Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/E1bML-BL3mpVN6NeCuBxmFW4VQY.roa
File: E1bML-BL3mpVN6NeCuBxmFW4VQY.roa (raw, json)
Hash identifier: w7XmMP1nxon/HdKYc6cyojc+/3kqhLL2eEveMkyOpKw=
Subject key identifier: 13:56:CC:2F:E0:4B:DE:6A:55:37:A3:5E:0A:E0:71:98:55:B8:55:06
Certificate issuer: /CN=0494b226492a3eebe8a637cf8923e7961f908cc5
Certificate serial: 018CC26D54E95F1E4BE4D2F0FBE82990B145
Authority key identifier: 04:94:B2:26:49:2A:3E:EB:E8:A6:37:CF:89:23:E7:96:1F:90:8C:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/E1bML-BL3mpVN6NeCuBxmFW4VQY.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216227
IP address blocks: 2001:67c:2640::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:54:e9:5f:1e:4b:e4:d2:f0:fb:e8:29:90:b1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0494b226492a3eebe8a637cf8923e7961f908cc5
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1356cc2fe04bde6a5537a35e0ae0719855b85506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:33:70:61:bf:94:39:7b:2a:18:4b:46:6f:
f0:62:82:00:a7:4c:df:d7:57:61:e9:d3:06:52:73:
81:ac:08:19:33:ec:0c:78:7a:42:0f:80:6c:5b:dc:
af:c0:8d:7f:f1:61:e4:3d:df:6a:1b:50:5b:fb:23:
56:78:9a:76:c0:f8:eb:c0:58:c0:e7:11:b0:b5:c4:
d8:77:1d:cb:b4:10:c9:b1:82:46:61:f3:3b:53:ec:
0e:32:3e:0f:0d:2b:26:ec:60:b4:70:07:7b:68:93:
7f:c5:03:60:9e:1d:8a:b8:68:cf:93:ba:4b:af:6b:
d4:1f:38:1c:d0:a8:16:d6:14:01:a0:84:d4:86:2f:
0c:2a:6e:7c:58:77:8c:1a:96:d1:45:53:24:00:e2:
2f:d4:78:14:a6:fb:1b:96:1f:2a:09:76:51:50:60:
4a:09:5c:c8:d7:1a:42:4c:fe:84:00:e2:46:56:ac:
36:f6:c2:c3:f6:8b:ab:f0:6f:c8:52:68:db:bc:36:
c6:d4:fa:53:01:a9:7e:7d:55:1d:26:f8:0b:c0:3b:
65:ff:59:3e:84:19:96:ef:bd:51:72:0a:36:55:fd:
db:57:73:4a:87:e5:8e:b3:e4:8d:56:45:5b:b7:0c:
83:b2:6b:19:a6:ee:e6:c5:d1:80:c1:9d:b4:f1:1d:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:56:CC:2F:E0:4B:DE:6A:55:37:A3:5E:0A:E0:71:98:55:B8:55:06
X509v3 Authority Key Identifier:
keyid:04:94:B2:26:49:2A:3E:EB:E8:A6:37:CF:89:23:E7:96:1F:90:8C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJSyJkkqPuvopjfPiSPnlh-QjMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/E1bML-BL3mpVN6NeCuBxmFW4VQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/eba919-6ce2-49d6-ae57-4d2b098a7b8b/1/BJSyJkkqPuvopjfPiSPnlh-QjMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2640::/48
Signature Algorithm: sha256WithRSAEncryption
0b:25:3e:52:0f:30:05:4f:d4:4a:1c:c1:6f:9f:6f:44:78:e5:
6c:85:9d:95:16:f4:f6:99:ef:d3:3b:bd:94:bf:bc:05:50:12:
58:fa:e7:35:a1:2c:6e:2e:16:df:36:dd:c8:bc:9f:f2:70:68:
02:0a:4a:03:c8:ba:9c:82:cd:20:3f:7b:21:d2:3b:d6:61:0a:
08:03:b4:12:96:bf:de:ee:a7:b3:cc:fb:04:d3:3f:e7:49:54:
c3:3e:90:1b:be:ff:82:30:2c:67:93:a1:46:e5:e4:99:4e:ef:
1a:90:53:6c:f5:a9:6f:9e:2d:21:55:d0:9e:b3:d3:51:b4:94:
68:90:d5:23:e3:5e:0e:a7:9e:23:29:c1:79:cf:dd:9c:1b:5b:
a0:62:cb:ef:d8:5e:99:e3:4c:34:f4:fa:41:5d:27:8c:64:aa:
3d:4c:e9:94:17:07:2f:75:b9:d3:cb:82:8e:11:d1:2a:91:c6:
ab:86:23:60:42:2c:8f:d5:43:ee:71:72:3f:a2:ba:49:a1:3d:
93:52:28:10:05:0b:c2:e5:89:14:19:8c:8d:ca:4a:16:a1:87:
25:24:8d:72:57:ef:b9:8b:6b:cc:93:e4:ee:e2:d9:bd:57:ee:
40:f0:8e:71:68:9f:55:e3:a4:b0:8f:2d:23:c2:f1:47:c0:43:
57:02:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 18:29:14 2024 by rpki-client on console-fra.rpki-client.org