Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/1-zSBxkv7zVqBp0mt_Kct568lfRc.roa
File: 1-zSBxkv7zVqBp0mt_Kct568lfRc.roa (raw, json)
Hash identifier: kXvPJZYUTm83eeU2R42zsMbah5P+bKHgwqSD/kwS0mI=
Subject key identifier: FB:34:81:C6:4B:FB:CD:5A:81:A7:49:AD:FC:A7:2D:E7:AF:25:7D:17
Certificate issuer: /CN=41eedf650071ae8006e636cdbed4a7386dc87e44
Certificate serial: 01856BDC5F7EF3535779F6E4FC67CE0173D5
Authority key identifier: 41:EE:DF:65:00:71:AE:80:06:E6:36:CD:BE:D4:A7:38:6D:C8:7E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe7fZQBxroAG5jbNvtSnOG3IfkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/1-zSBxkv7zVqBp0mt_Kct568lfRc.roa
Signing time: Sun 01 Jan 2023 05:44:42 +0000
ROA not before: Sun 01 Jan 2023 05:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:c340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:5f:7e:f3:53:57:79:f6:e4:fc:67:ce:01:73:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41eedf650071ae8006e636cdbed4a7386dc87e44
Validity
Not Before: Jan 1 05:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3481c64bfbcd5a81a749adfca72de7af257d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:c6:92:81:23:43:3b:06:b2:5a:da:8e:7a:
45:83:32:10:3d:80:cf:ba:8d:31:b1:cc:1f:12:1a:
50:69:8f:58:4b:95:e3:81:e3:ed:2c:82:28:60:53:
63:a9:70:a8:d4:07:8e:be:d2:36:73:57:a6:1b:ac:
fd:1d:57:76:b9:37:c9:2d:80:26:d2:3a:ae:c0:75:
a4:a2:9f:e7:7d:d2:ab:44:f2:9f:f8:85:96:f1:3d:
14:2d:76:01:7d:29:a8:5e:44:9a:c8:e7:e4:5e:f1:
90:70:b5:7e:26:3a:94:fa:48:43:04:e8:46:dd:7b:
13:1a:82:ff:db:fc:8c:21:ed:38:15:c5:01:5a:a5:
8e:36:4b:95:f8:3a:37:e5:d0:5c:86:d5:19:b6:04:
4c:e9:8d:a4:d7:f2:29:14:6b:72:b5:01:19:1b:b1:
93:a9:00:40:bf:b6:74:d6:07:6f:3c:34:03:11:81:
3a:d6:cd:1b:bb:d9:32:31:86:c0:17:23:7e:15:d2:
b2:17:09:36:00:f6:f3:49:2b:79:c8:c8:5c:b1:82:
d1:46:57:6c:92:a5:44:42:02:9b:7c:db:50:e1:84:
1b:01:e8:f0:d5:4b:01:17:bf:a2:80:16:49:6d:d4:
f0:4d:3f:17:78:69:8b:69:8e:42:d1:e9:e8:87:04:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:81:C6:4B:FB:CD:5A:81:A7:49:AD:FC:A7:2D:E7:AF:25:7D:17
X509v3 Authority Key Identifier:
keyid:41:EE:DF:65:00:71:AE:80:06:E6:36:CD:BE:D4:A7:38:6D:C8:7E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe7fZQBxroAG5jbNvtSnOG3IfkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/1-zSBxkv7zVqBp0mt_Kct568lfRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/Qe7fZQBxroAG5jbNvtSnOG3IfkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c340::/29
Signature Algorithm: sha256WithRSAEncryption
0f:0a:31:98:36:ee:d0:78:1e:b8:81:86:04:10:bd:0f:56:02:
be:ad:9b:88:ac:33:59:c4:a0:24:59:6b:48:79:46:0d:27:8d:
fe:45:77:5b:5b:08:52:82:43:24:6e:dc:02:23:d0:44:6b:d5:
ff:1c:72:c0:95:ec:07:05:ff:ae:57:a5:b7:1e:d8:10:58:ad:
f7:6d:e8:76:ea:48:97:bb:48:de:b2:1d:6c:97:ba:98:b4:be:
37:c1:84:d1:34:32:70:fd:2b:33:1c:7d:d5:6e:35:2d:ef:e2:
1f:16:b9:a3:73:72:8c:78:2a:3d:3c:74:89:85:06:f4:99:4c:
4e:f5:c9:e4:27:47:69:c2:f7:1e:77:d7:ee:ab:e8:78:d5:da:
a2:9b:34:11:bb:bd:6c:e7:1c:a7:0f:46:bb:80:7b:bb:c1:29:
17:4c:26:95:82:cd:ac:7c:48:0a:77:c0:d8:cd:83:cb:14:af:
1a:b6:47:a5:ba:c0:d1:72:bf:2c:da:47:07:a5:21:20:90:e6:
30:db:aa:cc:72:30:06:4e:b7:d3:6f:26:05:51:23:84:62:c3:
98:1f:27:6e:02:91:78:a7:6d:c9:a9:6a:68:28:08:96:5e:09:
c3:77:60:74:ea:ee:2e:ba:2e:50:8c:9f:5f:ca:e7:5d:56:78:
53:2d:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:19 2024 by rpki-client on console-ams.rpki-client.org