Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/8TAkLWyDtbMY-orZybimS_cabyg.roa
File: 8TAkLWyDtbMY-orZybimS_cabyg.roa (raw, json)
Hash identifier: t6a/ggdzPFexxvVSE6Q7O1HbnFsojvXF/LcyXkfKUos=
Subject key identifier: F1:30:24:2D:6C:83:B5:B3:18:FA:8A:D9:C9:B8:A6:4B:F7:1A:6F:28
Certificate issuer: /CN=febb56fc3fef2a702ca890d445749f0fc56fc099
Certificate serial: 038A775C
Authority key identifier: FE:BB:56:FC:3F:EF:2A:70:2C:A8:90:D4:45:74:9F:0F:C5:6F:C0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rtW_D_vKnAsqJDURXSfD8VvwJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/8TAkLWyDtbMY-orZybimS_cabyg.roa
Signing time: Sat 01 Jan 2022 11:05:03 +0000
ROA not before: Sat 01 Jan 2022 11:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197560
IP address blocks: 2a0f:bd40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59406172 (0x38a775c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febb56fc3fef2a702ca890d445749f0fc56fc099
Validity
Not Before: Jan 1 11:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f130242d6c83b5b318fa8ad9c9b8a64bf71a6f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:13:89:40:13:9a:9d:c6:92:80:2e:70:2a:
0e:ae:8a:b5:28:e2:a8:db:59:81:52:d0:45:41:4c:
91:15:67:e5:3b:42:7c:13:f2:87:64:dc:a0:44:ef:
99:2d:06:f9:83:42:19:d6:c6:09:53:d3:c9:a4:db:
4d:9b:72:7c:43:bf:18:de:06:7e:3d:21:29:b7:cc:
70:3c:d8:e6:4a:a3:ba:43:c0:55:88:df:85:4d:df:
7e:2a:c1:38:0e:77:d1:d1:de:1b:4f:0d:2e:0b:3c:
5e:5e:5b:f0:d8:bb:60:31:8b:e9:a9:7d:69:80:02:
54:d2:d3:45:a4:e2:bf:ef:2e:ef:4e:ed:1f:df:74:
58:5c:89:05:22:76:f7:c9:6a:bc:ac:64:d8:aa:3c:
19:5c:c2:b7:f4:d5:a8:a6:ef:00:c3:6b:e1:79:1c:
52:87:88:5e:45:d3:6e:87:3e:f7:1d:84:8f:34:d8:
c7:d6:99:98:ee:4d:35:99:66:18:03:91:53:23:bf:
74:32:c7:ef:86:78:18:4e:82:f4:b0:05:58:55:d4:
f9:a5:5c:c0:e9:85:d5:7c:04:69:22:2b:fd:0c:02:
da:fe:78:94:77:ee:5f:a7:3c:76:41:80:4e:97:61:
bb:9f:3f:73:5d:16:df:f7:30:2a:70:67:6f:5f:6d:
10:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:30:24:2D:6C:83:B5:B3:18:FA:8A:D9:C9:B8:A6:4B:F7:1A:6F:28
X509v3 Authority Key Identifier:
keyid:FE:BB:56:FC:3F:EF:2A:70:2C:A8:90:D4:45:74:9F:0F:C5:6F:C0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rtW_D_vKnAsqJDURXSfD8VvwJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/8TAkLWyDtbMY-orZybimS_cabyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4cbe10-98b3-40fc-b019-b24dc8f7c791/1/_rtW_D_vKnAsqJDURXSfD8VvwJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bd40::/32
Signature Algorithm: sha256WithRSAEncryption
51:6a:b3:a0:cd:72:1b:31:b9:13:fa:43:e1:1e:e6:34:25:92:
67:51:51:6e:31:0e:b0:a2:88:91:7b:7c:34:68:52:e0:ff:db:
30:63:c1:08:23:84:35:c1:16:31:e4:2c:77:6d:5b:83:d1:99:
5a:9a:77:4b:21:e5:87:ca:fc:d5:e8:84:ee:34:87:d9:f3:d1:
34:dd:66:3b:e5:c4:6d:88:13:29:5d:f9:79:28:7b:e5:b5:99:
a3:ea:93:58:30:7d:54:b5:b6:04:64:2b:15:e4:67:98:ce:21:
ea:98:79:ab:8e:0d:67:4e:e4:59:d7:67:69:4c:0e:74:e3:d8:
9f:d1:36:77:81:ba:77:ec:be:6b:fc:25:8a:07:7f:6c:d0:59:
8b:6c:bb:ab:3a:13:a3:4a:9b:2f:10:de:a2:0a:e5:3a:d5:c5:
08:f2:c8:85:5e:a0:73:84:e1:74:b2:b9:7c:12:d5:7a:08:17:
95:06:45:85:b2:16:c5:7e:fd:fa:9f:7b:0c:f9:46:dc:fa:85:
2a:02:d0:03:c5:0e:44:6b:f7:39:c6:88:b0:5c:25:f4:f0:72:
7a:13:79:ab:0b:d4:0c:ce:85:b9:b0:af:f7:be:82:9d:b0:e6:
15:ce:20:62:a1:3d:d4:fc:19:cf:b9:08:31:1b:11:3b:00:0b:
be:de:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:29 2025 by rpki-client