Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/00ACsnI4YeG2lmOVL8mPEgwpZro.roa
File: 00ACsnI4YeG2lmOVL8mPEgwpZro.roa (raw, json)
Hash identifier: 4+mu4JinmyNARYYMJd/hoUnysOw2awSK1fCLirpFhak=
Subject key identifier: D3:40:02:B2:72:38:61:E1:B6:96:63:95:2F:C9:8F:12:0C:29:66:BA
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018C1551A57BEF3970DA2C287C7739FEA6B9
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/00ACsnI4YeG2lmOVL8mPEgwpZro.roa
Signing time: Tue 28 Nov 2023 09:45:21 +0000
ROA not before: Tue 28 Nov 2023 09:45:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35467
IP address blocks: 2a07:3501:1260::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:51:a5:7b:ef:39:70:da:2c:28:7c:77:39:fe:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Nov 28 09:45:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d34002b2723861e1b69663952fc98f120c2966ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b5:17:88:e6:00:c3:52:ae:14:d9:56:07:f8:
a1:b7:97:6d:29:09:03:0e:85:08:5a:62:27:fd:8a:
23:f7:92:ef:b8:df:19:19:2a:4b:9d:e4:9b:51:84:
10:d9:7f:55:54:09:33:35:6f:3b:54:29:86:2e:bd:
77:a0:22:25:aa:a1:12:be:5d:dc:55:aa:5d:8c:65:
b6:4a:38:02:b1:5e:d0:7c:fa:6d:fa:05:56:7a:5f:
a5:e0:ad:5d:50:ad:7e:43:20:2b:c4:d3:7d:3d:a9:
d8:c5:da:63:da:77:23:49:44:08:6b:ff:36:eb:86:
eb:64:80:59:d8:78:13:8e:fc:0a:ab:df:11:f5:5b:
42:55:ba:b6:19:67:99:25:06:93:4d:88:31:08:58:
f3:3f:ce:f2:84:c9:b4:31:6d:c4:06:e9:53:72:9d:
0f:ac:14:cf:08:dc:e4:d6:d8:b4:3d:5c:b0:44:02:
63:e3:13:99:b4:68:0c:37:d2:fa:fa:a4:34:22:0d:
68:34:22:a2:06:73:39:4a:fd:95:18:98:f3:e4:ff:
df:6e:8b:1d:ee:36:1e:fa:cf:50:29:cf:3c:1b:e7:
ad:4a:14:b3:6f:52:b3:37:6f:86:5e:e1:dd:a4:fb:
62:b2:09:4e:ac:2f:69:ff:cf:3e:97:12:46:ec:8a:
a0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:02:B2:72:38:61:E1:B6:96:63:95:2F:C9:8F:12:0C:29:66:BA
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/00ACsnI4YeG2lmOVL8mPEgwpZro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3501:1260::/48
Signature Algorithm: sha256WithRSAEncryption
be:f3:6a:e0:99:2b:57:a9:32:5d:ac:4a:38:98:3e:37:a8:89:
84:10:ea:d4:cc:de:7c:c1:7a:1e:d7:47:17:98:a7:bd:04:ef:
4c:04:cb:11:1d:d9:0b:85:3d:42:dd:25:fa:73:5d:67:a8:f2:
b6:08:d2:d6:0b:69:81:d1:27:d1:9a:c3:8d:9a:2d:46:32:30:
f9:9d:a5:26:27:fc:c2:2f:4c:b1:af:e1:3a:58:cf:c3:30:47:
8c:0e:47:f1:0c:88:55:50:16:5b:6e:3d:83:77:c2:45:77:60:
eb:e4:c4:69:67:ac:22:45:c9:25:a7:b2:2d:a3:91:f4:7c:e3:
3d:7f:da:f7:32:d6:f5:45:c0:33:71:7d:41:f6:43:f9:eb:04:
dd:fe:20:53:9c:48:f6:f3:b2:43:b4:89:8d:a6:cb:9e:0c:02:
40:c4:60:ca:81:5a:22:c9:6d:a9:f2:02:61:54:f8:bd:4f:e0:
90:2b:ae:5b:37:9c:c0:b1:74:59:8c:c2:3f:b4:0b:07:b6:f1:
a8:46:ce:75:ec:b8:4e:f8:a6:df:c7:44:73:00:1d:86:48:23:
1f:50:00:87:c2:e3:47:07:16:e9:9b:ed:df:24:d0:ce:f7:82:
b3:77:a2:2e:eb:22:f4:28:97:13:db:67:29:b9:05:9f:e1:43:
7c:f2:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:29 2025 by rpki-client