Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/CsRSyfeBGTAiCccopAntGEvw0CA.roa
File: CsRSyfeBGTAiCccopAntGEvw0CA.roa (raw, json)
Hash identifier: snEqGk5f8GphQbHUYo158Qk/Tcf78yaYR6/ifAS2pqc=
Subject key identifier: 0A:C4:52:C9:F7:81:19:30:22:09:C7:28:A4:09:ED:18:4B:F0:D0:20
Certificate issuer: /CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Certificate serial: 01927D4BCAAF0A41BEDE33C1A548F5C495AD
Authority key identifier: F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/CsRSyfeBGTAiCccopAntGEvw0CA.roa
Signing time: Fri 11 Oct 2024 20:36:11 +0000
ROA not before: Fri 11 Oct 2024 20:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a0c:7b83::/32 maxlen: 32
2a0c:7b85::/32 maxlen: 32
2a0c:7b87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:4b:ca:af:0a:41:be:de:33:c1:a5:48:f5:c4:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6137c597d1e30cb75618e51f42b7f79ed5ffc88
Validity
Not Before: Oct 11 20:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ac452c9f78119302209c728a409ed184bf0d020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:2b:7c:bc:d1:3f:d6:5a:09:ed:fc:39:39:
7a:20:63:ba:5f:f3:3c:79:30:8e:88:7e:ed:34:79:
1b:3e:ea:42:89:13:cf:c9:b3:ae:9b:00:92:72:2b:
45:dd:21:77:74:46:fc:09:49:43:4c:7e:c6:10:a5:
76:da:ef:53:ca:90:3b:b0:9e:79:67:79:9f:e9:cf:
8f:d1:5a:6e:ba:e9:fc:db:b9:b1:ad:c6:34:2a:43:
03:80:7c:09:c6:73:db:59:a7:31:7a:36:cc:5f:8b:
0e:94:30:61:61:a5:9f:4b:ad:0c:5f:80:ea:ab:14:
d4:3a:d0:b1:72:47:4a:17:41:a7:46:88:58:58:6a:
49:ea:18:7b:17:0c:41:eb:cd:a4:a2:d0:63:25:64:
ad:01:74:b3:db:fc:e7:73:b2:f5:7d:ae:d2:d9:6a:
d6:4e:e3:ec:2d:4b:a2:45:d5:a0:08:3c:eb:fe:eb:
2a:bd:d4:1d:11:3f:06:ef:6f:e8:36:e9:7b:b4:05:
c8:63:59:4f:d3:fc:3a:a4:5f:90:9d:e2:02:76:f7:
91:91:ec:37:5c:95:86:13:1d:5c:60:55:09:88:f4:
7f:e8:0f:a8:70:72:24:3c:1f:e5:6e:94:0e:da:49:
f7:1b:d8:85:2e:86:f1:c0:b2:2d:1b:a9:31:82:69:
0b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:52:C9:F7:81:19:30:22:09:C7:28:A4:09:ED:18:4B:F0:D0:20
X509v3 Authority Key Identifier:
keyid:F6:13:7C:59:7D:1E:30:CB:75:61:8E:51:F4:2B:7F:79:ED:5F:FC:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/CsRSyfeBGTAiCccopAntGEvw0CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0f1f9f-5a51-4bd6-bf30-39a24388a5e8/1/9hN8WX0eMMt1YY5R9Ct_ee1f_Ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7b83::/32
2a0c:7b85::/32
2a0c:7b87::/32
Signature Algorithm: sha256WithRSAEncryption
0b:2d:ce:52:7c:c7:b1:6c:68:af:92:af:70:97:fa:a5:f1:7d:
70:65:9d:2c:df:6b:d8:48:d9:62:78:c0:c9:ad:02:02:2f:dd:
d1:1f:20:99:57:cf:a1:c2:b3:1b:68:83:d8:f1:90:41:7f:3e:
07:e4:de:2c:d8:18:3e:b5:d1:c2:c8:58:87:60:aa:c6:48:05:
3c:5f:66:da:9c:43:04:57:2e:ff:f7:d8:ff:f9:8b:af:8d:f8:
f5:8a:cd:c4:31:d1:34:d2:74:70:b3:e9:9c:dc:65:f5:2f:f1:
48:ec:9a:ad:1d:8d:35:25:a7:dd:7f:0f:0d:41:17:89:53:f3:
93:08:a1:b7:0d:b6:a5:a5:df:35:24:d8:81:a9:dc:0f:9f:fa:
06:09:a9:44:ec:c4:3a:7b:86:6f:d6:e5:68:9b:79:59:9a:69:
c1:0b:de:f8:31:93:67:89:22:ff:92:40:ef:c5:53:57:f6:5e:
05:0a:31:90:a1:1e:55:4a:dd:6c:bf:27:79:28:50:b5:0c:ba:
ce:b8:55:8b:86:55:68:f2:9b:a8:3f:d1:1f:5c:74:5f:10:c5:
e8:d0:3f:98:d7:e1:ed:ff:36:a5:c6:14:ca:df:34:f4:27:7e:
13:8c:49:6a:e6:1a:4a:54:9c:d4:d9:f4:b3:ec:e9:9f:45:d5:
ab:30:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:45 2025 by rpki-client