Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/VuPE7nOrlak3hqjaVfudi4384Tg.roa
File: VuPE7nOrlak3hqjaVfudi4384Tg.roa (raw, json)
Hash identifier: VovyW7fl3i94QgYKIoeO1L8vYrcLaeqyHt7o2v9sxGA=
Subject key identifier: 56:E3:C4:EE:73:AB:95:A9:37:86:A8:DA:55:FB:9D:8B:8D:FC:E1:38
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01857246B906993FCEC2550C8651E1F156EE
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/VuPE7nOrlak3hqjaVfudi4384Tg.roa
Signing time: Mon 02 Jan 2023 11:38:35 +0000
ROA not before: Mon 02 Jan 2023 11:38:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212144
IP address blocks: 2a0f:e3c0::/30 maxlen: 30
2a0f:89c0::/29 maxlen: 29
2a0f:e3c4::/31 maxlen: 31
2a10:3e84::/30 maxlen: 30
2a0f:63c0::/29 maxlen: 29
2a07:f240::/29 maxlen: 32
2a10:a9c0::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 30
2a0b:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b9:06:99:3f:ce:c2:55:0c:86:51:e1:f1:56:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Jan 2 11:38:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e3c4ee73ab95a93786a8da55fb9d8b8dfce138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:53:0e:3b:da:81:f3:e7:b1:9f:3c:47:15:
37:46:3a:ca:55:e2:be:14:86:ad:11:fa:e4:e6:ad:
0a:2c:87:3a:4a:d6:89:05:a7:db:21:a1:d1:21:72:
b7:e5:30:64:50:d1:de:9f:c7:82:d2:d6:71:6e:14:
6e:36:24:13:5e:a7:16:8d:2f:f5:0e:2a:0b:48:aa:
07:02:83:70:ca:0e:e4:98:dc:7c:b9:f9:77:08:56:
e4:51:6a:52:00:ca:56:69:b8:a6:0a:88:dc:19:56:
a0:58:ec:f2:be:ef:58:ec:56:7f:7b:55:09:a6:0c:
66:3c:ef:57:a1:de:60:84:36:9a:6c:2f:7e:8f:b6:
90:85:6a:8a:40:d5:de:5b:b4:be:60:39:81:c7:9f:
b3:49:48:28:a9:59:e2:6b:9b:7c:bc:d5:e4:7f:b8:
b8:43:bc:9a:64:a9:8a:c0:a7:58:0c:4e:12:1b:5b:
f6:80:20:c3:49:fb:95:e1:b0:79:f9:7a:fe:f2:1d:
d9:b1:8b:a5:ff:d6:9c:c6:37:b4:f1:26:9c:8e:0b:
d6:bc:dc:97:e6:b1:c6:8b:a8:fb:ce:46:fd:1f:52:
65:21:89:23:de:f6:dc:b3:19:0c:77:80:a3:2f:31:
b7:88:b6:f8:c0:f2:6b:37:12:0e:e7:cb:24:fb:d2:
3a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E3:C4:EE:73:AB:95:A9:37:86:A8:DA:55:FB:9D:8B:8D:FC:E1:38
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/VuPE7nOrlak3hqjaVfudi4384Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:9bc0::/29
2a0f:e3c0::-2a0f:e3c5:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3e84::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
59:5b:95:06:b6:22:e5:32:af:5b:aa:02:df:98:ff:82:b3:cf:
76:36:70:7b:fb:79:48:ff:d7:38:18:41:69:34:61:da:e8:9f:
e3:aa:49:cf:5f:c6:a3:8d:db:b2:14:81:b2:18:66:6a:84:7e:
e3:52:f6:cf:2b:6e:aa:3d:9a:54:f4:c5:fa:44:c7:bc:15:c0:
23:97:75:e7:ea:68:44:78:86:82:c8:31:bf:98:ba:85:a0:dd:
01:c1:c6:30:36:be:60:77:58:c7:f5:df:f4:9c:f7:29:d3:14:
54:d8:9e:70:dc:7a:ef:f5:e7:de:72:6c:4e:fd:85:12:4d:ab:
3b:37:12:fd:9a:cf:c1:19:c5:99:9b:5a:27:06:d5:a6:10:cb:
95:ca:cb:76:b6:24:66:f5:f4:a2:aa:44:f7:d6:94:0a:9d:cb:
77:1a:f0:5d:ff:01:97:45:6b:47:1e:87:f8:f5:5f:18:55:e1:
04:3c:c1:da:2f:9d:90:fe:80:34:c3:d5:ff:84:18:5c:73:5b:
bf:9b:9b:79:ed:b0:e7:20:5e:cd:15:e3:f3:e8:77:c4:58:01:
60:2e:dd:87:2a:1a:4a:64:3c:aa:26:81:4e:6d:f9:2d:e4:bb:
fe:f6:c4:76:00:54:24:3e:30:bc:44:c8:69:7e:b3:14:d4:25:
8e:d1:ea:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org