Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/YF3LKtHupKjqLnIjJxDnUvEr2VU.roa
File: YF3LKtHupKjqLnIjJxDnUvEr2VU.roa (raw, json)
Hash identifier: eZU7be5C5ADeP+AWiIcEGXgt3D9opnH+R4hKTmLYBns=
Subject key identifier: 60:5D:CB:2A:D1:EE:A4:A8:EA:2E:72:23:27:10:E7:52:F1:2B:D9:55
Certificate issuer: /CN=07d0ba368232da095070a9fc7572465858f7af13
Certificate serial: 01856F300FE7F6EC5AF08F45BFC19EEBEBFA
Authority key identifier: 07:D0:BA:36:82:32:DA:09:50:70:A9:FC:75:72:46:58:58:F7:AF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9C6NoIy2glQcKn8dXJGWFj3rxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/YF3LKtHupKjqLnIjJxDnUvEr2VU.roa
Signing time: Sun 01 Jan 2023 21:14:58 +0000
ROA not before: Sun 01 Jan 2023 21:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210661
IP address blocks: 2a11:5040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:0f:e7:f6:ec:5a:f0:8f:45:bf:c1:9e:eb:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d0ba368232da095070a9fc7572465858f7af13
Validity
Not Before: Jan 1 21:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605dcb2ad1eea4a8ea2e72232710e752f12bd955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:52:e2:ab:87:88:49:5d:36:d4:b6:cf:40:
1a:06:b3:de:43:6f:89:f4:f6:ad:61:94:de:5d:dc:
f1:06:8d:26:e8:8d:21:16:02:e7:5a:3b:a1:cf:e9:
c3:d6:f3:95:78:78:62:c2:e9:3e:3e:20:52:f0:ab:
5c:20:4c:90:50:20:de:dd:23:a9:10:0d:3c:6f:15:
0b:99:fc:2b:5e:7f:e2:54:82:a1:e6:2f:31:58:af:
47:82:9a:b5:b7:5f:d9:13:a9:17:ab:5d:81:8a:40:
26:71:ca:20:37:e9:d9:46:77:ce:d5:95:c5:4a:e1:
15:a1:67:9a:e3:ca:0c:22:18:31:a2:f8:a4:44:94:
a2:4b:0b:d2:21:0b:8a:ff:95:2f:b6:24:24:46:f2:
00:e2:97:19:96:c2:f8:ef:c7:50:e3:72:26:ae:d3:
75:6f:2f:68:6f:7a:4c:8e:d1:0e:4b:cf:aa:2c:3b:
3b:43:28:3c:94:3f:a0:ed:50:ae:05:71:fb:b5:b4:
a8:90:d2:21:e2:01:44:3f:fb:14:1d:ff:b7:0c:11:
be:b9:30:9f:a1:00:6a:56:d2:9a:db:7c:09:7b:ce:
1d:23:bf:b9:cc:b7:02:2e:cc:15:75:a4:f4:7b:8b:
54:88:37:fc:1b:70:d0:44:36:20:f4:00:dc:ad:11:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5D:CB:2A:D1:EE:A4:A8:EA:2E:72:23:27:10:E7:52:F1:2B:D9:55
X509v3 Authority Key Identifier:
keyid:07:D0:BA:36:82:32:DA:09:50:70:A9:FC:75:72:46:58:58:F7:AF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9C6NoIy2glQcKn8dXJGWFj3rxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/YF3LKtHupKjqLnIjJxDnUvEr2VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/B9C6NoIy2glQcKn8dXJGWFj3rxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5040::/29
Signature Algorithm: sha256WithRSAEncryption
28:34:86:30:0c:ae:87:75:39:d4:c1:e0:55:c9:bf:3d:7b:de:
ec:e1:af:b6:44:0a:f3:6a:13:9f:fb:50:cc:0e:49:7a:5e:d1:
33:08:04:83:64:00:0d:65:e2:6e:ad:ac:cf:47:4f:92:08:33:
91:7d:df:32:ca:36:fe:db:9d:3b:82:fc:d5:ee:2e:d6:3a:4f:
59:05:4f:db:98:5a:b6:34:91:69:ae:99:ed:8b:4f:61:08:6b:
2d:d2:ed:ca:2e:2f:e0:3e:a6:8a:c4:80:ec:b6:43:c7:f6:a9:
5c:c9:9c:4d:78:c4:3a:25:06:43:24:34:b1:ce:22:c9:c5:3b:
ca:d3:ce:6c:5d:cb:37:df:65:bc:10:bc:79:d1:93:bd:e4:70:
d0:a3:7e:f3:33:37:b7:4a:84:20:d0:2f:db:cb:6a:a1:b3:6a:
69:45:0a:0d:fe:d9:54:ec:cc:a5:63:d4:8f:72:ab:e8:8c:36:
08:e9:56:81:6f:11:61:c1:0c:0a:95:e6:0c:90:41:90:57:d4:
b4:dc:90:b4:18:9f:8f:2c:c5:1f:83:23:10:d0:3d:43:dd:4c:
b1:a0:bf:e1:9d:67:e8:60:cc:a7:70:fc:55:c8:d8:8c:a9:1b:
8a:59:4e:e8:de:01:44:8a:d6:68:40:9f:a6:e0:68:d2:34:17:
53:b7:64:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 15:14:25 2023 by rpki-client on console-ams.rpki-client.org