Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bG1sWj8jNxC8zpfDkSWKfbH5vkA.roa
File: bG1sWj8jNxC8zpfDkSWKfbH5vkA.roa (raw, json)
Hash identifier: TVjvEhROFNTqGq2/QR/MDRR3p6PJr5QDPJffFGWcXRk=
Subject key identifier: 6C:6D:6C:5A:3F:23:37:10:BC:CE:97:C3:91:25:8A:7D:B1:F9:BE:40
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01916C8C58F50582C9A06A6945DB5F08829E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bG1sWj8jNxC8zpfDkSWKfbH5vkA.roa
Signing time: Mon 19 Aug 2024 21:30:22 +0000
ROA not before: Mon 19 Aug 2024 21:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0d:8b40::/29 maxlen: 29
2a11:26c0::/29 maxlen: 29
2a11:2b40::/29 maxlen: 29
2a11:3580::/29 maxlen: 29
2a11:4080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:8c:58:f5:05:82:c9:a0:6a:69:45:db:5f:08:82:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 19 21:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c6d6c5a3f233710bcce97c391258a7db1f9be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:21:ec:d5:9e:bf:6b:3f:72:42:68:43:df:
3a:f6:94:8b:80:17:96:9a:63:9f:5b:e5:f6:33:bb:
b6:64:7a:da:38:54:36:bb:8a:78:5f:3a:2c:95:34:
29:e4:09:7b:da:63:9e:07:0e:83:86:88:0f:7f:e3:
58:ba:2f:46:24:aa:04:75:01:66:fa:7e:4a:ae:1a:
a6:8a:56:74:cb:ed:6e:4a:63:e1:2f:38:bb:5c:4f:
30:30:4e:6d:06:9f:71:95:e6:69:23:41:10:75:19:
03:5a:69:d4:33:57:84:8a:78:42:d4:ba:0a:6d:d7:
15:47:d5:9c:e6:36:fd:92:a5:be:71:95:02:ff:5e:
5c:c5:1d:7d:c3:02:d0:ed:2b:8f:37:8c:37:69:b0:
e0:82:3b:b1:de:fa:68:de:70:1c:8b:dc:7f:42:c3:
c9:5f:a7:c8:88:8f:54:58:ce:47:a7:71:e8:44:26:
9b:94:1d:39:ce:d1:1c:17:63:b4:c4:dd:c5:83:35:
da:c7:27:b4:e7:fc:fc:c6:3f:32:c4:04:fa:24:83:
a9:09:f2:82:ee:af:da:a4:9c:f5:ab:61:19:fc:3b:
7b:40:bb:7b:34:f2:0e:f7:fc:22:f2:1e:06:f4:61:
47:8d:74:2f:ba:59:27:e8:c2:25:a4:0d:55:64:03:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6D:6C:5A:3F:23:37:10:BC:CE:97:C3:91:25:8A:7D:B1:F9:BE:40
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bG1sWj8jNxC8zpfDkSWKfbH5vkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8b40::/29
2a11:26c0::/29
2a11:2b40::/29
2a11:3580::/29
2a11:4080::/29
Signature Algorithm: sha256WithRSAEncryption
46:fa:0b:e8:e6:c4:9a:34:ef:3b:d3:02:8e:e9:c6:78:e9:5c:
5e:f6:26:bf:11:d0:5b:37:b6:38:a7:24:a8:b2:4e:ba:c7:31:
8c:54:f6:75:74:1b:bf:56:48:44:58:3c:78:1d:34:45:bd:da:
1d:80:d2:1d:06:48:9a:27:1f:5e:8d:67:ad:98:08:27:b0:dc:
3d:50:75:9d:b9:51:8e:f0:f3:a9:38:19:f6:2a:56:19:8b:fc:
b2:f2:05:0d:9e:e7:72:7f:bb:f0:ba:e8:8a:37:48:22:80:fb:
35:6c:d5:f4:15:f1:0d:c6:08:26:8b:22:3e:f5:66:92:39:a1:
df:29:d9:dd:92:f0:fd:da:85:56:a5:6f:6f:e2:9e:01:be:2d:
b1:13:bc:f5:7c:11:2e:36:4a:22:e2:a9:cd:c7:05:72:45:2d:
35:43:fe:e8:d1:5e:85:dd:53:fc:dc:17:31:77:08:fb:76:47:
a3:06:87:34:2e:a4:a9:84:9c:9e:30:68:bb:56:61:cb:94:8a:
d9:2f:2f:e8:f5:e3:c7:15:b8:3d:34:4b:4b:32:ec:3e:95:35:
2e:33:b2:1e:ec:16:12:53:d5:af:d6:a5:e4:2d:c9:a0:58:8c:
4b:a3:35:7d:48:70:d0:d9:13:40:60:76:fe:36:19:e9:ef:55:
29:6c:96:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:22 2025 by rpki-client