Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/nWw60G7Se-pcpMQhW-vb2mvkzSM.roa
File: nWw60G7Se-pcpMQhW-vb2mvkzSM.roa (raw, json)
Hash identifier: 6UFClJYiknZqp9evpC+yskLDprtV3n/QiOWbj3ByRNc=
Subject key identifier: 9D:6C:3A:D0:6E:D2:7B:EA:5C:A4:C4:21:5B:EB:DB:DA:6B:E4:CD:23
Certificate issuer: /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial: 01856CCAD1184BFB1FCC27CEE5797EC73555
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/nWw60G7Se-pcpMQhW-vb2mvkzSM.roa
Signing time: Sun 01 Jan 2023 10:05:09 +0000
ROA not before: Sun 01 Jan 2023 10:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59613
IP address blocks: 2a02:2278:fffd::/48 maxlen: 48
2a02:2278:fffe::/48 maxlen: 48
2a02:2278:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d1:18:4b:fb:1f:cc:27:ce:e5:79:7e:c7:35:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Validity
Not Before: Jan 1 10:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d6c3ad06ed27bea5ca4c4215bebdbda6be4cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:0a:57:f9:2c:e3:c1:28:f4:bb:4f:29:53:
de:bc:04:b2:56:28:c3:1d:c7:73:16:4a:a0:57:58:
6f:d1:1d:19:e5:f6:01:13:e7:1e:f7:d1:98:73:45:
af:3a:1d:77:de:f7:10:df:a1:0a:92:47:0d:40:8b:
36:eb:c1:46:25:ba:cf:3f:e9:a1:49:ec:1f:12:68:
a3:fb:b6:23:ae:b8:73:02:77:26:a4:64:f1:a8:cb:
8e:73:70:56:f3:ae:df:bd:f8:ac:e1:8a:cd:7b:75:
cc:73:cb:53:17:11:0e:da:13:e2:e8:06:a8:eb:b1:
b2:fd:9a:6e:ba:e1:40:28:44:46:b6:d5:b3:00:33:
89:5e:71:40:71:af:fd:25:6d:fb:57:8f:fc:32:7a:
f0:34:83:9e:5a:48:da:35:06:4d:44:bf:d1:64:d2:
d2:6a:c4:80:93:25:76:b8:c3:cd:44:eb:fd:40:fb:
54:a0:fd:f0:be:fd:da:ba:cf:32:8c:6d:63:c4:70:
72:dd:a3:23:64:87:53:ba:66:b1:4d:26:f7:40:f9:
20:f4:df:86:17:10:fb:6c:9c:14:38:3e:e2:6d:46:
50:ab:ef:e6:ee:de:30:4a:45:55:81:37:ce:00:b7:
41:73:84:c9:b8:f9:d9:c2:e0:8f:cb:c9:74:0c:39:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6C:3A:D0:6E:D2:7B:EA:5C:A4:C4:21:5B:EB:DB:DA:6B:E4:CD:23
X509v3 Authority Key Identifier:
keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/nWw60G7Se-pcpMQhW-vb2mvkzSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2278:fffd::-2a02:2278:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:35:6b:5e:4e:f4:a5:bd:2f:4a:65:fe:60:43:b2:46:a3:15:
68:e3:19:91:94:59:26:f1:13:43:4d:53:a1:7b:16:4f:9c:3c:
45:fa:3a:7d:59:3b:19:22:12:ce:9c:b6:20:87:13:d0:f0:5a:
12:b8:17:2d:d4:a9:eb:e2:1d:ca:2b:37:70:41:ae:cf:96:b4:
4f:cb:89:db:43:9e:4d:22:ad:eb:77:be:b3:15:56:bb:33:43:
bf:da:d9:d2:80:34:21:31:14:ff:db:f0:6c:ef:81:26:09:3a:
46:a2:20:64:2b:3f:16:8a:31:76:14:75:df:a3:dd:12:d4:a5:
14:3b:54:3b:5d:ca:7b:b1:83:0d:7f:89:14:37:78:87:94:bf:
4d:5f:d1:67:8a:16:dd:0a:5e:1e:31:0e:c1:20:bd:08:82:fa:
38:b6:2a:be:ba:6f:11:d6:09:e8:29:c3:3d:58:e1:c5:e3:fc:
3b:fd:70:bc:ef:c4:9c:47:be:e7:7b:ea:17:fe:e2:5b:d1:4f:
a5:9f:fc:ca:1e:f3:d8:c5:6c:1c:22:14:db:c2:05:6d:32:9d:
cc:cd:05:63:bf:77:b9:c9:3d:e2:3d:03:2c:7e:66:aa:1c:ee:
5c:c6:da:3a:8f:c4:66:14:ef:88:16:9b:db:22:a7:9e:ef:bf:
11:5b:16:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:38 2024 by rpki-client on console-fra.rpki-client.org