Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/NbcfAuwCRA_uiRZGzTMKIE38aXw.roa
File: NbcfAuwCRA_uiRZGzTMKIE38aXw.roa (raw, json)
Hash identifier: sGtdFKtsxS220JSun/sgVKMZLE73wtsv8G0HEG7AkV8=
Subject key identifier: 35:B7:1F:02:EC:02:44:0F:EE:89:16:46:CD:33:0A:20:4D:FC:69:7C
Certificate issuer: /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial: 018DE6613C58652F357FE1F79D97F47BA632
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/NbcfAuwCRA_uiRZGzTMKIE38aXw.roa
Signing time: Mon 26 Feb 2024 17:05:48 +0000
ROA not before: Mon 26 Feb 2024 17:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215419
IP address blocks: 2a0f:5840:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:61:3c:58:65:2f:35:7f:e1:f7:9d:97:f4:7b:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Validity
Not Before: Feb 26 17:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35b71f02ec02440fee891646cd330a204dfc697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:55:c7:16:85:8e:8e:dc:47:d5:ad:2d:25:
34:ce:fd:ed:16:bb:c1:8c:fe:22:84:88:e9:d6:f9:
88:48:b0:08:41:3a:92:31:1f:53:55:9d:9a:24:23:
11:04:44:0b:9e:12:92:f5:47:39:89:52:b4:72:22:
c0:e3:f2:14:bf:7a:b2:04:0a:71:7c:e6:8f:8c:29:
e2:ab:64:b4:5a:43:88:47:35:02:d4:3a:83:d1:46:
1b:8d:49:96:b8:54:8f:64:60:cc:fa:31:69:a5:c1:
e8:88:38:c5:d2:7c:12:c5:a0:1b:10:41:3f:42:e2:
06:4b:fc:0b:41:ad:41:bb:a1:64:86:e9:49:6d:c9:
c8:e5:65:99:ff:94:d3:12:d1:12:af:b7:ea:b9:c5:
81:21:0c:1c:01:86:f3:9a:f9:e6:14:b5:b5:a7:e3:
b8:a0:e5:a6:83:dd:5b:69:b9:51:4e:c1:78:21:83:
83:3d:42:82:f8:2d:7e:47:db:c2:1a:57:74:59:f8:
36:7d:ca:16:84:dd:57:d9:ed:c6:a2:c3:d4:eb:97:
ac:ce:6e:e2:f5:6f:53:ef:66:38:c3:c2:0e:17:9e:
88:b4:9e:e9:27:1b:fb:cd:76:49:b3:09:9f:ea:ec:
57:f6:43:90:31:76:51:32:7d:e4:b4:98:f3:f3:c8:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B7:1F:02:EC:02:44:0F:EE:89:16:46:CD:33:0A:20:4D:FC:69:7C
X509v3 Authority Key Identifier:
keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/NbcfAuwCRA_uiRZGzTMKIE38aXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5840:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:14:7a:f6:e7:b0:a9:cf:03:43:7a:f7:8e:16:e8:60:bd:2a:
d5:81:4d:f8:fd:ea:a3:1a:66:05:16:9b:16:12:c0:29:ce:e8:
53:ab:b5:fe:49:c6:4c:e4:c1:76:a8:5e:4c:5d:27:3d:8a:27:
d9:a2:7e:9b:29:dd:b6:4c:84:fd:15:19:c5:82:ea:fc:1b:38:
3b:2e:8a:4d:61:b8:6c:2a:45:68:a2:30:c6:9b:69:57:be:c5:
0f:62:75:c3:55:71:49:0e:af:59:40:a8:14:6c:76:03:10:0a:
02:1a:f2:23:92:73:cb:ff:d2:e2:35:c9:01:d8:0b:d2:50:f1:
cc:e1:c4:14:f9:73:60:00:39:ed:90:3f:49:59:0c:79:94:09:
53:38:43:2a:e1:ac:16:8b:27:0f:d3:c0:71:1b:89:12:22:49:
86:1b:ed:f2:04:9f:10:2e:80:6e:b0:00:1a:88:10:8c:24:2d:
a2:a6:45:44:6d:01:d5:33:d7:91:63:e6:79:4d:30:c1:13:61:
c8:bd:48:de:6f:da:57:71:0e:ce:47:43:3d:ea:00:a8:4d:69:
62:c2:8d:91:d0:36:70:ad:d8:08:a6:d7:f7:11:a7:cd:0b:a0:
fb:76:b9:7b:12:fe:0a:7a:c2:46:ca:77:62:0c:2b:78:b6:e8:
37:91:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:30 2024 by rpki-client on console.sobornost.net