Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/Qkv2i0H_gAVt3Z4-eyNjlrDpkNI.roa
File: Qkv2i0H_gAVt3Z4-eyNjlrDpkNI.roa (raw, json)
Hash identifier: hBoAYvNDt8jj+dfQmfijkmMxw1l1fc8r3CEYb1yfB3o=
Subject key identifier: 42:4B:F6:8B:41:FF:80:05:6D:DD:9E:3E:7B:23:63:96:B0:E9:90:D2
Certificate issuer: /CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Certificate serial: 01856EAFA1C761870246AB0C62FD53B5C501
Authority key identifier: 94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/Qkv2i0H_gAVt3Z4-eyNjlrDpkNI.roa
Signing time: Sun 01 Jan 2023 18:54:42 +0000
ROA not before: Sun 01 Jan 2023 18:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39192
IP address blocks: 2a0f:5840::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:a1:c7:61:87:02:46:ab:0c:62:fd:53:b5:c5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Validity
Not Before: Jan 1 18:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=424bf68b41ff80056ddd9e3e7b236396b0e990d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e0:3e:98:88:6c:8b:55:ae:b7:31:88:be:2c:
5b:25:74:3f:cc:39:52:48:ee:8b:a8:19:bc:b7:4a:
61:5f:08:35:e9:88:80:1d:31:6c:e2:93:da:a9:78:
61:30:0a:74:42:e0:ae:8f:35:82:90:49:ec:75:e2:
6a:5d:a8:d8:15:96:ad:3f:db:de:46:c5:e5:76:4c:
f0:41:74:3f:5b:3b:f8:6c:e6:f3:e1:fd:01:3b:40:
6b:cb:1d:0c:4b:aa:56:55:fa:a8:f0:70:80:f1:de:
c3:6d:fb:7b:3d:b3:54:ea:55:b1:86:ad:3d:f7:b3:
d9:c4:33:75:46:4b:fb:bd:89:47:6a:01:32:64:6d:
a7:a7:87:31:47:75:44:fe:53:c5:16:da:f2:77:ba:
5e:53:0e:3d:7e:b4:95:6e:b0:cb:5b:35:0a:26:8c:
e2:16:76:44:0e:ed:00:43:56:a0:4c:52:97:40:3b:
1e:86:64:45:44:2c:a5:62:c3:02:e7:9a:38:72:fc:
89:cb:17:7c:e0:53:a6:70:0f:0d:96:f1:53:46:3f:
63:9f:99:b7:53:22:d9:07:ba:28:73:ae:c1:75:80:
ba:34:e6:4a:97:22:56:fb:49:45:f3:5d:2d:6f:25:
f4:a3:2c:8b:76:5c:94:34:ce:14:fd:6a:b2:75:ad:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:F6:8B:41:FF:80:05:6D:DD:9E:3E:7B:23:63:96:B0:E9:90:D2
X509v3 Authority Key Identifier:
keyid:94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/Qkv2i0H_gAVt3Z4-eyNjlrDpkNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5840::/44
Signature Algorithm: sha256WithRSAEncryption
7d:56:68:40:20:be:ed:5c:0e:8b:60:9a:28:9e:32:8b:35:cf:
79:dd:01:6b:2a:88:9e:14:7c:fe:75:0f:0d:0f:49:cc:3f:70:
5b:59:8b:a9:01:06:14:f1:41:06:47:6f:a6:f5:7e:d1:eb:61:
04:91:22:48:cd:e6:b1:b3:50:5f:aa:b5:bb:1a:50:66:37:57:
86:17:56:1d:a9:1b:77:ab:cc:0a:6e:9b:ba:17:31:38:38:37:
f2:20:0e:06:43:12:bc:fd:6b:0d:00:a6:00:d5:8a:ee:ee:f6:
96:b5:36:a6:d6:2e:ab:55:60:b7:85:a1:e8:18:a8:fa:05:29:
6a:e2:9c:eb:6d:65:09:aa:e8:48:72:8e:fe:a4:e9:b2:2b:87:
55:d7:5d:1e:a4:7e:26:78:4b:43:9f:1c:ec:ba:d5:00:9e:ad:
2a:aa:72:5e:83:51:66:81:d8:43:12:23:49:19:a3:05:32:04:
58:46:24:6c:1c:d3:09:ff:90:10:9a:ad:2e:fe:8e:dc:15:f7:
df:6b:d8:26:09:da:d3:1c:34:da:a3:83:d9:d7:a8:41:21:42:
dc:0b:ab:2d:aa:e5:0c:a4:0d:75:fd:11:2a:26:ca:fe:1e:f4:
03:d4:a4:dd:0d:17:8f:b1:b7:8a:26:fb:bd:2b:7c:9f:31:94:
e2:f0:18:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org