Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/rrcP60E-OD_6D0W2g_0b8gEyD68.roa
File: rrcP60E-OD_6D0W2g_0b8gEyD68.roa (raw, json)
Hash identifier: LWDNSVQtVfZvBDdlGzGlmkHvf5kj98AVzXdbFtfAcbQ=
Subject key identifier: AE:B7:0F:EB:41:3E:38:3F:FA:0F:45:B6:83:FD:1B:F2:01:32:0F:AF
Certificate issuer: /CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Certificate serial: 01E16F6A
Authority key identifier: BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/rrcP60E-OD_6D0W2g_0b8gEyD68.roa
Signing time: Mon 28 Mar 2022 10:06:09 +0000
ROA not before: Mon 28 Mar 2022 10:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 2a0f:e3c7::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31551338 (0x1e16f6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc55b1ca3724255d60a0a1ef295727df08e3b14c
Validity
Not Before: Mar 28 10:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeb70feb413e383ffa0f45b683fd1bf201320faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:b2:98:a5:ec:bb:8f:36:15:34:4f:bd:5e:
e7:10:b5:9b:60:44:49:14:9e:fb:77:a4:cb:d3:d3:
e0:cb:af:4a:6a:63:19:23:af:19:a0:aa:46:ab:6b:
d9:6d:72:9f:1b:ab:06:d4:c4:21:4b:7e:f5:fe:bd:
ea:6e:90:42:a9:18:93:05:76:20:80:d9:3a:f8:33:
c0:72:fe:3a:45:59:b3:58:3d:d3:df:b4:9e:6d:72:
d6:f3:11:ea:9d:da:8e:2d:82:61:31:a6:67:b8:33:
89:10:7e:7d:6a:84:10:b0:58:a5:3d:c5:90:64:3f:
fb:ed:e0:c4:9b:0b:6a:6b:cc:65:93:84:3a:59:e9:
76:6a:9a:91:86:7b:e4:6c:29:77:05:b6:a5:19:93:
e7:b7:de:f4:b9:0b:81:76:9b:50:49:61:51:07:f4:
5b:1c:19:8e:2a:3f:29:87:79:cc:0a:2e:13:fc:74:
5b:0b:ab:dd:f0:d1:23:8d:8c:cd:c3:da:7a:3a:d7:
09:6d:a7:f1:9a:4c:2d:9a:5f:9a:60:6e:19:06:42:
6d:5e:9f:3e:76:95:d9:fd:b1:5c:97:8c:54:55:46:
41:b9:ff:0b:ae:e8:90:25:b9:66:f5:ef:6d:49:87:
b5:60:66:45:7f:81:b4:91:94:8c:96:c3:d8:b3:6d:
10:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:0F:EB:41:3E:38:3F:FA:0F:45:B6:83:FD:1B:F2:01:32:0F:AF
X509v3 Authority Key Identifier:
keyid:BC:55:B1:CA:37:24:25:5D:60:A0:A1:EF:29:57:27:DF:08:E3:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWxyjckJV1goKHvKVcn3wjjsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/rrcP60E-OD_6D0W2g_0b8gEyD68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/37fd7b-1303-404f-a588-cbb3cd9fedfe/1/vFWxyjckJV1goKHvKVcn3wjjsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c7::/40
Signature Algorithm: sha256WithRSAEncryption
6d:25:e7:83:a3:b5:fa:23:1f:2b:45:56:a3:54:7c:0b:ce:f0:
14:88:62:a8:d0:3b:7a:90:80:67:55:fa:a3:f6:c8:cf:2d:0f:
b1:4f:39:0e:1e:91:fa:b6:2b:7b:03:36:3a:55:a4:2a:3d:a9:
5e:e7:fe:02:c5:f9:8c:ea:47:16:e6:bf:17:1e:46:cc:15:7a:
7b:8e:96:8f:ab:d4:72:67:67:3a:22:b2:be:9a:d9:54:4d:d9:
59:1d:63:af:54:c1:60:1f:db:9f:cb:42:6a:4a:74:48:ee:3c:
0a:a4:4e:1a:35:b3:06:60:9e:4a:03:59:1b:01:04:31:43:b0:
bf:1a:be:85:ab:19:96:89:55:f2:14:05:fa:03:ac:c2:70:dc:
f0:8c:1e:3e:f5:5c:4d:17:4c:79:4f:45:eb:d7:76:0c:ce:27:
55:ae:95:74:10:5b:27:a0:1d:c6:11:79:aa:c2:67:81:7d:4f:
79:04:3d:eb:2c:c5:5f:62:c0:8f:ca:f3:4d:ff:59:92:64:9e:
82:c5:86:e5:9c:27:64:4e:70:a6:e3:d4:b2:c1:05:9b:75:d3:
45:39:ce:52:93:f7:69:9c:27:d9:37:64:df:a2:7c:ed:82:4d:
df:fa:2b:6c:92:11:e1:52:eb:69:c8:9d:48:71:53:9f:9f:96:
5a:ab:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:47 2024 by rpki-client on console-fra.rpki-client.org