Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/fPaSxXjYSg_yXCx3tT31JyRgKV0.roa
File: fPaSxXjYSg_yXCx3tT31JyRgKV0.roa (raw, json)
Hash identifier: TdE+/euQvdhptWuuJO4RUYE4w5s1MGd8rx4vXSvBlBI=
Subject key identifier: 7C:F6:92:C5:78:D8:4A:0F:F2:5C:2C:77:B5:3D:F5:27:24:60:29:5D
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 018A70D7EFBAB1BB2CC55D1378FBD0DA68B5
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/fPaSxXjYSg_yXCx3tT31JyRgKV0.roa
Signing time: Thu 07 Sep 2023 18:11:54 +0000
ROA not before: Thu 07 Sep 2023 18:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212144
IP address blocks: 2a0f:e3c0::/30 maxlen: 30
2a0f:89c0::/29 maxlen: 29
2a0f:e3c4::/31 maxlen: 31
2a07:f240::/30 maxlen: 32
2a10:3e84::/30 maxlen: 30
2a0f:63c0::/29 maxlen: 29
2a0f:9bc0::/29 maxlen: 30
2a0b:a4c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:d7:ef:ba:b1:bb:2c:c5:5d:13:78:fb:d0:da:68:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Sep 7 18:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cf692c578d84a0ff25c2c77b53df5272460295d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:60:b5:a6:60:ba:b0:ce:b9:a0:fb:88:c2:
c1:55:cd:e3:67:80:4a:95:a5:39:97:49:3c:37:4b:
c6:78:50:e8:b5:8b:13:85:a3:b4:4f:67:96:cf:73:
97:82:47:81:fd:91:c2:29:af:b7:6f:67:1f:28:30:
61:a1:83:1e:3d:3e:50:27:8c:9d:3e:74:08:cc:65:
05:6e:e9:76:9b:35:2d:35:14:2c:57:45:21:d1:a7:
7a:ca:b6:4a:d6:49:5e:51:22:31:95:fd:2a:8f:27:
6a:8f:ad:df:4b:cf:49:3f:45:53:10:29:80:f5:4d:
d8:06:20:63:85:7f:3e:0a:0e:e8:a0:f7:90:5c:27:
c7:60:77:a5:76:40:9b:71:59:40:6e:60:91:94:c2:
a4:02:c5:9d:4a:4b:47:29:d2:8a:00:56:0b:f2:ce:
30:71:c4:65:0d:a2:79:a6:1a:2d:85:ed:ad:6b:c6:
b4:29:90:83:8b:c6:6d:22:02:5b:85:ab:5e:c7:09:
cf:60:91:1f:64:81:1c:1c:9b:08:31:9d:e2:36:30:
a4:eb:6a:e8:fb:27:c6:73:29:1c:8b:3c:eb:a7:54:
41:1f:19:a6:0a:ee:7f:21:8e:4f:6d:53:79:d1:d1:
5e:d1:cf:d0:f0:f1:7f:d1:d4:20:09:91:c7:4f:58:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:92:C5:78:D8:4A:0F:F2:5C:2C:77:B5:3D:F5:27:24:60:29:5D
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/fPaSxXjYSg_yXCx3tT31JyRgKV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:f240::/30
2a0b:a4c0::/29
2a0f:63c0::/29
2a0f:89c0::/29
2a0f:9bc0::/29
2a0f:e3c0::-2a0f:e3c5:ffff:ffff:ffff:ffff:ffff:ffff
2a10:3e84::/30
Signature Algorithm: sha256WithRSAEncryption
58:b8:51:76:90:a8:56:d3:3b:5e:2f:c9:62:75:e5:fc:44:8f:
ed:10:9a:89:5d:99:85:c3:8d:49:d9:bc:7c:aa:b9:fc:2b:84:
93:3e:ec:50:97:52:68:ac:04:f4:89:10:46:ff:6e:94:06:05:
8d:72:36:09:e1:00:77:14:30:45:5d:f9:bd:ed:24:9b:3c:de:
a4:9f:26:79:b5:29:ee:10:08:07:74:23:83:5e:9f:51:1a:f8:
fd:83:00:a9:fb:00:55:2a:cd:d5:ba:54:8c:1a:2a:79:d3:d0:
53:a3:4b:ff:56:f4:05:d3:f6:7d:ab:3f:03:3c:68:13:b6:63:
eb:76:39:81:78:48:2b:aa:d0:86:48:9b:a5:6c:21:e4:b7:2c:
e6:21:b9:3d:c5:fd:61:61:ba:2d:66:48:ed:56:f8:d1:0a:fc:
48:1a:b4:0b:38:79:22:bf:ee:60:c6:aa:5d:e8:7f:ba:18:f1:
d5:57:df:65:e0:ac:13:d7:e5:84:b7:7b:3d:1c:36:f8:a2:80:
ed:23:25:10:67:fb:17:7d:bd:19:e3:8f:30:89:1d:1b:87:77:
c1:ce:58:de:e4:55:5d:85:52:b2:74:e5:b5:48:67:e7:41:03:
1e:65:28:a5:59:42:28:f0:d9:02:8f:98:64:c2:0c:3c:ed:43:
20:7a:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org