Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/xYJUPaYA1uPmEA-S0th8I9jrlkQ.roa
File: xYJUPaYA1uPmEA-S0th8I9jrlkQ.roa (raw, json)
Hash identifier: sXau6FCaR2Kju8eXH7Vn6hSpiVHkTpfDKC/lyth3sjY=
Subject key identifier: C5:82:54:3D:A6:00:D6:E3:E6:10:0F:92:D2:D8:7C:23:D8:EB:96:44
Certificate issuer: /CN=112931ac561893f844ec0af2c5ded9902fbb2793
Certificate serial: 018486A97874267E15955999A1719AE8A928
Authority key identifier: 11:29:31:AC:56:18:93:F8:44:EC:0A:F2:C5:DE:D9:90:2F:BB:27:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESkxrFYYk_hE7Aryxd7ZkC-7J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/xYJUPaYA1uPmEA-S0th8I9jrlkQ.roa
Signing time: Thu 17 Nov 2022 17:36:04 +0000
ROA not before: Thu 17 Nov 2022 17:36:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:a9:78:74:26:7e:15:95:59:99:a1:71:9a:e8:a9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112931ac561893f844ec0af2c5ded9902fbb2793
Validity
Not Before: Nov 17 17:36:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c582543da600d6e3e6100f92d2d87c23d8eb9644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:52:d7:c5:59:83:34:e0:72:5e:a0:65:5a:0a:
86:d8:5d:65:ef:59:71:b0:82:c2:39:71:0b:15:8e:
ac:ab:74:49:b1:1a:e6:12:90:ea:14:bc:64:07:fa:
62:81:93:93:67:e2:83:c6:07:9d:f1:02:48:25:be:
4b:d9:6c:42:90:cb:65:11:a2:df:5b:72:5b:cd:e0:
8e:ad:5a:1b:a7:6e:41:c7:e2:17:0c:16:aa:75:22:
3c:63:a2:06:6f:df:f7:62:37:ad:6a:6d:cc:b5:8a:
bc:fa:42:d8:ce:6f:5b:c8:f6:cb:00:4c:b7:46:08:
ed:51:ed:e2:ed:a2:e7:62:69:0d:3f:cb:57:df:0b:
5d:aa:90:b4:cf:fd:c6:ec:86:ef:bd:ab:64:72:cd:
19:81:a1:22:9c:d5:96:37:e4:fb:35:3a:19:ef:4d:
aa:24:29:56:54:22:db:4a:85:67:ff:5e:20:fd:ae:
e1:fe:1e:a7:24:cd:e6:fe:de:31:b5:7a:e5:46:ec:
7d:11:3c:d0:ca:cf:c3:3a:1e:1c:d6:a3:4c:5f:12:
a2:bf:7a:a9:fe:35:00:65:3e:80:f1:10:9b:5f:d1:
4e:05:55:22:a2:e1:3a:04:c1:e6:82:21:5b:c7:82:
1d:2f:01:0c:37:68:b6:3b:47:88:54:e2:30:77:a1:
e0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:82:54:3D:A6:00:D6:E3:E6:10:0F:92:D2:D8:7C:23:D8:EB:96:44
X509v3 Authority Key Identifier:
keyid:11:29:31:AC:56:18:93:F8:44:EC:0A:F2:C5:DE:D9:90:2F:BB:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESkxrFYYk_hE7Aryxd7ZkC-7J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/xYJUPaYA1uPmEA-S0th8I9jrlkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cc2ec4-58bf-409c-bb75-b200159acd23/1/ESkxrFYYk_hE7Aryxd7ZkC-7J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:40::/29
Signature Algorithm: sha256WithRSAEncryption
81:39:37:ff:cb:c4:64:c4:83:77:c9:5c:9d:72:4c:f3:65:12:
93:e9:6f:ef:67:a9:c5:bd:bf:b6:5a:a9:bd:0f:bf:15:12:c8:
e6:db:ae:7b:15:2f:08:d8:a4:b5:d2:72:14:25:a9:95:ce:b4:
2c:1b:81:a5:88:ce:8a:d7:56:a9:19:9f:54:53:c4:c7:9c:59:
b6:34:c7:b9:f4:3e:24:ad:f9:ff:d9:4f:4b:65:49:d6:a9:51:
14:3a:60:c3:2a:cd:e8:51:00:88:e3:59:e0:5d:cd:74:33:00:
8b:22:37:e6:2a:6a:a1:11:33:6e:c1:7e:bd:ad:68:92:25:f5:
15:37:ff:63:7d:04:1f:32:84:58:3f:c5:04:8a:a6:e1:d0:8d:
1b:bf:52:d0:ae:db:e8:68:1e:2d:fb:38:ee:21:58:fa:61:58:
0a:db:4c:81:db:f6:95:1f:c4:0e:88:6b:36:eb:fa:df:d8:7c:
45:13:0d:87:e7:84:54:c2:73:90:20:92:3f:52:e0:75:c5:75:
12:95:39:51:23:3e:f1:06:34:ae:66:d4:8a:ce:90:22:5f:88:
57:95:28:e4:ac:61:4e:7f:fc:54:cc:f9:2c:24:76:04:64:7e:
12:45:f9:f0:08:06:3b:e0:b1:45:c6:d9:17:11:67:82:94:dd:
e5:9a:2b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:14 2024 by rpki-client on console-ams.rpki-client.org