Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/Z_BVADB4WMhVcUpDSETJ213Mxi8.roa
File: Z_BVADB4WMhVcUpDSETJ213Mxi8.roa (raw, json)
Hash identifier: rjxHLJjdavtffO+XsizPuZIXZ6JKcAqB5IbYYZJs3ic=
Subject key identifier: 67:F0:55:00:30:78:58:C8:55:71:4A:43:48:44:C9:DB:5D:CC:C6:2F
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 01939DA0D08ED0EBFED6E5F03AB27E54DF10
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/Z_BVADB4WMhVcUpDSETJ213Mxi8.roa
Signing time: Fri 06 Dec 2024 20:19:42 +0000
ROA not before: Fri 06 Dec 2024 20:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20940
IP address blocks: 2a10:fa44::/48 maxlen: 48
2a10:fa44:100::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:a0:d0:8e:d0:eb:fe:d6:e5:f0:3a:b2:7e:54:df:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Dec 6 20:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f05500307858c855714a434844c9db5dccc62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:4f:bb:ff:7f:d5:f6:24:62:c7:47:56:04:
b8:04:3d:d8:7e:f2:2e:e4:25:76:1e:f1:3e:df:ea:
c7:6d:13:b1:2b:a1:4b:62:c0:cd:96:d0:36:c4:ec:
4a:de:59:b9:81:97:6e:6a:a6:cd:6d:af:ab:9f:7e:
79:c7:86:52:ba:24:94:38:7c:24:ab:25:d8:4c:ad:
63:de:25:ee:cf:05:50:a0:04:51:0a:fd:5e:6f:a2:
f7:39:8f:2d:8b:8b:ac:7c:a3:b3:d0:87:92:99:2a:
9b:be:4a:98:60:8b:15:a6:59:7d:8e:99:57:fc:be:
de:8c:30:1b:a1:60:cd:0e:fb:bb:12:f9:b5:1a:79:
2b:b8:6e:45:2d:02:09:8b:76:6b:52:56:c8:80:e1:
f7:88:b4:2d:d7:34:82:c9:91:79:ee:68:3a:6f:d3:
25:dc:4b:dd:89:3e:c6:48:42:a2:94:59:e2:ad:41:
7d:f6:5e:8a:3f:96:6f:60:a9:d3:db:a9:fd:b0:94:
a9:3c:00:43:9f:fa:11:e4:7c:6d:07:c1:bd:e7:1c:
a8:a5:0a:07:8e:38:04:92:0b:65:19:7e:41:b3:5c:
9e:41:b6:31:76:c2:a7:b3:71:74:ad:cf:ec:fd:94:
70:31:84:73:65:60:49:d0:cf:1a:14:ce:40:79:ea:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F0:55:00:30:78:58:C8:55:71:4A:43:48:44:C9:DB:5D:CC:C6:2F
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/Z_BVADB4WMhVcUpDSETJ213Mxi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa44::/48
2a10:fa44:100::/64
Signature Algorithm: sha256WithRSAEncryption
2b:c3:83:b3:ae:95:3c:f8:4b:a9:4b:70:50:72:ca:54:f1:8b:
78:21:11:71:7e:0e:ff:d6:87:5f:a4:59:6a:75:13:9e:c0:68:
50:b9:d4:73:a8:81:b3:94:0c:4f:3f:b3:f8:b1:8e:28:db:6d:
c6:02:4b:73:0f:ef:21:95:c7:34:a8:8e:94:bf:dc:fa:3d:6e:
e3:04:26:14:81:18:b1:08:25:1b:c3:15:b3:76:45:4a:16:19:
56:c9:66:14:62:56:e8:1c:d1:1d:14:28:b5:cf:64:97:81:59:
b6:03:d7:cb:00:f5:3c:cb:70:dc:76:22:96:e8:c1:07:d7:22:
f7:57:99:db:67:cf:c5:19:b2:89:42:9d:f6:6d:52:2c:fc:39:
4d:1e:34:68:e7:15:9e:92:da:3c:42:b4:ce:07:40:8c:9e:ae:
6b:2e:b9:fc:61:14:fd:03:02:12:81:14:e7:3f:de:81:7b:93:
a8:4f:5e:e8:ac:71:5e:9a:c4:cf:17:e4:cd:74:4f:52:ff:1a:
6d:b1:73:a0:ee:d0:72:8c:16:c5:5a:03:af:63:31:0f:1e:bb:
b9:1b:c0:21:95:e7:6d:6d:87:cf:b6:5f:7b:c5:65:50:96:75:
78:27:7c:7a:a2:27:37:bd:c9:4d:f5:a6:c4:38:c9:ba:2c:86:
65:36:84:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:30:38 2024 by rpki-client on console.sobornost.net