Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/ZqtGGbUuX49HXwTS2Rr838nNZO0.roa
File: ZqtGGbUuX49HXwTS2Rr838nNZO0.roa (raw, json)
Hash identifier: syAxMK8aNNLkeBeCuRcD4TL0fDawkDKRjFkL6Q+HVKk=
Subject key identifier: 66:AB:46:19:B5:2E:5F:8F:47:5F:04:D2:D9:1A:FC:DF:C9:CD:64:ED
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01D9DAFB
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/ZqtGGbUuX49HXwTS2Rr838nNZO0.roa
Signing time: Fri 25 Mar 2022 15:26:18 +0000
ROA not before: Fri 25 Mar 2022 15:26:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 2a0f:89c0::/29 maxlen: 29
2a0f:63c0::/29 maxlen: 29
2a0b:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31054587 (0x1d9dafb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Mar 25 15:26:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66ab4619b52e5f8f475f04d2d91afcdfc9cd64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:5f:1e:68:18:c7:07:88:26:33:3b:df:ea:
63:be:30:14:c8:19:e9:cc:68:d0:8a:88:f9:f6:4c:
5e:9d:97:e3:36:63:c1:e1:78:0f:03:46:bf:ef:50:
82:3e:99:77:46:e0:95:d4:8c:9a:29:2c:c1:0f:06:
f4:64:f8:82:7c:67:d7:78:00:b8:41:6e:d4:0f:3d:
0e:b2:e5:af:bf:bf:41:c7:d4:d9:a4:99:ae:d1:6b:
eb:84:dd:54:6e:4f:a4:36:60:5a:78:30:69:b9:5b:
50:b1:7d:23:07:8d:ba:5f:e4:cf:99:d2:70:7b:29:
c3:87:61:d0:33:d0:a5:67:10:1a:f9:c7:45:de:e4:
ea:61:04:19:0a:91:56:23:ee:82:15:27:89:0d:f7:
d2:ed:47:7e:8e:c0:53:6f:e7:5c:07:ee:38:c5:a3:
f5:78:b1:b1:ae:a4:34:c4:7d:d5:cb:2a:ae:96:9a:
06:b0:3d:49:2b:6e:9d:2b:46:6b:f7:5a:b4:84:f6:
e6:1e:24:dd:8f:ba:b6:13:1d:e4:49:bf:45:0e:7a:
1e:39:be:1a:f3:6a:3c:4e:19:78:e0:cb:85:88:1a:
79:7b:81:d9:1e:6c:34:74:b0:90:67:3c:9f:cb:d1:
7f:a5:cf:5d:b0:1e:59:28:46:36:de:62:64:fb:85:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:46:19:B5:2E:5F:8F:47:5F:04:D2:D9:1A:FC:DF:C9:CD:64:ED
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/ZqtGGbUuX49HXwTS2Rr838nNZO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:69:de:a0:f1:19:36:e2:c2:c2:cf:eb:ea:d0:0f:bb:ef:6f:
5d:5b:d7:91:92:60:5c:2c:75:d8:3b:17:90:0b:40:17:61:a3:
8d:af:53:78:e0:93:e7:81:e2:32:d5:76:c5:a9:b3:a7:e9:e1:
f6:16:ee:77:ae:54:4a:04:a6:d9:8d:45:6a:0b:07:05:c6:f0:
b0:32:85:33:09:13:9a:28:64:bc:f1:95:94:c3:08:bf:aa:6d:
93:07:55:65:83:f5:2a:cd:9d:f2:de:2c:10:d3:77:72:b1:7c:
c3:e1:90:f1:59:af:dc:6a:31:62:a3:60:2a:36:06:f0:66:8e:
95:fa:11:b9:60:40:3c:4e:d8:49:2d:fb:18:9b:79:9c:d9:b7:
1f:cc:82:d1:45:f5:2a:61:0d:1a:7c:b1:69:4c:c1:c3:ff:37:
ee:e4:0d:a4:c7:87:31:4d:d8:4a:1c:9c:18:91:17:6a:69:a8:
28:42:2d:03:4d:34:9c:9a:e3:6f:65:22:5b:1b:68:75:0c:bd:
9e:86:4e:8c:41:30:26:28:61:19:6a:a3:fe:5f:c0:fb:d6:f8:
78:87:eb:20:fd:15:3f:11:9e:fa:be:19:1f:b8:9d:d3:87:a1:
f1:e4:9c:53:c2:fb:44:29:66:f5:61:d6:fb:b8:e2:e8:01:d3:
c0:59:64:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org