Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/fKFj9N0_odqphZwlgQFEKwcnxVk.roa
File: fKFj9N0_odqphZwlgQFEKwcnxVk.roa (raw, json)
Hash identifier: MOZofasXruHYODX+E0lVy59USDee5gUaZg/kU2ZzqZ8=
Subject key identifier: 7C:A1:63:F4:DD:3F:A1:DA:A9:85:9C:25:81:01:44:2B:07:27:C5:59
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01901019F368C9186BA215204A895F3AFC40
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/fKFj9N0_odqphZwlgQFEKwcnxVk.roa
Signing time: Thu 13 Jun 2024 05:37:34 +0000
ROA not before: Thu 13 Jun 2024 05:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215304
IP address blocks: 2a0f:7802:e200::/40 maxlen: 48
2a0f:7803:fb40::/44 maxlen: 48
2a0f:7803:ff90::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:19:f3:68:c9:18:6b:a2:15:20:4a:89:5f:3a:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 13 05:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ca163f4dd3fa1daa9859c258101442b0727c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:8c:66:d5:6f:c1:93:59:c2:3c:7e:c5:cf:
5a:73:e7:35:a4:03:ab:01:a3:9f:b9:3f:5f:77:a3:
eb:29:2a:e4:bd:18:74:72:c8:c3:b9:9c:cb:41:57:
c9:c5:89:c4:47:14:11:d7:53:84:90:dc:65:fd:97:
18:d0:09:9a:69:9c:fd:26:cd:3f:b7:6e:72:04:a5:
7b:1a:bf:44:6b:7f:9c:6a:0a:6d:2f:8d:07:ef:fe:
85:75:70:24:92:70:a1:cd:73:6c:2d:a2:6f:d9:b5:
c6:8e:dc:cd:0d:09:69:3c:0a:c1:28:1e:2c:db:1a:
11:d1:3c:a7:b1:b7:60:34:47:3f:9f:29:21:5e:99:
9e:a0:df:77:dd:bd:ee:50:63:14:3c:f5:a2:36:10:
fe:82:57:a8:ce:66:b2:23:9a:95:54:f8:1e:08:93:
87:f1:14:ed:b0:42:cb:5e:c1:43:16:09:0c:e3:b8:
46:ff:87:c1:32:24:f4:d1:b9:66:15:bc:50:eb:ab:
2b:29:ae:e7:cf:71:bf:c7:4b:18:c4:0c:45:9c:6e:
db:4d:58:fc:c7:a0:35:b0:a3:7b:93:72:ff:17:74:
07:3a:90:32:f2:3f:54:b1:07:a2:24:4e:63:ee:c2:
c2:a4:b5:e3:b6:04:e3:97:ec:47:9f:2f:6a:f0:2f:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:63:F4:DD:3F:A1:DA:A9:85:9C:25:81:01:44:2B:07:27:C5:59
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/fKFj9N0_odqphZwlgQFEKwcnxVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7802:e200::/40
2a0f:7803:fb40::/44
2a0f:7803:ff90::/44
Signature Algorithm: sha256WithRSAEncryption
93:e9:35:85:42:f5:ad:1a:57:66:09:6d:3f:bd:d9:b4:84:79:
94:a4:55:b2:0d:5e:ad:ec:13:d4:35:ae:55:d2:e1:ec:24:1c:
15:4e:6c:2f:4c:11:54:6a:d0:02:a4:c0:f2:c9:6a:07:cc:b5:
11:32:5f:14:b2:fd:64:f7:b5:b3:96:c1:cb:df:44:1e:c1:6f:
1c:74:e6:01:75:73:77:af:ff:fa:f7:ef:73:cf:3f:53:74:26:
f7:4b:a5:22:80:5f:68:4d:aa:fe:a6:70:b2:d2:6e:ba:e3:d0:
cd:86:b5:c0:98:28:60:f4:b6:27:7d:87:89:fe:2f:4f:ed:88:
e8:15:b0:5e:aa:f6:e6:01:06:e5:2b:46:32:e6:9b:18:af:da:
cf:21:d5:58:ea:aa:1a:ca:9a:1b:fb:b6:90:86:2d:96:d6:48:
9d:ce:f8:e8:cf:81:b2:da:b1:d8:13:9c:03:71:4a:84:3a:0c:
33:92:1b:1f:c1:6c:d6:10:11:a7:cf:77:cf:52:0a:2e:30:ec:
53:24:35:9c:5f:16:1a:68:e1:17:57:e4:43:e6:fe:f8:60:f7:
70:81:82:31:84:91:90:a5:ab:15:bd:ed:2c:d0:c7:5b:a1:ff:
77:ad:9a:fd:a3:92:1d:29:ca:46:a6:9c:ee:57:d9:96:45:03:
bc:96:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 03:11:53 2024 by rpki-client on console.sobornost.net