Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/WwPX9uFHEmXuMzD3WgyPYlXmJ5o.roa
File: WwPX9uFHEmXuMzD3WgyPYlXmJ5o.roa (raw, json)
Hash identifier: z+vqsMt3rqY2oYHShhovicOkobZ6GVDfkAWV9U7rImE=
Subject key identifier: 5B:03:D7:F6:E1:47:12:65:EE:33:30:F7:5A:0C:8F:62:55:E6:27:9A
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 0189B14A3238D96E0604B76823ABD543CA6A
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/WwPX9uFHEmXuMzD3WgyPYlXmJ5o.roa
Signing time: Tue 01 Aug 2023 13:29:36 +0000
ROA not before: Tue 01 Aug 2023 13:29:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212144
IP address blocks: 2a0f:e3c0::/30 maxlen: 30
2a0f:89c0::/29 maxlen: 29
2a0f:e3c4::/31 maxlen: 31
2a10:3e84::/30 maxlen: 30
2a0f:63c0::/29 maxlen: 29
2a07:f240::/29 maxlen: 32
2a10:a9c0::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 30
2a0b:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:4a:32:38:d9:6e:06:04:b7:68:23:ab:d5:43:ca:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Aug 1 13:29:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b03d7f6e1471265ee3330f75a0c8f6255e6279a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:a9:8a:81:90:c9:e0:7b:1b:eb:4b:e1:2d:
de:0d:9b:a3:62:3d:ba:11:39:b1:fa:fc:8c:76:f9:
de:2c:ce:32:2e:73:c8:bf:1d:88:eb:0a:45:47:63:
f9:a6:e0:7c:2c:f9:48:ca:1f:a8:32:62:da:17:b0:
9b:17:d2:51:3a:2d:8f:d9:38:56:22:ef:d4:21:9c:
bb:0c:8d:53:45:b9:25:77:4c:69:c2:ab:05:82:ff:
45:6e:eb:d2:7d:09:b3:c9:fc:ad:6b:9e:60:ad:39:
14:38:49:e3:ca:fc:d3:f3:6d:0e:81:2b:ef:2e:62:
70:f0:6e:12:89:59:72:6e:a0:a4:b3:62:5d:97:92:
58:61:b6:2b:17:8a:9b:52:d1:61:9b:ef:ed:16:4b:
ea:18:d2:62:43:9a:2e:11:1c:25:01:15:ea:e0:ba:
43:f0:5b:08:89:96:cd:67:aa:eb:d7:39:92:d0:d8:
be:74:5e:b0:40:57:69:03:01:1a:fe:a2:4f:fa:99:
55:9c:b5:a3:4f:34:11:8e:5b:70:48:a3:1d:ce:9c:
03:c5:4d:58:9d:1b:86:f3:6d:be:a5:64:7c:1f:d9:
b7:dd:26:c4:a9:fa:43:e0:79:0d:40:2d:69:bf:dd:
8c:20:fb:e7:4c:1a:77:d4:d1:15:8a:9f:ce:ce:d6:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:03:D7:F6:E1:47:12:65:EE:33:30:F7:5A:0C:8F:62:55:E6:27:9A
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/WwPX9uFHEmXuMzD3WgyPYlXmJ5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:9bc0::/29
2a0f:e3c0::-2a0f:e3c5:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3e84::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
3e:84:7a:5b:7e:d4:90:be:8a:0b:8e:52:59:dd:ce:8e:cc:d9:
e9:d8:6d:0b:b4:60:67:8b:9f:55:4a:a6:3b:4a:76:f8:ff:45:
50:3f:ff:0a:42:a2:35:3d:56:7c:e5:0a:cf:32:22:49:6c:32:
3a:5a:cd:01:bc:73:d0:bc:32:58:59:d7:1c:ae:85:6f:7a:da:
3f:59:88:63:96:6b:d9:cc:08:e2:db:2b:ee:d9:f9:18:f1:30:
22:50:5b:ad:c6:d8:c3:9c:d3:ed:7d:44:d0:e6:55:2e:ec:41:
06:40:e8:7e:c9:dd:68:25:20:0f:5f:63:c5:e6:7e:c6:39:52:
ea:fb:12:6b:fb:54:d5:bf:e5:07:f7:fe:83:b2:ac:8c:e4:10:
08:20:62:af:0c:85:6d:e8:a6:de:d4:86:3d:d8:00:c6:15:ac:
1b:49:3d:c6:6f:28:98:05:12:1f:c9:c3:8f:ee:1e:9f:c8:cb:
c9:5f:81:1d:58:a3:ab:05:dc:6a:df:27:98:ea:70:d9:12:8e:
88:f0:a2:0d:36:a8:3a:6f:59:b0:11:bb:bc:98:90:fa:72:29:
fa:be:91:be:d9:05:cd:8c:dc:e5:e3:87:f7:36:20:2a:e3:a6:
57:b0:51:8e:8e:00:09:f4:fc:a2:ee:72:5c:10:26:28:33:25:
bd:6b:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org