Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/dQ9c5wTIb-BRAa8Bu52LHI1DyTc.roa
File: dQ9c5wTIb-BRAa8Bu52LHI1DyTc.roa (raw, json)
Hash identifier: 6lylIyglYUgRsEjUIrB8Z9cnieC90mfVQUkDtSGYGTU=
Subject key identifier: 75:0F:5C:E7:04:C8:6F:E0:51:01:AF:01:BB:9D:8B:1C:8D:43:C9:37
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 018B6838350012D5512EA703F1ED1A44E9DF
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/dQ9c5wTIb-BRAa8Bu52LHI1DyTc.roa
Signing time: Wed 25 Oct 2023 19:03:15 +0000
ROA not before: Wed 25 Oct 2023 19:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a0b:a4c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:38:35:00:12:d5:51:2e:a7:03:f1:ed:1a:44:e9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Oct 25 19:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=750f5ce704c86fe05101af01bb9d8b1c8d43c937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ba:9e:66:3b:90:93:d3:c9:d6:ae:05:2b:ce:
6f:dd:17:01:1e:6c:6b:56:09:1a:17:12:ec:d6:e5:
9f:98:ce:04:c9:5d:43:55:27:2a:18:d4:ce:5e:53:
55:3d:65:3a:5d:a2:b6:a0:39:60:86:d5:15:c2:05:
26:6e:d4:f5:2e:c4:a3:4a:26:24:c2:e3:d2:e6:b0:
bc:83:6d:a1:ab:4d:33:63:86:b7:c0:46:69:91:bd:
66:6a:ac:2a:29:0f:d2:f0:43:1a:7e:25:1e:3b:94:
0a:65:df:cc:7c:af:50:4f:4e:f4:27:47:39:f2:5d:
6b:aa:82:d1:6d:b9:6c:e8:97:94:2c:ad:81:0c:bf:
4c:7d:75:0c:6c:98:b6:13:b9:33:ee:08:d7:a3:78:
b9:49:68:de:f3:7f:84:6e:7e:6d:a0:a9:bb:c8:6a:
e9:02:b5:e4:2e:6a:6a:6d:27:23:94:2d:2c:9f:f0:
31:92:22:db:99:23:a7:00:5d:b4:21:c6:ae:5a:d4:
3e:46:73:b9:94:cb:53:66:0d:e2:21:0d:25:ac:19:
74:fe:ad:a8:80:2e:81:60:ac:aa:ee:1e:39:47:bf:
3b:ee:f6:e0:b6:ce:de:67:bb:9d:bf:8e:ad:9e:5e:
7a:f1:9a:14:0f:f0:c4:05:ca:76:45:fa:3d:c9:70:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:5C:E7:04:C8:6F:E0:51:01:AF:01:BB:9D:8B:1C:8D:43:C9:37
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/dQ9c5wTIb-BRAa8Bu52LHI1DyTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a4c1::/32
Signature Algorithm: sha256WithRSAEncryption
60:4f:9c:32:61:e6:93:6a:6d:f3:c6:6d:2e:d7:7a:5f:73:3f:
14:77:98:db:b3:51:f9:41:5d:41:04:8d:f0:64:99:dc:e9:48:
7a:2f:6c:cf:00:5a:29:57:63:0d:c1:04:92:1e:46:6d:b9:65:
9d:0e:be:15:fc:cb:bd:7d:54:51:af:b7:c7:78:90:26:84:4f:
0e:aa:75:08:d9:7d:0c:b1:fb:ea:5c:d6:5a:06:f7:1b:a8:07:
60:66:4e:f2:80:a8:b4:4d:2e:52:4a:3b:d0:0f:e5:11:eb:50:
0e:62:9b:91:c3:3a:f0:78:69:74:af:88:95:fb:29:c0:aa:ef:
fd:13:d8:f0:0e:85:1c:35:3b:de:ce:8d:fe:c3:30:bc:f4:8a:
9d:a7:a3:42:6c:58:ad:3f:46:e5:03:f3:ce:b6:cc:46:98:22:
cb:0b:9e:9c:0c:5d:7b:6f:8a:d4:60:7c:1e:ad:0e:70:d4:67:
28:1f:ce:69:8a:fe:61:97:28:20:a6:f6:2b:2e:33:06:75:d9:
2c:4d:e8:b7:69:41:0b:b4:8f:89:7a:d8:70:71:41:5f:f1:77:
05:e2:e7:04:aa:b4:e5:07:7f:aa:37:84:a6:b4:f9:96:31:19:
39:b3:5f:8b:c8:06:de:e0:8b:9f:58:36:ce:ea:2b:a2:c2:a5:
74:9a:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:40 2025 by rpki-client