Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/bLfzMU4O58u_fh4qdOOcmCa_twk.roa
File: bLfzMU4O58u_fh4qdOOcmCa_twk.roa (raw, json)
Hash identifier: 4JQJ6W53uaAxRJSScs5ekf/KDzjvGP3LJedJ1s494+Q=
Subject key identifier: 6C:B7:F3:31:4E:0E:E7:CB:BF:7E:1E:2A:74:E3:9C:98:26:BF:B7:09
Certificate issuer: /CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Certificate serial: 018CC6B9383012B311747BF39553692A2C5F
Authority key identifier: 4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/bLfzMU4O58u_fh4qdOOcmCa_twk.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210820
IP address blocks: 2a13:ef80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:38:30:12:b3:11:74:7b:f3:95:53:69:2a:2c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f51f8c5d5086854b6cbffac01a2647068421e81
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb7f3314e0ee7cbbf7e1e2a74e39c9826bfb709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:06:bb:ee:bd:3b:83:2f:78:40:86:3a:e0:
80:04:ec:f6:30:a6:56:f4:ad:5f:4f:88:b6:fb:a3:
cf:c0:e8:27:fe:6e:06:78:0c:b6:df:16:ba:e1:c8:
f0:a1:90:bb:d7:ba:73:e9:e9:96:b3:a2:a3:1e:1f:
64:a5:29:4a:14:57:b2:25:69:83:86:a1:f6:b1:95:
44:ab:9a:75:18:77:a0:89:d7:27:1e:a4:b5:06:42:
0e:a2:20:2e:3c:dc:af:c9:52:21:54:4f:68:ea:4b:
b0:9b:b3:44:0a:ca:8a:9c:40:29:e9:8d:b2:f8:03:
3e:e7:17:e7:e3:ac:79:19:f1:c4:20:24:bf:cd:d8:
32:38:27:89:e7:5c:83:3c:e9:c9:04:4f:00:b6:d3:
6c:fa:5c:f1:dd:21:b2:8d:17:eb:01:df:71:5f:d9:
bf:1a:fc:99:8d:d8:57:e9:ec:1a:da:3f:2a:cf:ae:
7b:d5:48:87:02:8e:d9:2d:04:4b:e7:05:77:4c:d6:
55:87:4a:7a:5e:39:ab:da:8c:07:bb:e1:dc:24:2c:
4d:08:d7:00:46:5d:5a:c4:27:94:5a:78:5f:61:f3:
62:67:4c:71:60:12:cc:3b:ac:eb:cf:42:82:b7:db:
d3:35:e0:3c:e5:c1:37:8b:b6:9a:66:f9:b5:d7:39:
2e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:F3:31:4E:0E:E7:CB:BF:7E:1E:2A:74:E3:9C:98:26:BF:B7:09
X509v3 Authority Key Identifier:
keyid:4F:51:F8:C5:D5:08:68:54:B6:CB:FF:AC:01:A2:64:70:68:42:1E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1H4xdUIaFS2y_-sAaJkcGhCHoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/bLfzMU4O58u_fh4qdOOcmCa_twk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a7ec79-fb90-4e99-b9be-95f6dda1a01f/1/T1H4xdUIaFS2y_-sAaJkcGhCHoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ef80::/48
Signature Algorithm: sha256WithRSAEncryption
35:96:b1:29:43:0f:33:8d:0c:c6:93:99:24:19:ca:64:49:e3:
a1:04:13:41:c2:ed:f5:e5:a7:4e:a4:07:8d:c8:48:93:88:6a:
9b:42:f5:ba:00:74:01:5a:1f:7c:66:b3:d2:f7:e2:d2:24:94:
2c:4c:12:e1:ce:a1:2f:0a:07:d5:28:0d:73:8b:1e:81:99:33:
bb:96:6b:73:de:07:27:23:0a:67:3d:0d:21:bf:c4:c5:d6:a6:
04:30:90:d4:a4:dc:58:7f:49:27:82:22:db:de:9a:c3:d4:1d:
71:49:31:81:ba:f8:ec:9f:de:9a:5e:4e:cf:ec:be:13:67:e3:
37:a0:e2:60:01:d9:5e:32:85:02:a5:fb:2f:2a:15:85:aa:02:
31:cd:e8:70:50:df:fe:ab:2c:2f:cd:31:7d:8e:ce:68:51:5b:
a7:d2:df:7b:79:e5:68:bd:75:2b:b6:50:da:3a:ab:e5:88:f4:
ca:d1:8e:d0:88:80:84:ba:08:8c:12:d5:97:d6:97:ad:7d:8d:
50:ea:bc:3a:05:95:a1:d8:9b:98:f3:71:b9:52:fe:f0:7b:fc:
a3:f6:e5:1c:6a:4c:7a:81:d3:1d:89:04:dc:6e:00:7d:3f:85:
8c:d7:44:e2:01:2b:27:26:fc:98:9f:dc:ac:f1:c5:e5:88:ed:
8d:3b:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:50 2024 by rpki-client on console-fra.rpki-client.org