Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Q1XbADcm4A9uXpZsqBtz8aqpclw.roa
File: Q1XbADcm4A9uXpZsqBtz8aqpclw.roa (raw, json)
Hash identifier: Mzoy8E5cMdmzrrBCkdxj4GAW2BGRgSt0SxRG0Cc8pb0=
Subject key identifier: 43:55:DB:00:37:26:E0:0F:6E:5E:96:6C:A8:1B:73:F1:AA:A9:72:5C
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F5AA59
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Q1XbADcm4A9uXpZsqBtz8aqpclw.roa
Signing time: Sat 01 Jan 2022 13:00:29 +0000
ROA not before: Sat 01 Jan 2022 13:00:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210675
IP address blocks: 2a00:7180:8014::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670411353 (0x27f5aa59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4355db003726e00f6e5e966ca81b73f1aaa9725c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:92:11:a5:02:17:b1:a4:9a:e8:6e:1e:25:
b3:10:f8:51:67:51:b6:38:6c:49:1a:73:96:7d:61:
04:15:f9:bb:c3:88:80:6a:b8:8b:a3:22:ed:3c:cd:
d9:1b:ba:49:cf:1b:59:47:99:e3:85:cd:25:01:70:
12:a4:a7:b0:0e:45:8f:3d:68:13:f0:3d:25:92:be:
a6:ed:41:07:fc:11:e2:55:3f:70:a7:0b:3a:c9:4a:
e3:cf:2a:b9:80:e8:94:45:c0:98:b3:d2:3c:5e:d0:
cc:36:87:51:9b:a7:69:d6:ba:e6:ed:3c:35:d6:95:
81:db:7c:1e:15:70:3d:6e:e7:9b:56:32:3a:ed:ea:
54:11:b4:c4:0d:d8:3e:0e:8f:f4:1d:ed:2e:37:85:
a1:d7:8d:a2:60:4c:c1:51:0e:f0:db:66:a7:fc:b7:
5b:0e:0d:2b:32:b9:55:19:48:b7:6b:b5:8a:f7:dd:
58:22:05:28:51:7f:39:f7:01:50:42:c9:1b:9f:ab:
5c:6d:e7:87:6a:b3:4f:e2:a3:00:3a:f7:a7:f9:a8:
e3:b9:dc:e6:18:e2:1f:b7:2c:9e:d4:a9:6d:a1:dc:
76:c7:f5:ae:8e:2c:55:7f:f8:aa:c9:54:83:82:85:
22:32:ac:d9:28:23:77:97:1a:2a:f6:34:bb:58:1a:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:55:DB:00:37:26:E0:0F:6E:5E:96:6C:A8:1B:73:F1:AA:A9:72:5C
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/Q1XbADcm4A9uXpZsqBtz8aqpclw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8014::/46
Signature Algorithm: sha256WithRSAEncryption
72:8a:ab:02:21:a6:6c:cb:f8:b5:03:7d:55:2c:06:d8:90:69:
66:c7:3b:d7:69:9d:e0:28:58:b8:f0:a8:61:1a:d7:cf:12:08:
a7:52:4c:a9:2e:92:8c:c8:91:ac:ca:64:f9:85:ea:76:5e:42:
09:3b:bc:01:e4:a0:c6:62:f7:49:db:56:1b:44:99:73:34:d8:
ab:51:99:df:b5:f6:07:68:28:17:03:da:3f:9d:9a:21:61:72:
d2:03:4b:4a:5a:ed:90:d3:b6:f7:d5:a1:fb:91:2a:0e:07:b5:
81:6a:87:14:62:df:dd:66:33:b1:34:51:31:6c:83:7f:a4:f1:
93:14:0c:34:69:84:38:06:42:a8:d6:c6:aa:92:ed:c3:cc:f3:
32:19:e8:e2:f0:9e:4f:f2:74:b7:bd:0e:70:6b:12:19:c2:61:
f1:8a:de:b8:80:7b:4c:1d:73:68:e9:df:ff:9e:29:b3:e2:1d:
24:ed:1f:b1:84:5b:92:18:5f:3a:c7:af:91:c5:32:84:ec:e0:
c9:83:75:76:ba:6d:9a:23:eb:ec:d3:8c:82:f2:02:e7:75:dc:
57:2d:f3:f5:78:ed:d7:f9:70:b2:d0:1c:79:c8:96:05:3c:a7:
d1:57:ed:df:ef:b7:c9:b4:9a:08:ac:1f:47:84:62:fc:f2:2f:
e4:d7:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:33 2024 by rpki-client on console-fra.rpki-client.org