Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/ep3uQOql9PXcVCJ1uyYmrsWIeeA.roa
File: ep3uQOql9PXcVCJ1uyYmrsWIeeA.roa (raw, json)
Hash identifier: +wbb8HJJFV4NMIP71uMilTMo7GQfHRPa9f0YJWmcb2M=
Subject key identifier: 7A:9D:EE:40:EA:A5:F4:F5:DC:54:22:75:BB:26:26:AE:C5:88:79:E0
Certificate issuer: /CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
Certificate serial: 05599423
Authority key identifier: FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/ep3uQOql9PXcVCJ1uyYmrsWIeeA.roa
Signing time: Sat 01 Jan 2022 05:06:31 +0000
ROA not before: Sat 01 Jan 2022 05:06:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 2a06:8187:fb00::/40 maxlen: 40
2a06:8187:fb20::/44 maxlen: 44
2a06:8187:fb10::/44 maxlen: 44
2a06:8187:fe0a::/48 maxlen: 48
2a06:8180::/48 maxlen: 48
2a06:8187:fd06::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89756707 (0x5599423)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff4c95c7bc7a8a7cb9cbb7319c81b0acaa4695e
Validity
Not Before: Jan 1 05:06:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a9dee40eaa5f4f5dc542275bb2626aec58879e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:05:40:b8:bd:b3:a3:36:f3:90:09:7c:7d:
31:08:13:da:50:53:5b:a4:be:93:33:23:7d:c7:a7:
74:0e:59:3f:0a:38:e9:94:fc:9c:29:cf:f8:42:ec:
31:f6:0f:d8:7d:50:99:c1:d3:c3:34:7c:a9:29:63:
4d:07:0d:c5:d0:78:b7:1f:52:67:b9:ea:b8:0c:41:
55:86:cf:60:fc:4c:75:80:17:99:2f:b4:f1:82:48:
ca:19:32:33:e5:4a:e5:2f:c8:25:c3:90:c8:0f:5a:
f6:9f:17:31:fb:72:08:cb:79:5c:44:28:d5:d5:42:
8d:ad:c9:cb:3e:f0:10:fb:96:23:c3:64:44:66:82:
61:34:ba:73:4f:e1:ca:71:81:f7:3c:6c:26:36:c8:
aa:d5:cd:a6:c5:7d:0b:92:8a:b2:7d:7b:46:26:83:
44:58:b9:e9:83:a2:60:3d:f1:db:40:67:fd:51:e2:
dd:dd:91:eb:2e:44:88:34:00:21:c3:1f:20:03:4a:
f1:64:2c:1c:88:2f:25:4b:2a:0e:54:8e:15:c1:0a:
de:94:bd:66:9a:4c:e2:58:46:44:8f:15:96:f8:cb:
80:5f:33:2d:ea:d8:a0:2a:8b:82:45:f3:bc:bc:ef:
10:49:fd:56:47:b8:af:25:e5:c4:32:3b:a2:12:47:
f4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9D:EE:40:EA:A5:F4:F5:DC:54:22:75:BB:26:26:AE:C5:88:79:E0
X509v3 Authority Key Identifier:
keyid:FF:F4:C9:5C:7B:C7:A8:A7:CB:9C:BB:73:19:C8:1B:0A:CA:A4:69:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__TJXHvHqKfLnLtzGcgbCsqkaV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/ep3uQOql9PXcVCJ1uyYmrsWIeeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7c8ca1-31a9-42e0-80ae-1e6fb3a76a6a/1/__TJXHvHqKfLnLtzGcgbCsqkaV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:8180::/48
2a06:8187:fb00::/40
2a06:8187:fd06::/48
2a06:8187:fe0a::/48
Signature Algorithm: sha256WithRSAEncryption
09:8e:fe:3e:93:4b:b6:62:b9:7e:db:7c:06:09:94:27:f8:a9:
57:53:9e:e4:9e:11:b0:18:5b:d1:c2:ab:e7:0d:f5:67:3b:c2:
c6:2a:f0:50:f2:6f:61:d2:85:04:6f:7a:6e:c2:5d:08:e0:f3:
fc:a2:74:94:8f:8a:fc:a3:88:40:75:c8:43:71:26:b4:71:c4:
2d:7e:8a:c6:d6:07:4c:f2:eb:14:69:82:0f:64:89:0c:2e:85:
c5:a8:ce:83:af:db:99:fd:5e:2e:eb:fa:6b:eb:b5:6d:27:28:
c2:dd:42:51:9e:74:d0:97:43:fb:d1:3d:c6:23:e5:f6:67:1e:
f7:31:16:f9:14:a5:28:92:9b:5f:36:d4:e4:da:d5:04:fd:f5:
38:de:9a:48:c0:de:f5:92:62:ff:16:68:bf:cb:9e:31:f3:8e:
48:12:af:cf:06:b6:1b:d9:da:18:51:b7:a5:8c:e5:67:93:fd:
c1:3e:d7:08:35:aa:e6:2a:5f:57:c5:6d:ad:bc:23:21:d4:b6:
4d:67:df:bd:55:1b:a4:b8:e6:bd:3b:5d:ff:fd:b8:36:d6:d0:
c5:85:e6:eb:4a:ea:dc:34:d9:3a:26:df:34:03:2b:a1:b8:64:
71:b8:b8:93:da:5b:65:02:86:5a:4e:14:a5:45:c3:96:fa:10:
ff:29:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-fra.rpki-client.org