Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/I7R_H9Jrzrxdn5rJxQNJr6ya5-o.roa
File: I7R_H9Jrzrxdn5rJxQNJr6ya5-o.roa (raw, json)
Hash identifier: jt2gvOeAWEe3Tc6VdlBM+6abMX+UvCpUyoVsrzOI4Cg=
Subject key identifier: 23:B4:7F:1F:D2:6B:CE:BC:5D:9F:9A:C9:C5:03:49:AF:AC:9A:E7:EA
Certificate issuer: /CN=e66cf1f3904620aa773742915add0da8e63501b8
Certificate serial: 018D69AE22A3FC15BCF30A7B4E786396449A
Authority key identifier: E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/I7R_H9Jrzrxdn5rJxQNJr6ya5-o.roa
Signing time: Fri 02 Feb 2024 11:57:16 +0000
ROA not before: Fri 02 Feb 2024 11:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215751
IP address blocks: 2a0b:4e00::/29 maxlen: 48
2a0b:4e04::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:ae:22:a3:fc:15:bc:f3:0a:7b:4e:78:63:96:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66cf1f3904620aa773742915add0da8e63501b8
Validity
Not Before: Feb 2 11:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23b47f1fd26bcebc5d9f9ac9c50349afac9ae7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:91:96:35:ad:3d:43:7e:5d:15:07:66:d2:
90:3d:21:2b:92:48:a0:a6:28:52:a6:bd:87:6b:2b:
4c:3b:b4:55:f7:41:2f:4b:0f:e9:53:8c:86:6d:a0:
fd:cb:8d:08:a9:94:8a:11:0a:6a:88:aa:0e:24:8f:
81:b0:4c:c4:f7:6e:3f:8e:47:42:f4:6a:c1:90:f9:
31:67:3f:f6:f0:6c:8c:9a:f2:61:00:90:b0:ea:c6:
f1:30:0c:d5:a7:f5:98:39:2c:17:c0:f5:49:85:04:
3b:9c:ec:df:0b:2f:5d:b8:b5:d4:e6:c8:53:37:e3:
5e:80:22:86:d5:90:b6:9d:5d:34:4c:29:35:61:99:
ba:84:77:3c:52:3b:05:5b:2f:e8:be:f5:e9:8c:df:
eb:03:67:ba:88:3a:56:c9:f0:ef:eb:ac:06:1a:26:
78:79:13:40:9b:0c:9b:b1:4e:90:52:34:a5:cc:d3:
a7:d3:c6:0d:37:f0:b0:cd:e2:3f:40:23:b5:6c:d0:
45:71:86:c7:ce:af:2a:22:59:ce:22:3a:38:b3:84:
89:2e:43:93:da:92:f2:f1:d1:cc:57:2d:68:36:d2:
ce:b7:1e:c8:ca:e2:fc:a3:05:d1:81:5d:27:c9:e9:
ad:f7:90:6e:53:f7:05:9f:b0:86:16:d8:fc:bc:fa:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:7F:1F:D2:6B:CE:BC:5D:9F:9A:C9:C5:03:49:AF:AC:9A:E7:EA
X509v3 Authority Key Identifier:
keyid:E6:6C:F1:F3:90:46:20:AA:77:37:42:91:5A:DD:0D:A8:E6:35:01:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mzx85BGIKp3N0KRWt0NqOY1Abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/I7R_H9Jrzrxdn5rJxQNJr6ya5-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a32411-1e43-412b-82fe-23eb3da556fc/1/5mzx85BGIKp3N0KRWt0NqOY1Abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e00::/29
Signature Algorithm: sha256WithRSAEncryption
20:81:30:ad:bd:ea:b8:10:1d:88:5f:24:f9:44:b5:df:8c:28:
76:44:1a:94:07:54:e5:d1:63:11:0f:1d:3a:69:56:cc:50:e8:
f8:b3:2b:93:05:e8:14:ab:86:53:36:8b:4f:1a:11:01:12:39:
cf:11:a2:3d:e8:6d:b1:c4:8a:a2:f6:8b:46:b1:c0:04:03:8d:
9f:01:0f:98:af:ea:7b:35:d4:da:85:b1:97:a0:ab:c6:68:98:
12:71:d9:5d:61:ca:b3:ad:f2:07:29:ba:ab:37:ab:5f:ba:8f:
82:d2:05:3a:d6:44:a6:2a:b7:93:68:c2:56:78:6d:13:af:32:
01:c4:00:8d:4b:18:47:71:bf:db:3f:04:5e:75:0d:99:eb:55:
6c:5a:3c:6c:80:23:64:6a:cf:3c:20:ff:4e:f0:db:df:6a:31:
5d:f7:f4:a3:d0:47:4e:df:fb:54:62:f3:f9:46:b7:9c:07:5e:
20:ca:5f:00:d2:33:77:45:63:4d:fb:b8:e1:e0:0c:99:fc:c1:
0a:c2:1a:44:10:70:04:f2:07:0c:06:a5:df:64:51:27:05:b6:
c5:11:cf:7a:f1:04:4b:07:e8:2b:b6:b5:5f:e5:87:e2:ec:f6:
b6:81:0f:42:4b:d3:5c:a3:d7:57:56:9c:ac:82:da:40:ac:03:
4a:52:6f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org