ba:aa:20:f9:
c5:10:38:2f:1b:f0:05:8f:1b:cf:c5:5e:ff:dd:45:
ab:06:58:3f:8f:1a:23:b1:ce:13:5c:52:db:a9:e3:
54:cc:72:26:99:28:a6:bd:4b:eb:93:3f:b7:34:bb:
63:42:06:ba:c6:2f:15:00:9d:fd:3b:76:3f:45:4e:
45:28:78:db:15:7e:d3:59:cb:43:6b:c1:10:68:fa:
35:6a:82:19:d0:16:be:73:4b:77:51:f9:9c:eb:f3:
a3:96:a5:61:14:73:d9:a1:c3:37:4b:89:43:85:ec:
de:34:85:c8:8a:9f:7a:f4:aa:06:32:23:26:6a:81:
1a:2b:4a:aa:ce:53:c0:09:71:ad:50:e1:d7:24:d1:
9c:fd:f2:32:59:31:95:44:38:d4:e1:bb:94:0f:d7:
db:34:b3:9d:97:a8:47:0a:b4:af:99:21:31:66:fc:
dc:d2:73:70:fc:92:37:ce:d2:f4:70:37:30:d7:19:
d0:ea:b5:24:6d:cc:31:36:fb:ab:0e:64:73:e9:58:
78:33:d2:d1:2c:dc:a2:cd:6d:de:b1:20:81:f5:ce:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:7C:65:B8:F7:52:AB:53:7B:28:10:22:5E:8C:9B:F8:75:24:2A
X509v3 Authority Key Identifier:
keyid:E3:DA:A5:7A:18:53:DB:3F:B9:43:B9:FB:0B:28:81:9D:B3:70:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49qlehhT2z-5Q7n7CyiBnbNwsnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/DkV8Zbj3UqtTeygQIl6Mm_h1JCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d73843-21f4-4d36-9143-1fc7337d462e/1/49qlehhT2z-5Q7n7CyiBnbNwsnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:6c20:819::/48
Signature Algorithm: sha256WithRSAEncryption
b4:dd:9e:d8:c8:f6:3a:dc:e3:db:5f:3f:44:d1:cf:f0:cf:bd:
d1:d2:a6:5d:25:2d:e9:98:d1:39:1e:2d:08:bb:80:8d:5d:8f:
58:b8:90:27:2b:10:c1:95:84:b6:ec:45:00:05:8e:a9:5f:9b:
da:56:58:04:dc:c1:41:fe:6d:e6:33:b4:fe:95:a7:ec:46:6b:
ea:00:43:3c:0d:c1:31:87:2a:22:50:c3:ec:2a:d7:ae:45:3e:
5c:53:c3:f2:21:69:b7:a8:95:bf:61:bb:81:f2:7f:73:51:68:
8f:9f:c4:38:33:13:42:6a:85:1b:8f:61:c6:20:5a:eb:72:b4:
89:2a:3f:3d:60:74:72:06:3e:ee:22:ed:6a:c8:96:8b:5f:0a:
a2:b5:0b:4c:91:06:a6:95:bd:89:b5:09:46:cb:ea:d2:4e:cd:
f0:c5:9f:4d:02:99:8a:93:f1:3c:f1:b0:0c:1a:5e:1b:12:5b:
93:84:af:85:99:fc:2e:d3:97:2a:77:83:fe:1b:74:1b:37:a3:
bf:e1:27:81:72:fd:66:ce:86:4b:06:cb:af:ac:46:51:6d:45:
69:47:94:00:cd:32:df:7a:2a:70:12:9e:3d:94:db:59:c0:24:
9f:9a:d6:0e:a4:5e:81:3f:23:f7:43:ca:f0:d3:11:fa:fb:ad:
58:9a:6d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:02 2024 by rpki-client on console-fra.rpki-client.org