Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/8DuHm80r0j-l07U9AOFJEHxcXr4.roa
File: 8DuHm80r0j-l07U9AOFJEHxcXr4.roa (raw, json)
Hash identifier: nP9XjzOTdf8erJhsN29NIMlosMr7K4+XuusvYYpMKkQ=
Subject key identifier: F0:3B:87:9B:CD:2B:D2:3F:A5:D3:B5:3D:00:E1:49:10:7C:5C:5E:BE
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 018F061F0B4E382FF8ED2805F047F750A221
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/8DuHm80r0j-l07U9AOFJEHxcXr4.roa
Signing time: Mon 22 Apr 2024 14:04:08 +0000
ROA not before: Mon 22 Apr 2024 14:04:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a0c:7b83::/32 maxlen: 32
2a0c:7b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:1f:0b:4e:38:2f:f8:ed:28:05:f0:47:f7:50:a2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Apr 22 14:04:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f03b879bcd2bd23fa5d3b53d00e149107c5c5ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:a4:12:66:80:58:36:35:cd:dd:11:85:b1:
b9:d0:6b:f3:20:2e:28:be:24:7d:3a:ec:37:7d:03:
51:ea:a4:c6:c7:bd:bf:6b:e8:23:56:ce:76:df:89:
a3:42:e7:5f:fa:80:5b:49:c3:02:95:eb:1f:f1:d5:
69:52:1d:2d:4d:c8:be:50:cc:86:36:07:cd:98:83:
5b:d4:43:d3:7d:9f:9c:14:84:a2:4f:cf:fe:68:45:
d7:79:2a:5e:6a:4e:f5:95:df:b2:cc:58:22:f1:7a:
4c:8b:14:72:02:3a:c6:7f:38:ea:83:ba:8c:3e:e4:
da:6e:63:38:b1:c0:31:4c:73:04:2a:d4:2e:3b:e4:
43:4d:6a:46:3a:07:46:64:bd:64:9a:64:eb:94:99:
17:8f:f2:ac:19:f6:d4:72:95:a1:78:e8:9d:f8:87:
a3:c2:b5:e6:0e:4d:47:dd:e7:1b:4c:f0:e8:06:75:
e1:03:10:00:2d:e8:ad:03:dc:61:da:73:87:71:40:
dc:2f:45:c2:43:93:e9:f6:bc:cd:0f:c0:1c:85:8d:
14:0e:37:8b:2b:57:d5:f1:5c:81:ac:54:b3:49:09:
98:9b:a8:32:fa:42:8d:d2:f0:29:bf:8e:e4:84:63:
b6:32:0f:75:56:c9:d6:9a:49:8c:ef:38:d2:48:ce:
49:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3B:87:9B:CD:2B:D2:3F:A5:D3:B5:3D:00:E1:49:10:7C:5C:5E:BE
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/8DuHm80r0j-l07U9AOFJEHxcXr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b83::/32
2a0c:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
19:a9:86:05:47:50:c6:86:ac:e0:32:ce:cf:ce:d9:e0:55:43:
dd:33:17:c8:74:dd:2b:3c:a5:b3:77:70:43:5b:93:88:b4:e2:
24:e9:a9:38:0d:93:37:79:3d:13:af:e2:db:72:fd:23:79:96:
a4:d6:10:54:e1:a4:1a:70:d6:d4:bc:72:8e:e9:36:ed:34:7e:
6a:50:50:42:01:d8:f3:cc:2e:76:dd:9c:80:e7:93:0f:33:97:
4b:c9:a5:98:2f:56:87:63:c7:cd:ac:9d:6d:f8:38:84:78:10:
6e:b6:ec:1c:e4:8b:42:5d:2f:4c:a1:29:af:ee:14:b0:33:e1:
59:14:af:6c:b7:c2:bf:8a:03:79:bc:97:19:cb:8e:5b:a6:d3:
6d:53:b1:3b:6f:88:d7:93:3d:a4:d9:b5:7f:6e:32:4f:e8:88:
1a:d3:f9:9d:b3:46:09:04:c0:bc:db:2e:4b:20:e6:e9:76:4c:
1e:b9:d3:14:29:99:18:f2:28:98:46:3a:1a:f9:ca:de:74:2b:
be:5f:8c:f3:53:a8:da:9b:91:b2:b3:0e:b6:7f:3f:4e:c3:a5:
54:b8:47:cc:7d:84:9b:f8:88:f4:18:46:36:74:f0:7c:5d:a4:
79:aa:af:2c:a8:82:60:64:6c:d5:ef:56:7e:13:96:48:4d:5d:
d3:6d:4d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:09 2025 by rpki-client