Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uDoroCZXVG9A43YhaLsy2tEshy8.roa
File: uDoroCZXVG9A43YhaLsy2tEshy8.roa (raw, json)
Hash identifier: bwE4T7fIBctWZj2wBNKhbVhQoJcAH7+cNr/a6+VXwgs=
Subject key identifier: B8:3A:2B:A0:26:57:54:6F:40:E3:76:21:68:BB:32:DA:D1:2C:87:2F
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0187DBE61BC3847A0DF556FD7AAA464E7A4A
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uDoroCZXVG9A43YhaLsy2tEshy8.roa
Signing time: Tue 02 May 2023 09:58:23 +0000
ROA not before: Tue 02 May 2023 09:58:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33915
IP address blocks: 2a07:3502:1060::/48 maxlen: 48
2a07:3500:15c0::/48 maxlen: 48
2a07:3500:12f8::/48 maxlen: 48
2a07:3502:11a0::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:e6:1b:c3:84:7a:0d:f5:56:fd:7a:aa:46:4e:7a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: May 2 09:58:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b83a2ba02657546f40e3762168bb32dad12c872f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:65:bc:ab:f4:c4:d5:ca:dd:b4:b9:05:f4:
fd:7d:9e:b6:1b:75:68:1e:8d:db:c7:80:30:10:7f:
c5:c7:21:8d:92:4d:ba:a4:51:de:7e:e5:c0:4c:46:
58:80:3c:d5:fb:b6:11:da:e3:19:48:56:9f:12:90:
87:02:0b:03:80:dd:4b:33:7d:95:bf:85:bf:80:05:
50:4c:1b:d7:42:0b:e8:c5:9b:25:c3:87:a3:72:2c:
bf:b8:16:4e:36:13:b0:1e:29:b0:b8:4e:e3:10:20:
b7:1f:4d:9a:e6:bc:a7:53:56:67:0e:63:c1:e7:39:
5d:b1:1c:f1:ac:c0:9d:b3:98:56:62:4f:16:f6:ce:
c7:c6:3f:2e:ff:a8:bd:0d:6e:09:6d:0f:03:7d:9a:
84:33:6c:ae:60:1b:52:1b:bb:ad:75:c3:b8:30:c0:
66:04:20:43:cb:8e:d6:3e:0d:71:07:27:f7:79:f1:
1f:4c:78:e5:b7:0b:5c:ba:96:2d:8e:70:9c:4a:49:
14:ef:86:40:10:2b:4b:3e:a0:6e:4e:1d:67:80:a1:
35:38:08:63:aa:40:e5:8b:28:0c:24:7f:60:8b:dc:
54:82:c3:73:fc:fc:aa:92:bf:e1:78:91:a0:fb:bc:
fe:82:95:31:63:26:4e:ee:e4:91:5f:f7:b8:f6:af:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:2B:A0:26:57:54:6F:40:E3:76:21:68:BB:32:DA:D1:2C:87:2F
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/uDoroCZXVG9A43YhaLsy2tEshy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:12f8::/48
2a07:3500:15c0::/48
2a07:3502:1060::/48
2a07:3502:11a0::/46
Signature Algorithm: sha256WithRSAEncryption
79:50:c1:f2:8e:ab:f8:8e:87:d8:58:9a:90:32:a8:e3:6c:10:
d9:20:8a:fa:d1:12:fc:39:36:6d:21:97:fb:18:a9:ed:da:6d:
9d:84:52:33:be:ea:0d:94:01:b8:70:76:ab:56:f6:ed:11:30:
93:2f:79:db:43:56:c4:5a:5f:74:77:0c:1f:b7:22:60:33:90:
92:ad:6a:1d:ed:f2:de:9b:44:48:bb:dc:2f:ca:d5:d8:a7:3f:
29:5a:37:46:d7:d2:47:53:fd:f3:f8:4d:59:44:56:54:14:30:
5b:8c:30:c7:80:25:57:3c:26:56:a9:c3:95:6e:30:55:7a:80:
b5:bb:a8:ee:c1:c4:a6:3e:9c:70:81:da:32:8d:ee:a8:cb:28:
b8:6d:6b:4b:bb:37:9a:f3:2b:10:3b:19:25:c1:a0:91:5f:66:
00:a3:e4:d9:10:83:73:e4:61:8b:08:c5:dd:4e:74:b0:25:36:
92:43:39:61:9f:52:99:1b:64:95:57:ad:d5:25:e6:27:d2:3c:
9a:aa:0c:dd:7c:d0:c6:9d:4a:02:1f:9a:94:2b:ad:c4:44:a4:
75:01:5f:80:cc:79:09:e4:5b:55:e6:ef:e8:85:62:29:69:4c:
31:77:55:e7:c8:25:f7:44:24:a4:1f:2c:fb:18:3a:91:4e:5e:
e7:ea:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:08 2025 by rpki-client