Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/Kkw0BgX399rzHPdCW9SkRjNt1Po.roa
File: Kkw0BgX399rzHPdCW9SkRjNt1Po.roa (raw, json)
Hash identifier: yqdZZz8Mm/YvY7gHekfVmhbRhzVhsFgwhmZx/sohgl0=
Subject key identifier: 2A:4C:34:06:05:F7:F7:DA:F3:1C:F7:42:5B:D4:A4:46:33:6D:D4:FA
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01857246B7C9D9CA0C8C3A4B54A97D211C3A
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/Kkw0BgX399rzHPdCW9SkRjNt1Po.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210542
IP address blocks: 2a0f:e3c7::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b7:c9:d9:ca:0c:8c:3a:4b:54:a9:7d:21:1c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a4c340605f7f7daf31cf7425bd4a446336dd4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:b5:b9:9e:3b:a8:5a:07:f0:45:79:3f:95:
a3:de:6d:39:98:82:4a:39:10:a4:aa:34:4a:47:90:
7b:f8:9e:58:a4:d4:62:89:b0:ee:cf:26:4d:ac:a1:
4d:9b:89:e4:ff:59:7b:32:60:79:82:a0:dd:55:79:
fe:87:3f:1a:75:f1:17:4f:26:9a:16:64:dc:4e:05:
00:cc:a2:8f:d3:72:14:7f:1f:c4:98:d3:d2:d8:16:
d0:f3:81:f3:15:e7:38:bb:05:10:23:5b:98:ef:79:
2c:ee:90:58:35:91:65:96:a6:9d:77:06:c5:0c:92:
66:44:16:b7:df:7d:75:d2:e3:15:eb:40:31:4c:bd:
fa:85:ba:fd:20:cf:0e:70:fd:d1:93:8b:39:20:3f:
1c:32:02:18:e6:16:95:a1:cd:9a:36:b4:e1:4c:cb:
fe:2d:f9:83:6e:44:9d:05:91:f3:bd:58:ca:a0:80:
af:d5:d3:9f:4d:82:be:f0:62:7a:90:e1:9f:03:ba:
58:74:60:39:92:1e:58:30:8b:5e:ca:9b:17:48:68:
bb:ec:96:72:33:62:a9:0a:ec:8a:04:fd:5c:0b:47:
54:05:71:b2:6c:1f:6d:e0:b2:b0:af:b4:2c:a4:87:
5c:2c:69:60:4f:33:79:e5:05:97:c1:d2:93:c3:a4:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:34:06:05:F7:F7:DA:F3:1C:F7:42:5B:D4:A4:46:33:6D:D4:FA
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/Kkw0BgX399rzHPdCW9SkRjNt1Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c7::/40
Signature Algorithm: sha256WithRSAEncryption
7f:e9:a9:2f:af:89:78:84:01:10:91:44:b2:8b:ab:fa:5a:ea:
7c:08:00:06:c7:3c:2b:fe:ed:d7:6d:cf:44:f3:45:e1:9b:5c:
12:58:27:40:ad:f5:f2:5b:da:68:16:8d:6f:3f:d5:b3:a8:97:
89:7c:c8:ba:8a:4f:af:b4:67:52:ff:9a:c7:a4:95:b7:01:4a:
e7:cd:91:8d:ec:2e:6f:e0:16:ef:ae:8c:a7:73:9d:6f:37:0d:
3b:c7:12:0e:26:5e:2f:4a:50:e2:07:60:dc:45:a2:03:77:a2:
f2:f9:4e:0b:3a:b8:f9:dd:4f:37:00:dd:5a:c4:e8:3f:79:41:
98:29:94:b9:8a:a4:b9:84:99:df:65:b0:ca:08:7c:24:11:05:
6e:61:6b:c5:28:2b:d9:09:f0:f6:fd:30:08:82:73:22:57:30:
38:7e:f3:20:f4:b6:bd:d6:c1:cf:4e:ca:d5:79:2e:94:10:cf:
d0:ae:b9:0b:ee:3b:e2:64:2c:f2:51:e6:0a:03:4c:3d:ec:6b:
2e:bd:af:1e:dd:4c:7f:34:df:53:46:76:f9:86:82:c6:7d:e1:
85:76:c2:1f:30:20:82:bc:a8:02:3f:04:4c:32:13:bd:1b:5d:
9c:a8:cc:a5:80:fc:cb:0c:da:16:68:af:1c:55:b9:39:7b:f4:
84:a3:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:20 2025 by rpki-client