Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/1-IPmTJBGz3mB0a2QNq1g5D5mGaI.roa
File: 1-IPmTJBGz3mB0a2QNq1g5D5mGaI.roa (raw, json)
Hash identifier: V5UWP271NZ/AuSoLQId7DYoA4tV+uzP21Zog0bJZAZY=
Subject key identifier: F8:83:E6:4C:90:46:CF:79:81:D1:AD:90:36:AD:60:E4:3E:66:19:A2
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF9460A4EB53CE9D70DB2BF1CCD359E
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/1-IPmTJBGz3mB0a2QNq1g5D5mGaI.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204693
IP address blocks: 2a06:5ec0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:46:0a:4e:b5:3c:e9:d7:0d:b2:bf:1c:cd:35:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f883e64c9046cf7981d1ad9036ad60e43e6619a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:29:f0:7f:62:10:16:02:05:2b:f9:fa:68:
97:24:f6:c2:30:16:cb:3f:03:47:52:07:ee:b0:02:
5f:c6:77:25:8f:01:e0:0d:40:6a:02:06:ff:5f:75:
1c:af:18:b2:4f:6c:49:20:b0:2f:a6:67:ba:30:9b:
d9:cf:43:60:f2:77:b8:34:58:2c:59:73:08:82:1c:
ba:3d:b4:a3:df:8d:21:7e:3c:2a:51:62:81:20:18:
d3:78:49:b3:3b:e0:c8:6a:e1:9c:e5:26:f4:a9:e9:
8a:59:ed:9d:95:e0:c2:6f:5e:8a:c7:48:12:4a:2a:
32:06:1f:dd:db:1b:8a:ce:4e:76:a0:2c:7f:60:a3:
6c:7f:51:00:44:89:2c:5f:35:f6:5c:25:a3:35:74:
86:49:de:ab:62:5d:31:ac:6e:51:3c:59:c1:77:44:
b3:a6:65:c5:d0:15:2b:5a:ea:b4:f6:7a:a3:b3:d3:
42:44:a3:6b:80:5b:46:0e:87:1d:86:5b:02:60:53:
db:16:15:d8:1a:77:6f:a4:69:bf:82:4d:10:83:f6:
d1:32:e4:37:46:ba:d3:4a:40:7f:c7:db:f4:4e:07:
3c:93:ce:55:5c:36:1d:b3:7a:a3:59:23:f1:48:9b:
0d:78:91:2e:6f:1f:7f:cd:56:3e:dc:91:1c:70:49:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:83:E6:4C:90:46:CF:79:81:D1:AD:90:36:AD:60:E4:3E:66:19:A2
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/1-IPmTJBGz3mB0a2QNq1g5D5mGaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:61:64:0f:57:91:f0:d0:e4:ea:4d:42:5c:16:64:64:16:8a:
08:08:b0:31:4b:d4:2a:0a:d9:a7:61:51:53:01:33:a7:f1:c5:
bf:60:3e:c0:54:a9:57:ff:df:0d:a5:34:13:00:5d:ee:b5:33:
36:8c:35:d3:f2:c2:86:49:bf:93:6d:fe:be:b8:e4:d8:c6:84:
f3:77:01:d9:9f:e5:dd:b9:6b:d4:49:56:60:9f:e3:fa:6c:9b:
ad:90:a8:cf:76:07:52:74:79:6a:7a:3e:d0:f7:b6:0c:f1:74:
b9:53:11:a0:49:00:e3:7a:24:8e:e5:ed:6d:5f:0c:6b:0f:a6:
e2:36:9b:d7:bc:c5:ed:5a:f2:17:fc:70:72:05:d3:02:9b:61:
3f:0e:19:0a:f6:6b:2c:9b:34:83:fc:40:d6:f3:74:0a:91:f6:
8a:07:4c:33:97:ab:0a:00:d4:03:ad:63:3a:a1:13:07:fc:49:
93:6d:9d:d5:7f:3a:6b:c8:bf:5f:3e:3c:2a:b3:08:59:87:d5:
16:59:75:1c:22:bd:d5:60:f4:53:c8:88:4e:0c:08:e9:13:af:
a6:90:e9:6d:c7:3e:5b:78:16:2e:1d:c2:42:ee:c1:23:14:4b:
68:4c:e2:75:1d:4d:b5:1e:c8:be:aa:0f:f6:fa:9e:7d:6c:b5:
37:21:50:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:20 2024 by rpki-client on console-fra.rpki-client.org