Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/WGlu1QViauJx4jUPueADRapd6UU.roa
File: WGlu1QViauJx4jUPueADRapd6UU.roa (raw, json)
Hash identifier: UZuGNNsaXguvDBgG/AoMFedSWI4UJOldCU693anpTZc=
Subject key identifier: 58:69:6E:D5:05:62:6A:E2:71:E2:35:0F:B9:E0:03:45:AA:5D:E9:45
Certificate issuer: /CN=1db853b861973fc506e64714cca796d15ccace51
Certificate serial: 0185737A8AECC91406810591F1DFB58DB196
Authority key identifier: 1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/WGlu1QViauJx4jUPueADRapd6UU.roa
Signing time: Mon 02 Jan 2023 17:14:48 +0000
ROA not before: Mon 02 Jan 2023 17:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208646
IP address blocks: 2a0e:3bc0:2::/48 maxlen: 48
2a0e:3bc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:8a:ec:c9:14:06:81:05:91:f1:df:b5:8d:b1:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1db853b861973fc506e64714cca796d15ccace51
Validity
Not Before: Jan 2 17:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58696ed505626ae271e2350fb9e00345aa5de945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:89:ab:f4:af:c2:d3:5f:e4:44:00:aa:47:
1d:57:cc:17:90:99:e4:2b:98:ac:58:44:bf:4c:a4:
a6:b8:33:c4:b7:a2:f3:af:c8:3e:6a:25:67:2a:c9:
84:67:78:a6:5e:1b:a5:7d:75:05:55:f7:a8:12:a5:
ba:97:03:90:ea:fc:19:09:63:ee:1d:65:b3:72:ce:
23:d7:2a:05:97:92:e9:7b:36:af:12:ba:2e:04:49:
03:52:81:bd:36:47:e2:e2:e9:c6:1f:ba:a6:78:cc:
3d:71:81:2c:5e:98:69:78:cb:e2:64:69:b9:ba:a7:
4d:5d:da:a6:e7:11:07:2b:26:28:1c:62:7b:93:81:
aa:e7:61:03:ec:55:e0:76:bb:b6:9e:5e:d2:4a:78:
b4:d1:72:0a:48:3d:58:d7:0f:01:ce:d7:f5:72:61:
02:f6:ba:3b:da:44:55:55:dc:d7:34:69:ac:46:70:
ce:23:9a:36:43:e2:77:4b:fa:39:d4:51:45:09:05:
c8:28:b6:43:23:14:4a:6c:81:49:c3:ef:9c:dd:54:
49:74:7f:31:25:0c:d0:60:9d:3d:71:e2:af:8a:b0:
eb:30:32:6a:3b:3c:ae:df:b7:93:ee:04:d1:2b:24:
92:97:ba:38:32:32:b9:e8:de:ed:52:0e:c2:36:28:
fc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:69:6E:D5:05:62:6A:E2:71:E2:35:0F:B9:E0:03:45:AA:5D:E9:45
X509v3 Authority Key Identifier:
keyid:1D:B8:53:B8:61:97:3F:C5:06:E6:47:14:CC:A7:96:D1:5C:CA:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HbhTuGGXP8UG5kcUzKeW0VzKzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/WGlu1QViauJx4jUPueADRapd6UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c1b548-5344-4833-aec2-f2a3fb0e70d3/1/HbhTuGGXP8UG5kcUzKeW0VzKzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:3bc0::/29
Signature Algorithm: sha256WithRSAEncryption
82:49:fd:2a:92:3c:1f:03:0d:dd:90:fe:55:fc:c8:c1:fc:ae:
9b:3d:c6:9e:05:fa:d8:5b:ff:28:89:35:dd:b8:81:db:26:7b:
af:b7:8c:8e:a7:1f:a3:42:a9:e1:81:f0:8d:41:b8:ff:ec:14:
15:cf:30:e2:c9:b1:40:f7:29:f6:b3:3d:52:21:d5:f1:49:36:
eb:a1:c1:a4:3a:8f:9c:87:d5:8d:f7:11:f7:57:98:c7:27:cb:
d7:e5:3d:c1:0a:eb:e9:1a:0e:dc:21:b6:d6:ca:a7:8b:76:ca:
07:ef:a8:d3:2c:10:1d:b3:05:91:99:e7:f9:0c:47:4c:81:11:
14:ed:8b:fa:f3:03:f6:05:e8:1f:df:4a:39:6e:97:4e:d2:27:
8b:d8:6a:23:fa:48:d1:d4:72:d3:74:f6:42:37:4a:c9:7a:4c:
b4:30:25:80:89:f4:c9:e8:a8:74:16:63:0c:a0:e7:89:65:4d:
56:49:96:02:d2:8a:3b:94:45:65:99:8b:a1:ce:3e:21:e8:51:
95:82:d9:d3:ec:d6:a2:f2:7a:0a:d3:c2:74:65:71:b6:d0:f2:
6e:f6:63:1a:11:ca:54:30:5c:9c:ac:6a:1d:24:e0:ad:26:a6:
6d:07:5d:00:cc:04:ec:9f:a6:a2:eb:46:db:dd:5e:f0:63:8b:
f5:75:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:34 2024 by rpki-client on console-fra.rpki-client.org