Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/RlB8VFt6SVtmVfOpL_d6E9txcX8.roa
File: RlB8VFt6SVtmVfOpL_d6E9txcX8.roa (raw, json)
Hash identifier: RPmZN93TfC+fhk1cGQAnXFl7KHVROobFqOJ7RyJwkK8=
Subject key identifier: 46:50:7C:54:5B:7A:49:5B:66:55:F3:A9:2F:F7:7A:13:DB:71:71:7F
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 0189B14A319104A41827B4F095E6CF9A2E9D
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/RlB8VFt6SVtmVfOpL_d6E9txcX8.roa
Signing time: Tue 01 Aug 2023 13:29:36 +0000
ROA not before: Tue 01 Aug 2023 13:29:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202044
IP address blocks: 2a10:3e80::/30 maxlen: 30
2a0f:e3c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:4a:31:91:04:a4:18:27:b4:f0:95:e6:cf:9a:2e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Aug 1 13:29:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46507c545b7a495b6655f3a92ff77a13db71717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:fc:1a:6d:2a:a7:25:94:ec:e0:5d:73:d9:
43:5f:03:94:a1:73:bf:05:4d:c6:b4:b4:b2:d6:e9:
5a:75:8d:b5:85:55:61:cd:94:22:5f:96:d2:94:69:
91:86:99:72:cf:37:8a:df:17:1b:8b:ab:ed:2a:8d:
92:8b:43:26:34:84:14:31:39:88:b3:74:62:5e:61:
8e:81:1f:43:fd:b1:d3:ea:4a:c7:b2:2e:bc:0f:ac:
a9:7b:e3:e7:7a:4c:99:47:13:4b:2f:c4:0f:9f:30:
6c:53:c7:80:92:39:70:e0:dd:3a:26:f9:06:d4:aa:
ea:c0:5c:db:0d:a2:94:c0:ad:10:b4:be:51:6c:7a:
cb:e5:b9:fb:b8:3c:44:2e:94:ec:64:bd:1a:97:52:
f9:d2:52:ae:fb:07:5f:d7:e5:8c:8d:1d:55:02:d6:
15:6c:88:bb:85:d6:02:72:67:49:ff:d2:90:31:62:
e3:b8:90:6a:66:f3:84:27:51:84:01:6f:d4:5a:26:
56:6b:94:8f:42:70:bf:85:c3:ba:00:66:20:b0:2f:
7c:90:cf:a3:38:c1:79:89:6b:84:87:fc:b6:39:c0:
ef:01:06:4f:47:ed:ca:08:79:c4:ef:63:49:09:0b:
38:fa:e7:cd:e2:84:16:fe:6b:b3:11:94:99:e9:02:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:50:7C:54:5B:7A:49:5B:66:55:F3:A9:2F:F7:7A:13:DB:71:71:7F
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/RlB8VFt6SVtmVfOpL_d6E9txcX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c6::/32
2a10:3e80::/30
Signature Algorithm: sha256WithRSAEncryption
9a:66:3b:ee:14:df:66:84:d6:08:4e:07:82:c1:14:c7:c2:d5:
b3:89:dd:c2:1e:4a:48:93:50:f2:50:38:6d:98:9f:e9:1c:f5:
f3:f5:d6:e3:49:60:63:13:f3:0a:18:dc:17:c4:26:ab:14:65:
08:09:63:32:a1:36:21:33:9e:0c:64:3b:66:c9:ba:64:26:5f:
3e:77:de:4c:24:3e:5c:27:2c:d5:50:66:12:64:9e:de:42:51:
2d:46:54:84:8f:a5:a8:d2:37:32:9b:fa:dd:7a:ca:dd:3a:81:
88:63:ed:30:48:99:99:91:26:8b:ea:79:a6:45:7a:39:9c:c6:
5b:48:49:1a:0b:db:68:2f:2a:4e:4b:48:5c:bc:af:4b:e3:b1:
f7:9a:78:e8:58:10:9a:e4:f8:9d:3e:ae:ed:b7:d3:dc:05:c9:
01:a7:b6:06:78:ba:33:13:ac:dc:4b:96:c7:6e:09:48:e1:29:
1d:96:01:59:43:07:3f:06:f2:50:4e:9d:02:a6:b6:8a:38:57:
f0:c3:c9:6b:68:f6:6c:b2:16:75:5b:7e:b8:83:0e:89:a0:4f:
a0:b7:7b:c0:cd:ad:e4:7a:77:74:45:8d:dd:db:e0:23:26:66:
ef:59:a0:cc:f7:54:aa:f2:5f:3d:a7:e5:02:60:62:a1:c9:73:
80:2b:55:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org