Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/e9f2E06c1MXqvIGJO9yPFoHcdtM.roa
File: e9f2E06c1MXqvIGJO9yPFoHcdtM.roa (raw, json)
Hash identifier: 0MCT8qA/smEs4zGVXi9v70Q1QZEG2msHRKyT5guc4b0=
Subject key identifier: 7B:D7:F6:13:4E:9C:D4:C5:EA:BC:81:89:3B:DC:8F:16:81:DC:76:D3
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01E43217
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/e9f2E06c1MXqvIGJO9yPFoHcdtM.roa
Signing time: Tue 29 Mar 2022 16:53:41 +0000
ROA not before: Tue 29 Mar 2022 16:53:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 2a10:3e84::/30 maxlen: 30
2a07:f240::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 29
2a10:a9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31732247 (0x1e43217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Mar 29 16:53:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bd7f6134e9cd4c5eabc81893bdc8f1681dc76d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:96:dd:1d:b4:a2:73:4f:44:a8:ea:21:53:
95:96:df:60:3c:5b:78:31:21:ba:41:55:9d:06:9a:
51:c1:40:2d:37:ed:41:52:e0:06:01:80:e4:ea:13:
36:ef:35:89:7f:0e:5f:d5:60:78:03:1f:55:b1:eb:
9a:54:2e:bf:8b:ab:b9:d1:0a:7a:d8:2d:40:0b:ad:
f1:d1:83:73:c0:94:9d:66:32:f5:0c:a5:41:6a:a8:
72:c4:8d:8a:2a:56:d6:ce:93:a8:ad:a2:34:3d:f0:
0a:d8:90:0c:3c:7b:79:51:3b:6c:3e:f5:48:7a:2b:
05:d9:7a:89:37:17:8f:0b:56:c0:c3:69:76:55:81:
54:da:1a:a0:68:1d:7f:22:2b:ce:a6:c0:94:92:3a:
c8:5c:d7:e7:fb:b6:2f:ee:8f:18:98:33:af:f9:26:
b9:22:a9:3f:9b:04:87:db:3d:5f:d2:e1:a4:b6:f2:
54:91:57:8d:7f:61:52:65:0a:ec:a5:5d:f6:38:bf:
36:b9:ee:0c:91:78:19:d8:62:2a:4e:44:8c:42:fe:
59:2b:dd:3b:3e:37:3b:fe:89:1d:95:5a:86:7e:fb:
ab:b1:31:2d:10:d6:b9:99:96:50:2b:7c:0d:bc:63:
2c:b6:97:1b:e9:27:53:c8:ec:4c:ac:6d:a9:c1:4b:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:F6:13:4E:9C:D4:C5:EA:BC:81:89:3B:DC:8F:16:81:DC:76:D3
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/e9f2E06c1MXqvIGJO9yPFoHcdtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/29
2a0f:9bc0::/29
2a10:3e84::/30
2a10:a9c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:37:4f:46:16:df:91:b0:2b:b5:8c:11:23:e3:db:98:a0:3c:
c6:9a:4d:d9:0e:c7:b9:96:04:e2:c8:14:00:e0:4f:90:34:85:
a8:72:93:dc:07:61:ec:a7:90:a2:31:f7:4b:53:21:2b:a7:ca:
a9:c5:3c:d6:38:9b:83:b1:5b:90:f5:5f:71:d3:16:77:b9:e4:
f9:86:03:e3:c7:38:c6:e7:a2:66:57:e5:98:33:ed:44:5f:8f:
39:9d:b8:d9:11:76:78:3f:9f:e4:b8:38:9b:45:97:b7:ec:4d:
36:43:ff:34:90:11:c8:6c:e4:5c:ca:bc:3c:bf:bd:fa:36:40:
66:2c:4b:6d:b9:db:d4:f2:a4:d3:d3:a7:b8:a0:45:5f:68:d0:
5b:a3:6d:01:4d:1c:88:aa:48:08:e1:3d:3f:14:39:eb:0b:f3:
7a:8c:ab:6e:6a:53:46:cb:f2:0d:93:20:13:28:45:ad:c9:65:
0a:bb:8e:3f:60:fa:0a:35:36:c2:b4:1c:f1:de:f8:8c:30:13:
75:0f:cd:0e:bb:09:73:ed:cf:00:1e:7b:40:d2:46:c5:6f:35:
79:fe:85:28:e3:d7:2f:33:02:7c:43:f6:06:91:65:79:dc:c7:
57:25:eb:2a:b7:15:f2:83:9f:bb:35:64:52:4d:e2:19:4c:99:
71:69:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org