Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/g9-aBkivbylw47aydgdc_p3ar6U.roa
File: g9-aBkivbylw47aydgdc_p3ar6U.roa (raw, json)
Hash identifier: tYu3DVsNErvLfu9ytBh2s08E7dw0JXRJup4ifr5XeAE=
Subject key identifier: 83:DF:9A:06:48:AF:6F:29:70:E3:B6:B2:76:07:5C:FE:9D:DA:AF:A5
Certificate issuer: /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial: 018EB82852DAD86EEBAA6CC25446E9CA5F83
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/g9-aBkivbylw47aydgdc_p3ar6U.roa
Signing time: Sun 07 Apr 2024 10:43:54 +0000
ROA not before: Sun 07 Apr 2024 10:43:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208265
IP address blocks: 2a0f:6a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b8:28:52:da:d8:6e:eb:aa:6c:c2:54:46:e9:ca:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Validity
Not Before: Apr 7 10:43:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83df9a0648af6f2970e3b6b276075cfe9ddaafa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c0:67:ae:0e:3c:a0:7c:fc:79:87:60:8b:bc:
af:7a:05:69:18:a5:ed:47:85:d1:36:4d:1f:47:d3:
8e:a7:e8:2f:29:23:ed:3e:79:72:5f:85:3e:9e:81:
4c:ff:17:65:94:b4:1c:0a:39:89:02:af:3c:5b:32:
c4:f4:44:14:e5:15:e5:00:0a:66:6f:e1:c4:37:44:
59:20:6a:31:e0:7f:c6:b0:e9:d4:77:3b:b2:fb:61:
88:93:0e:f1:9c:4e:51:0d:61:8e:dd:22:0e:0f:e1:
d8:11:3a:03:24:c5:98:fa:6b:b6:cf:a3:1a:69:54:
d1:14:48:43:e0:7f:22:ff:5c:c3:69:56:e1:bb:07:
d6:d6:47:21:43:8b:5d:8b:47:2b:6b:5a:90:a0:44:
24:82:67:0b:e0:e3:5c:77:9b:9f:8b:63:4f:1b:10:
cb:04:eb:15:30:98:86:70:17:bc:52:17:c3:92:e6:
24:a0:6d:a6:40:78:5c:99:0d:52:fe:0a:8f:5f:65:
b5:03:48:20:12:fc:12:0c:b5:6c:61:21:8c:7e:96:
2a:1b:d0:a6:a2:4a:e8:51:d6:83:79:79:67:f0:c1:
f4:76:16:99:82:9a:aa:d3:72:15:b1:30:ca:51:5b:
89:be:b1:f4:3b:06:34:86:c7:4a:7d:49:e0:c3:a5:
aa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DF:9A:06:48:AF:6F:29:70:E3:B6:B2:76:07:5C:FE:9D:DA:AF:A5
X509v3 Authority Key Identifier:
keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/g9-aBkivbylw47aydgdc_p3ar6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6a00::/29
Signature Algorithm: sha256WithRSAEncryption
01:bc:e6:da:7f:e6:54:42:88:d5:9f:79:9c:3b:03:42:1d:86:
bf:c8:dd:29:cc:fb:78:42:ea:5b:1e:45:e1:e6:ca:dc:51:45:
44:57:50:92:0a:08:df:d7:ad:97:31:a9:99:66:b9:9e:94:ba:
84:71:ca:1d:9e:24:88:d9:30:74:4a:64:b7:54:3f:87:fb:17:
f6:df:11:d3:4f:c1:80:c4:81:a7:45:93:f2:de:a5:25:69:d3:
1b:c6:17:2a:34:3c:0a:48:b5:fc:a2:bb:ad:61:84:53:a0:1b:
ab:5c:e8:16:61:15:96:59:40:62:d3:34:f1:97:69:e4:9e:1c:
39:e2:7c:1f:ab:81:a0:00:23:80:67:bf:ba:21:d6:96:3d:0c:
ce:8e:30:4d:05:8d:25:79:34:73:54:f3:d2:f7:0c:c9:d0:e0:
2c:b8:ac:24:9c:63:d9:9a:1d:6e:45:81:ee:4e:f5:ca:1a:05:
f8:ee:90:25:d8:50:93:7e:d9:97:3c:fb:08:a8:f8:2b:d2:4c:
65:88:82:e5:91:9c:af:21:5a:4a:f3:6d:35:4e:bb:c3:c4:a0:
ea:8b:0f:b3:d1:4e:1c:5e:0a:7d:0f:9d:7d:e1:32:c3:28:7c:
b6:e2:78:42:45:5e:00:55:3c:47:47:b5:21:1d:14:50:4b:7d:
3c:3b:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:49 2024 by rpki-client on console.sobornost.net