Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/6RW7J1IA_XIopyQ-wTGsFSAySS0.roa
File: 6RW7J1IA_XIopyQ-wTGsFSAySS0.roa (raw, json)
Hash identifier: +pRVYzvGjlXOnTg86ZENARtuAxTgDio4SLsFJUd5puI=
Subject key identifier: E9:15:BB:27:52:00:FD:72:28:A7:24:3E:C1:31:AC:15:20:32:49:2D
Certificate issuer: /CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Certificate serial: 01856F42C5E6E347C7E442AA8DFE89B089F7
Authority key identifier: FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/6RW7J1IA_XIopyQ-wTGsFSAySS0.roa
Signing time: Sun 01 Jan 2023 21:35:25 +0000
ROA not before: Sun 01 Jan 2023 21:35:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201349
IP address blocks: 2a05:6280:dead::/48 maxlen: 48
2a05:6287:dead::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:c5:e6:e3:47:c7:e4:42:aa:8d:fe:89:b0:89:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7b99de49b6d7a2e267bb27bfd48ed394b84b7c
Validity
Not Before: Jan 1 21:35:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e915bb275200fd7228a7243ec131ac152032492d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1e:31:48:7b:b6:5c:ab:4f:4a:00:2d:78:e9:
7d:d6:7a:18:af:bd:9a:c8:e4:a2:ba:bc:74:ab:f4:
b5:f2:95:c3:27:53:a3:2b:49:2b:03:83:0b:37:52:
87:55:6c:00:43:40:15:85:80:22:14:ab:4e:8d:ff:
3a:1b:ad:73:91:49:d5:16:01:a8:ed:53:3a:5c:22:
9c:64:22:92:3c:64:4c:3b:25:42:07:62:4c:df:d1:
74:92:ac:47:17:c6:aa:3f:dd:aa:e8:51:1e:3f:a8:
2d:98:43:0c:38:3c:12:5b:76:1d:ad:f0:60:d3:d6:
67:60:75:41:38:a2:4c:3a:a7:d4:ff:6f:4f:50:f8:
a6:dc:53:e6:96:d6:f3:05:d8:b9:e1:62:93:28:47:
23:c7:e4:2a:e8:ba:20:77:d0:1a:4a:9c:84:d5:8e:
ae:5b:4b:e4:55:3a:63:68:d9:f7:01:2e:a0:ca:97:
6b:92:ea:f1:17:38:ea:d6:fd:c8:03:b0:ab:63:0d:
f0:8a:7f:62:f8:93:a7:8e:bf:be:c8:61:43:71:28:
b9:5e:c7:ec:8b:d5:ee:6d:bd:9e:51:c2:63:7f:e3:
2a:a7:9a:4a:cf:bb:37:14:88:df:f0:6e:33:23:ee:
5f:97:80:df:90:9a:b5:58:ef:d0:c5:67:fa:e3:bf:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:15:BB:27:52:00:FD:72:28:A7:24:3E:C1:31:AC:15:20:32:49:2D
X509v3 Authority Key Identifier:
keyid:FC:7B:99:DE:49:B6:D7:A2:E2:67:BB:27:BF:D4:8E:D3:94:B8:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_HuZ3km216LiZ7snv9SO05S4S3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/6RW7J1IA_XIopyQ-wTGsFSAySS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1d96a8-3627-46d4-b791-298d324f7542/1/_HuZ3km216LiZ7snv9SO05S4S3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:6280:dead::/48
2a05:6287:dead::/48
Signature Algorithm: sha256WithRSAEncryption
82:82:07:86:06:fd:7b:2e:c4:ff:00:ac:8f:f9:4b:d0:b7:dd:
3a:d0:ee:76:7f:c8:20:8c:65:87:09:e4:b2:6f:46:a2:a1:b7:
26:f3:80:45:8d:0d:37:d5:3d:a3:7b:16:c2:06:a9:23:c8:8a:
85:d9:29:85:21:2f:2f:e4:35:8f:84:68:5b:6f:43:4b:bd:cd:
0c:fc:92:0f:4a:d4:79:84:41:5a:1a:65:8a:20:e5:39:9d:92:
05:3f:ca:be:b2:16:4d:7a:34:19:6c:d7:c8:8d:ca:8e:bc:84:
e0:7e:b1:a9:50:e4:0f:1f:ee:df:4c:7a:ff:95:cf:c1:8f:ea:
8a:56:f1:cb:55:f5:1b:e0:3c:e0:04:b9:8e:6a:9d:7d:dd:f6:
45:d1:ae:47:77:8e:23:77:63:4f:1f:e9:04:6c:59:d4:61:c8:
d0:45:24:14:e2:87:49:0e:7b:9a:fe:34:78:2f:62:0c:2f:49:
c4:86:a0:23:17:b0:f8:f0:cb:3b:f2:7a:ba:d8:1a:fb:56:49:
14:57:d8:8c:e7:4e:ee:78:bf:20:a0:fe:59:ff:e4:34:0f:bd:
03:ee:55:a3:83:8f:58:00:85:fa:d8:e9:13:6d:0b:05:02:69:
85:a1:ea:6e:9c:d5:56:ed:20:cd:2e:18:30:8a:6f:cd:5f:9b:
3e:68:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:59 2024 by rpki-client on console-fra.rpki-client.org