Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/n6nQAfsViU29zLBTNEiPydxNn3Y.roa
File: n6nQAfsViU29zLBTNEiPydxNn3Y.roa (raw, json)
Hash identifier: /vt0hgnaz1WthyLkZm6RCB3jCmkMlIMuCMOq7klWhZk=
Subject key identifier: 9F:A9:D0:01:FB:15:89:4D:BD:CC:B0:53:34:48:8F:C9:DC:4D:9F:76
Certificate issuer: /CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Certificate serial: 06B31963
Authority key identifier: 94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/n6nQAfsViU29zLBTNEiPydxNn3Y.roa
Signing time: Sat 01 Jan 2022 13:55:45 +0000
ROA not before: Sat 01 Jan 2022 13:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39192
IP address blocks: 2a0f:5840::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112400739 (0x6b31963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9468e49bb9530adb0844c3860dd7ef5cd8e4a1f8
Validity
Not Before: Jan 1 13:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fa9d001fb15894dbdccb05334488fc9dc4d9f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:2f:49:0b:61:c5:fe:07:f0:49:ee:90:a4:
db:e6:16:2b:39:e4:32:17:be:d2:ba:e2:88:ff:ee:
6f:89:94:24:f9:bd:4c:1d:aa:8c:fe:16:a9:df:26:
5b:12:c0:7f:0e:ea:d9:a4:39:c3:6e:81:25:c6:bc:
f1:3c:a1:21:b8:a0:2e:5a:46:c3:ba:ef:3d:85:e1:
3b:9c:cd:3a:3e:12:7a:3e:30:b1:02:3e:f1:52:1c:
97:02:18:27:2f:4a:99:ad:85:95:4a:9b:17:f9:dd:
f1:45:58:d8:1d:6b:c5:aa:4f:3e:65:28:ac:04:bd:
a6:42:24:4f:20:74:aa:6e:26:f9:a5:29:0b:83:71:
5a:9a:49:da:05:7e:f9:a2:52:85:b4:94:60:c5:cb:
04:b9:59:46:45:bf:b4:45:2d:1c:22:a0:d5:bc:86:
e2:34:69:f5:90:75:c0:a5:88:d4:71:65:7f:af:f6:
bb:81:90:6f:bc:26:7d:b1:4b:0a:cf:61:21:d8:c3:
86:57:d2:f2:43:bd:14:71:ae:96:e9:a5:26:1a:50:
f3:df:cb:a5:35:cf:97:c6:fa:ca:b3:70:68:d4:c4:
8a:00:b4:61:6a:9c:f7:71:ad:6c:d8:2f:ea:08:20:
d8:52:13:b3:0f:41:9a:44:eb:64:3c:40:b3:a4:59:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:D0:01:FB:15:89:4D:BD:CC:B0:53:34:48:8F:C9:DC:4D:9F:76
X509v3 Authority Key Identifier:
keyid:94:68:E4:9B:B9:53:0A:DB:08:44:C3:86:0D:D7:EF:5C:D8:E4:A1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGjkm7lTCtsIRMOGDdfvXNjkofg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/n6nQAfsViU29zLBTNEiPydxNn3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/82b8a4-9a4a-43ff-aae9-654b5520ae63/1/lGjkm7lTCtsIRMOGDdfvXNjkofg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5840::/44
Signature Algorithm: sha256WithRSAEncryption
17:c1:56:51:02:f1:8a:fc:44:6c:09:dc:ef:db:74:1d:76:bb:
2a:b9:e8:b0:ae:27:ea:a9:91:4b:1f:6d:68:ad:5e:c9:38:f5:
ed:7d:18:7a:58:4c:ba:09:44:d1:18:59:18:21:66:9e:eb:9f:
ba:ad:bf:63:60:e1:8f:c5:d1:b8:c2:60:7b:f0:69:23:0d:0a:
ee:bd:d6:a9:ce:da:19:7c:54:d8:8c:66:f9:95:9a:80:53:ce:
bf:02:fc:21:d1:d2:a6:21:5f:ff:3a:c4:9a:2e:2a:5e:1a:93:
56:79:55:ef:09:29:d7:16:60:52:e6:0b:77:0e:49:70:67:de:
e4:06:58:57:f6:9b:ad:90:32:78:c5:0a:18:a3:3a:0a:0f:f5:
6c:de:23:2e:a8:1b:f5:db:a2:32:f0:38:02:72:7e:f0:b7:a3:
ae:03:af:da:d3:30:42:eb:9d:1b:60:89:42:2f:92:28:d1:77:
1a:e1:3f:bd:8a:5d:5c:76:25:69:0e:69:a3:a9:77:54:4f:17:
cd:7d:68:e8:8c:d8:f6:cc:81:d0:ef:09:22:e1:3a:5e:05:dd:
8f:20:0e:e5:d8:41:5b:75:dd:da:54:fe:e3:57:a9:25:33:d0:
56:89:a6:0d:e9:36:a6:3b:fe:ce:3c:8a:e8:ae:01:e3:20:ff:
0d:a6:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org