Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/vcJ2zML5iVpdcXOBYPkyJyJFDAo.roa
File: vcJ2zML5iVpdcXOBYPkyJyJFDAo.roa (raw, json)
Hash identifier: JuUARzm55PXYXw/zW8k/Ggan37DuGphELmsfAKOmTZM=
Subject key identifier: BD:C2:76:CC:C2:F9:89:5A:5D:71:73:81:60:F9:32:27:22:45:0C:0A
Certificate issuer: /CN=835defb86d4665b7abda63bfe8d9b07d06f96b27
Certificate serial: 01856C65B81219FD948FA8D83E93B027EB75
Authority key identifier: 83:5D:EF:B8:6D:46:65:B7:AB:DA:63:BF:E8:D9:B0:7D:06:F9:6B:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g13vuG1GZber2mO_6NmwfQb5ayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/vcJ2zML5iVpdcXOBYPkyJyJFDAo.roa
Signing time: Sun 01 Jan 2023 08:14:43 +0000
ROA not before: Sun 01 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209916
IP address blocks: 2a0e:8a80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b8:12:19:fd:94:8f:a8:d8:3e:93:b0:27:eb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835defb86d4665b7abda63bfe8d9b07d06f96b27
Validity
Not Before: Jan 1 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdc276ccc2f9895a5d71738160f9322722450c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:38:f0:2b:50:7e:8f:0c:88:8e:7b:09:20:
ff:9a:97:74:dd:f1:06:81:80:c6:c7:59:01:98:c6:
7a:ef:45:3e:43:60:3e:96:7e:d4:20:cb:91:8b:14:
69:19:43:e0:b4:9b:da:17:22:ce:52:ea:82:fd:0d:
8d:22:e3:7f:ed:1d:06:1c:12:7f:10:a6:88:cb:6f:
fe:e0:d1:ae:32:8b:9e:bd:f9:75:ab:80:a6:93:29:
71:f6:36:da:ea:1b:54:c1:1d:8d:ef:2c:13:c4:1b:
e1:13:1e:2f:e5:c0:9c:4a:1c:2e:c2:25:5a:af:dd:
e1:52:f0:8a:09:c2:e5:3d:ee:96:12:30:aa:41:18:
ec:0d:4c:6a:0e:98:12:da:f5:bd:37:b2:42:ef:36:
76:dc:b1:64:55:42:82:63:dc:c1:8d:dd:7a:db:36:
df:65:ed:15:96:9e:fb:c5:eb:f8:d8:8e:e7:cb:6a:
fd:53:a9:ca:59:6e:53:9e:a1:12:ef:89:14:24:9d:
a5:ed:6b:e6:e2:e8:f4:2d:67:5d:c7:32:e8:eb:b7:
fe:4f:47:be:e1:3e:29:c3:cc:61:81:e2:ae:a6:c3:
53:48:77:cd:ce:23:15:7b:7c:3d:2c:78:67:01:37:
36:fe:b4:1c:40:e5:5a:46:ac:80:d0:56:36:7d:97:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:76:CC:C2:F9:89:5A:5D:71:73:81:60:F9:32:27:22:45:0C:0A
X509v3 Authority Key Identifier:
keyid:83:5D:EF:B8:6D:46:65:B7:AB:DA:63:BF:E8:D9:B0:7D:06:F9:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g13vuG1GZber2mO_6NmwfQb5ayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/vcJ2zML5iVpdcXOBYPkyJyJFDAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/41f84f-a80c-4247-b707-6ac526ed1b60/1/g13vuG1GZber2mO_6NmwfQb5ayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8a80::/29
Signature Algorithm: sha256WithRSAEncryption
45:28:fd:3b:ab:af:86:5b:9c:5a:89:07:f4:e5:77:96:ac:90:
63:a7:1d:0c:ef:3f:36:0b:9f:22:65:05:76:a5:c0:d4:c9:66:
45:95:cb:e1:43:98:d1:d9:40:02:1e:53:43:23:60:95:32:94:
d1:6f:df:6e:e3:27:9b:3c:a7:7a:15:e6:ec:55:6e:de:ca:18:
09:51:0d:4f:59:c4:82:92:93:d5:3c:6f:53:c9:34:b0:e2:bc:
2a:11:50:61:a2:a0:cf:6b:e9:83:06:48:a0:c3:15:bc:38:51:
b1:e9:46:c6:4b:ad:c8:84:c8:69:b8:ee:c4:cf:1b:1e:ee:91:
ba:27:e4:0d:41:63:da:e7:6d:0d:1d:ce:87:c6:2f:7e:8f:38:
21:2f:05:f3:44:91:c7:45:2e:e6:1f:fc:73:e5:16:00:52:80:
78:d4:1c:d1:72:03:bf:78:4c:9b:dd:57:6b:cf:34:47:60:b2:
20:60:a7:05:7a:e5:4b:4d:ce:88:26:1e:5f:32:9d:b1:2b:ef:
15:e1:b0:8b:53:ca:89:d0:c4:9f:04:61:4f:7b:b4:05:38:0e:
88:f9:fb:d6:d3:39:78:e8:c9:4d:b4:9e:68:5b:f9:5b:d5:0b:
17:51:bb:3d:e3:79:6f:d5:a1:9b:0a:0a:7f:88:8b:a6:2e:1c:
3f:9c:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org