Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/IgMuZYCVbiMhfCNaf8Z8RNiCZ_E.roa
File: IgMuZYCVbiMhfCNaf8Z8RNiCZ_E.roa (raw, json)
Hash identifier: qFwWcU4J8hkE+/vARHKLDCA9RoTqlzo/0Sv8Q69mKwg=
Subject key identifier: 22:03:2E:65:80:95:6E:23:21:7C:23:5A:7F:C6:7C:44:D8:82:67:F1
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 023B6159
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/IgMuZYCVbiMhfCNaf8Z8RNiCZ_E.roa
Signing time: Fri 06 May 2022 11:59:19 +0000
ROA not before: Fri 06 May 2022 11:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a0f:89c0::/29 maxlen: 29
2a10:3e84::/30 maxlen: 30
2a0f:63c0::/29 maxlen: 29
2a07:f240::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
2a0b:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37445977 (0x23b6159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: May 6 11:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22032e6580956e23217c235a7fc67c44d88267f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:49:b2:d2:b7:6a:3d:36:a1:93:11:77:ef:
2b:02:b1:2d:cd:93:66:ed:54:a0:63:e6:3b:73:ad:
70:ae:b5:a9:c0:c2:27:5d:6e:6d:bc:94:8d:d7:49:
d6:ba:12:aa:a7:28:b8:37:94:64:fb:45:65:b8:7e:
1c:54:a1:b5:7c:4d:33:1f:5b:74:1c:fe:ce:d7:09:
f4:3b:cc:80:a6:f4:1b:3f:8f:6b:e0:ee:b0:e9:4e:
1c:0f:c4:c6:b5:11:c5:a2:fc:ec:16:a7:f2:3c:bd:
d1:9c:af:6d:ce:df:2d:b1:82:05:b1:38:6b:6f:83:
e2:c8:90:d2:05:60:b4:74:60:04:98:2a:c2:2e:1e:
89:71:12:ab:8b:d3:15:df:b5:7e:22:8b:e5:9a:90:
74:32:d9:21:ae:e8:8b:1b:07:0f:08:46:a9:16:7b:
4a:ca:1e:1d:3d:71:9f:6e:a8:ac:79:db:11:16:8e:
a7:52:35:d8:01:83:85:1e:58:de:1d:ea:f4:fc:bc:
b3:96:81:cd:e4:7b:ae:21:e9:09:80:89:3b:cc:e9:
3f:1f:f4:bd:ab:77:17:42:be:3f:c7:74:b5:0b:a6:
62:8f:40:a4:7b:64:09:86:64:68:c1:c2:19:72:d7:
3a:39:e6:b3:22:ed:ab:3f:1a:9e:0e:2f:7e:3c:ed:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:03:2E:65:80:95:6E:23:21:7C:23:5A:7F:C6:7C:44:D8:82:67:F1
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/IgMuZYCVbiMhfCNaf8Z8RNiCZ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:9bc0::/29
2a10:3e84::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:a1:ae:ec:cd:a1:08:85:39:ad:01:0e:77:3e:10:fa:21:f5:
2f:bb:42:98:a5:55:da:28:bf:b6:13:5c:f9:d8:ca:a8:b3:28:
91:0f:2d:10:33:02:ba:74:04:be:67:84:3d:1d:0a:32:45:55:
41:af:b7:40:f8:9b:7d:fb:84:10:c9:63:f5:90:27:fd:7f:f1:
90:a1:21:1b:ed:cd:db:79:28:9b:cc:13:e1:9c:a2:94:37:a4:
74:a0:94:27:a0:75:d5:d5:2f:dd:24:c9:b7:f4:23:98:8b:c4:
d6:7d:b1:7f:03:dc:8f:b0:2c:3e:4d:14:52:15:55:5d:8c:fa:
67:78:b4:c3:d5:09:f8:6f:c3:2f:bf:88:34:2d:a6:e7:c7:06:
0a:34:6e:56:9a:cc:e4:cb:e6:99:b1:8a:9b:0a:ba:c5:51:74:
4e:96:d9:13:06:4e:aa:c4:87:99:be:b4:e6:99:6b:1a:a2:da:
fa:f8:ef:05:22:b0:f1:8c:46:71:49:f2:4c:27:78:a8:cf:c3:
e2:c1:ce:55:74:61:3a:d6:a0:0a:4f:02:08:6f:8b:39:c1:62:
3b:94:ce:d2:aa:03:fd:25:60:bc:14:40:50:d8:ec:b7:ef:5d:
1d:04:ed:14:f6:bb:05:30:c0:e2:74:7e:ef:18:67:af:45:72:
db:63:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org