Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/A4A5vjY2q2aICS1rifwgizZm7qc.roa
File: A4A5vjY2q2aICS1rifwgizZm7qc.roa (raw, json)
Hash identifier: 80IR+ynriwJOLTUzfhlUI0kg6vvuK2253CIxo2xRSEY=
Subject key identifier: 03:80:39:BE:36:36:AB:66:88:09:2D:6B:89:FC:20:8B:36:66:EE:A7
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 018B5D51AED802A4ECF3C15FE695A9E385C9
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/A4A5vjY2q2aICS1rifwgizZm7qc.roa
Signing time: Mon 23 Oct 2023 16:15:16 +0000
ROA not before: Mon 23 Oct 2023 16:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:a4c0::/32 maxlen: 32
2a0b:a4c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:51:ae:d8:02:a4:ec:f3:c1:5f:e6:95:a9:e3:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Oct 23 16:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=038039be3636ab6688092d6b89fc208b3666eea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:df:04:7b:54:36:4f:a3:25:87:8f:9b:90:af:
ff:ae:de:43:5a:62:2b:4c:45:a8:e5:c4:f8:1d:04:
6a:23:eb:58:fe:36:2c:93:d9:83:a1:f7:4f:4f:8b:
1b:40:be:39:85:44:da:db:2a:01:af:98:a8:a7:e0:
9c:c4:54:68:15:21:fd:f8:ee:3c:90:c1:0f:fc:21:
c9:77:e0:13:85:0d:4c:46:68:35:a9:49:06:b8:c4:
be:dd:ea:74:f1:f3:1f:be:dc:3d:d0:78:f9:ea:60:
a2:4b:2c:27:f7:66:78:af:a0:55:6e:f4:f1:60:92:
de:27:0f:93:34:51:6b:58:c2:00:e9:70:94:7e:fd:
11:eb:90:24:72:ab:33:c7:33:ee:8f:0c:be:4b:cc:
e0:eb:f9:31:9c:3a:26:84:c4:1c:a3:20:cd:cc:13:
0b:06:bd:75:a5:6c:7b:02:9e:e0:5f:95:4f:0b:4d:
0a:a1:45:4f:a0:ca:b8:fc:4e:c1:d8:fd:a8:0a:12:
05:c6:13:cb:0f:a6:ce:7c:13:48:07:e6:9f:50:2e:
03:ec:18:38:95:49:ac:97:e1:e8:ea:c4:13:a9:45:
5d:31:69:fc:6d:a5:53:82:54:ab:48:5a:e6:f3:7c:
cf:2c:a7:86:5f:84:cf:4f:c8:56:db:8b:be:c3:66:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:80:39:BE:36:36:AB:66:88:09:2D:6B:89:FC:20:8B:36:66:EE:A7
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/A4A5vjY2q2aICS1rifwgizZm7qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a4c0::/31
Signature Algorithm: sha256WithRSAEncryption
69:07:c9:aa:34:94:90:1e:cd:8c:74:66:aa:36:41:24:2f:0e:
44:8b:8e:64:f7:e5:26:ad:56:97:9b:cf:f9:44:4b:d2:13:ab:
31:87:49:2c:af:dd:17:0c:07:9a:56:bd:5a:63:21:ff:28:58:
bc:66:e1:e3:d2:f7:b9:57:f2:7a:1c:82:1b:26:5f:df:75:44:
0f:b0:9a:33:a4:d5:23:35:6f:e9:f2:12:2a:16:a4:51:cb:e6:
e6:a3:5d:7f:f4:0f:ac:62:7a:31:7b:46:e7:cb:91:42:e4:d9:
f3:eb:c4:85:8c:48:a0:44:9a:b4:07:72:04:6c:bf:c7:4a:34:
a6:f5:a4:90:b2:f4:53:75:92:3b:81:06:0e:15:7c:34:79:8f:
46:84:03:c7:3b:bc:d5:1f:d6:f4:0b:51:9f:85:d4:de:ac:f1:
d4:05:55:1d:f0:a9:a8:c4:87:c2:09:9e:72:48:4b:b9:51:09:
c4:f4:e0:c6:31:a4:2a:11:e4:15:7b:6e:57:c5:54:c2:2c:74:
c2:c5:9d:6c:b6:ec:72:b7:8b:c2:a3:e9:1f:5d:26:aa:fd:99:
96:b0:ed:a9:75:57:ad:bd:2c:a3:8a:6a:9c:fc:d5:ec:13:31:
f6:9c:7f:82:f5:b7:50:c2:b0:6d:6c:6d:de:5e:87:e7:c4:bf:
33:9d:d8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org