Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/p6szAUS4fwB1j1yDQpt3poIJnTc.roa
File: p6szAUS4fwB1j1yDQpt3poIJnTc.roa (raw, json)
Hash identifier: bZpOkbXt5ZIQ7gfAb4GDhLUh4NGnw1jjLMIkKZQ1APw=
Subject key identifier: A7:AB:33:01:44:B8:7F:00:75:8F:5C:83:42:9B:77:A6:82:09:9D:37
Certificate issuer: /CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Certificate serial: 0186CBEE6CF298CA95869921868771723C8C
Authority key identifier: 4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/p6szAUS4fwB1j1yDQpt3poIJnTc.roa
Signing time: Fri 10 Mar 2023 14:30:45 +0000
ROA not before: Fri 10 Mar 2023 14:30:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 2a09:3704::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:ee:6c:f2:98:ca:95:86:99:21:86:87:71:72:3c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7cc1f58bdd258c8d92d342bee6a2ad4ce3f744
Validity
Not Before: Mar 10 14:30:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ab330144b87f00758f5c83429b77a682099d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:05:65:40:d4:00:64:b4:e8:32:11:84:30:
e8:9c:c4:69:14:df:6e:52:b2:af:23:4a:02:67:4e:
6d:e5:6d:35:88:32:89:98:56:16:e6:71:97:ed:b4:
f1:c1:0c:23:a2:df:f5:c3:21:38:8c:c3:74:82:25:
eb:3c:24:ad:bd:1c:bd:93:58:2e:42:10:27:f5:a6:
81:d0:8b:27:61:dd:58:e9:df:41:e9:1f:d2:23:bf:
f2:55:75:11:84:d7:71:82:a9:ab:15:fe:a3:5c:e0:
94:01:d4:fe:54:94:d3:d0:1a:29:fd:48:56:e5:57:
78:a7:ff:77:55:c9:f1:d8:64:bc:6e:bf:b7:5e:b3:
01:1f:66:63:b4:c7:bc:a6:17:82:6b:3f:42:8b:61:
ac:11:8e:be:39:fe:9d:c5:73:58:0c:9e:da:e5:4a:
36:cd:cc:0a:d8:f2:bc:20:d3:16:7e:b4:6b:7c:9c:
1c:14:6c:be:b0:69:fe:f5:78:29:62:b0:9b:54:dd:
c4:4f:e3:53:78:77:5a:bc:61:2b:24:71:55:9d:a4:
22:92:16:66:f4:cb:b0:95:11:c0:c2:64:11:49:02:
62:61:8a:0c:31:43:77:e7:f7:dd:17:d7:15:ea:5b:
c0:fc:4e:f5:3b:fb:a9:29:4f:13:34:a9:4f:f1:1b:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:33:01:44:B8:7F:00:75:8F:5C:83:42:9B:77:A6:82:09:9D:37
X509v3 Authority Key Identifier:
keyid:4B:7C:C1:F5:8B:DD:25:8C:8D:92:D3:42:BE:E6:A2:AD:4C:E3:F7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3zB9YvdJYyNktNCvuairUzj90Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/p6szAUS4fwB1j1yDQpt3poIJnTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d47f87-b34f-49ce-bf1e-ac8236bdc88c/1/S3zB9YvdJYyNktNCvuairUzj90Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3704::/32
Signature Algorithm: sha256WithRSAEncryption
83:46:0f:f5:37:7f:97:65:e5:39:74:d6:68:20:1c:6a:b3:bc:
1c:19:98:7a:3a:96:5c:89:ea:85:46:4e:c5:d8:48:e9:01:12:
c7:77:14:a9:de:b3:b1:a1:a5:02:10:39:b9:0c:2d:19:3e:21:
f4:ae:a2:d3:4d:93:e5:29:33:06:d6:d7:ca:4f:d7:4f:49:36:
0f:b1:67:4a:4d:ab:dc:8a:da:bc:01:b4:10:4e:e3:03:10:fe:
8d:18:ab:96:51:9b:0f:1b:06:b0:d7:bc:1a:79:99:a3:20:83:
d2:c0:09:9c:12:aa:dc:63:9c:12:33:9e:9a:22:66:db:45:03:
0e:76:8f:1c:90:b3:40:2c:f9:9d:70:3e:d5:2a:27:94:58:ab:
c2:75:0d:82:19:b8:49:7a:4f:77:54:56:e5:42:13:52:52:d8:
78:61:d3:ec:4c:d7:75:cf:b7:28:b6:2f:39:ce:c5:1b:9b:8d:
4c:49:1f:57:30:3b:b5:74:13:ba:9f:c2:2a:be:7d:4a:51:55:
25:62:51:45:13:4b:8c:9d:9c:79:a2:9d:b1:e0:09:e1:5b:a0:
fb:af:0c:db:54:cd:d4:b0:06:d2:cc:0f:aa:d6:5c:7e:45:d2:
a8:95:20:11:21:12:0b:7d:40:47:58:e4:bb:24:35:60:30:fd:
e4:04:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-fra.rpki-client.org