Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/QfCXZIu_sxbXT0PjdkZJ-JMr8a8.roa
File: QfCXZIu_sxbXT0PjdkZJ-JMr8a8.roa (raw, json)
Hash identifier: bVwHFIIJbhXHPperhG/hUGD1tbLeeKyFgCkqESCrQ4I=
Subject key identifier: 41:F0:97:64:8B:BF:B3:16:D7:4F:43:E3:76:46:49:F8:93:2B:F1:AF
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01D95C1E
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/QfCXZIu_sxbXT0PjdkZJ-JMr8a8.roa
Signing time: Fri 25 Mar 2022 15:26:17 +0000
ROA not before: Fri 25 Mar 2022 15:26:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a10:3e84::/30 maxlen: 30
2a07:f240::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31022110 (0x1d95c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Mar 25 15:26:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41f097648bbfb316d74f43e3764649f8932bf1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:7a:46:da:37:9b:b7:aa:30:24:47:f3:19:
60:b4:4a:a4:34:54:76:e0:51:2f:7f:2a:17:3e:9c:
fa:62:06:5d:c3:b8:81:63:0b:89:76:a3:4b:b4:65:
2e:3d:c3:2f:4c:78:bd:ee:ff:89:35:f3:a3:fb:86:
02:b2:c4:01:98:9a:83:33:72:cf:3d:77:b2:46:d4:
ca:66:2a:51:3c:62:90:7f:a3:35:97:42:7f:41:f3:
be:66:af:ff:32:6a:15:6a:9f:c2:cf:90:54:fc:33:
fd:65:95:0b:bf:1f:e7:f4:10:70:16:7e:e7:16:e5:
0a:c6:cf:bc:2c:56:90:e5:8f:5a:fa:dd:ea:71:7d:
bd:4b:4f:25:77:18:a2:95:54:f0:48:ee:a1:46:a5:
27:89:eb:11:5b:cd:c2:d8:88:d9:0f:a9:d7:94:26:
9f:f3:8d:e7:c9:5e:6b:98:5b:87:4e:0c:70:0a:91:
81:2c:21:29:4c:1c:4a:39:c0:40:55:5d:62:74:8f:
33:cb:51:ac:75:6b:5a:48:08:3a:a2:ac:d5:73:aa:
bf:69:84:7f:fd:7a:28:3c:fa:7b:27:c7:35:f0:55:
f5:44:99:c1:df:ea:41:61:c9:1b:b5:7f:44:70:b9:
3d:c5:c3:76:db:eb:b6:1d:63:28:4e:29:ab:98:be:
14:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F0:97:64:8B:BF:B3:16:D7:4F:43:E3:76:46:49:F8:93:2B:F1:AF
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/QfCXZIu_sxbXT0PjdkZJ-JMr8a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0f:9bc0::/29
2a10:3e84::/30
Signature Algorithm: sha256WithRSAEncryption
19:38:03:5b:c1:80:f8:2c:b6:6a:37:d2:78:44:5e:e5:04:f6:
57:12:d2:8b:cb:96:62:70:a3:83:18:02:0e:83:81:0f:42:d6:
93:b5:7c:fa:3d:ed:1b:cc:44:cd:74:cc:d9:73:54:e8:df:b7:
2b:7b:e5:8a:9a:2f:65:fe:24:28:05:1a:51:e2:8d:f0:ba:16:
1e:a9:d9:12:cd:17:c5:68:4a:03:8f:8f:0b:90:af:15:31:98:
11:f5:a0:9f:63:8d:8d:fc:fc:62:a2:d6:52:68:4a:81:28:65:
38:d0:27:50:60:a5:55:d8:63:9f:f8:33:da:57:c0:a6:3a:f3:
be:4a:ac:3b:1b:69:f0:61:9d:16:42:78:94:1e:73:b0:57:5b:
33:47:b5:14:3f:8d:ec:c8:76:87:f8:16:c8:c8:ab:74:50:88:
79:42:ff:22:b5:e2:af:83:46:24:63:6f:83:88:1f:68:87:fa:
9f:cd:d0:dc:5b:86:6b:80:c7:83:36:5e:f5:05:49:ef:75:4e:
e1:b2:c3:aa:b1:86:31:ff:ab:03:cd:e6:d3:09:fe:c0:42:ff:
8b:23:e2:ed:8e:e0:56:62:4b:20:bc:62:80:d0:4e:4d:61:ca:
b8:c2:06:1b:b8:2a:a9:44:eb:91:1a:ed:26:b1:d9:52:ca:00:
0e:c1:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org