Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/sDDprtr1Y-mByF0NCV1wnjPkkN4.roa
File: sDDprtr1Y-mByF0NCV1wnjPkkN4.roa (raw, json)
Hash identifier: cPC+CUR90rFPt/JTllwn9DnvIwzzQoRslWV+V46/coY=
Subject key identifier: B0:30:E9:AE:DA:F5:63:E9:81:C8:5D:0D:09:5D:70:9E:33:E4:90:DE
Certificate issuer: /CN=41eedf650071ae8006e636cdbed4a7386dc87e44
Certificate serial: 018486C061844C9CB97380BF57C033BAB464
Authority key identifier: 41:EE:DF:65:00:71:AE:80:06:E6:36:CD:BE:D4:A7:38:6D:C8:7E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe7fZQBxroAG5jbNvtSnOG3IfkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/sDDprtr1Y-mByF0NCV1wnjPkkN4.roa
Signing time: Thu 17 Nov 2022 18:01:05 +0000
ROA not before: Thu 17 Nov 2022 18:01:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:c340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:c0:61:84:4c:9c:b9:73:80:bf:57:c0:33:ba:b4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41eedf650071ae8006e636cdbed4a7386dc87e44
Validity
Not Before: Nov 17 18:01:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b030e9aedaf563e981c85d0d095d709e33e490de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:77:e6:07:ba:9d:30:ae:7a:54:98:dd:b8:
48:bd:92:19:77:5c:cd:8f:75:0a:4b:71:f1:c0:e2:
ce:4c:c8:f2:2c:d7:47:82:5f:66:1f:d9:e1:dd:f3:
6e:eb:d4:6b:d9:db:a7:38:34:12:42:c3:b2:7a:2e:
7c:72:30:82:be:02:e2:5a:35:52:83:46:60:8d:68:
1a:14:4f:3f:d2:4d:01:b2:6d:68:9a:05:e6:1c:9b:
13:b1:96:32:cd:19:f2:dc:de:bc:41:b2:82:de:1f:
1b:04:68:10:69:06:e6:5c:d1:42:b5:4a:e4:80:c5:
45:73:56:21:2e:1a:7e:7c:52:6f:7a:56:25:5c:88:
9c:69:c6:7d:16:52:50:4f:e4:14:2c:19:99:9f:b9:
aa:5a:57:a0:b9:38:b2:3a:0c:3d:e5:6b:f2:cd:20:
4f:30:c2:f7:14:bb:e2:bc:97:24:1e:27:d5:47:fa:
18:c9:6b:9c:fe:79:2c:7d:26:d6:cb:76:cb:b4:f0:
1c:77:6b:f3:d2:95:11:a6:2a:b9:18:a9:a4:77:62:
bc:21:4f:db:bc:29:20:af:62:3c:ee:8f:7f:98:2a:
cd:14:4d:1b:bd:75:ad:86:14:7d:07:4a:77:6d:d2:
ad:7e:d3:11:62:c7:4a:55:49:f8:e1:3f:e3:8f:89:
e8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:30:E9:AE:DA:F5:63:E9:81:C8:5D:0D:09:5D:70:9E:33:E4:90:DE
X509v3 Authority Key Identifier:
keyid:41:EE:DF:65:00:71:AE:80:06:E6:36:CD:BE:D4:A7:38:6D:C8:7E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe7fZQBxroAG5jbNvtSnOG3IfkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/sDDprtr1Y-mByF0NCV1wnjPkkN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b085f3-fb11-4832-ba45-b3961750454a/1/Qe7fZQBxroAG5jbNvtSnOG3IfkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c340::/29
Signature Algorithm: sha256WithRSAEncryption
0a:05:75:61:78:01:da:6a:be:91:cd:68:aa:24:d5:85:d1:f6:
c9:c8:77:68:eb:94:64:f4:82:71:45:87:1a:ef:98:5c:0f:f0:
4c:2f:7b:b5:02:ff:a9:61:8b:85:5a:5a:6f:17:f5:f9:2a:d4:
93:69:8e:98:99:5b:32:df:d0:22:7e:20:71:79:f1:7f:19:ff:
62:0d:bc:c7:12:cc:7f:0a:44:ef:b3:ea:c7:ed:2e:4c:93:e0:
d4:e6:83:ee:17:b4:29:3b:8a:70:b6:53:73:4f:8d:bf:70:b1:
71:52:d6:1e:7f:5c:68:a2:e5:b5:7e:bd:ff:d2:33:4a:11:3f:
58:e0:a6:51:96:ff:dc:88:8a:3f:79:8f:25:87:90:b2:42:92:
f4:65:37:4f:99:0f:5d:14:09:92:4c:fb:48:10:fc:4d:05:e6:
0d:ce:34:f1:92:8b:01:93:89:2f:3a:aa:e2:58:aa:a4:ff:da:
88:07:8f:97:ea:be:49:c9:61:1e:18:06:1c:af:32:3b:07:ec:
ae:b5:14:92:ba:35:b4:9c:09:83:bd:4b:5b:f3:b1:3b:c4:7f:
18:b4:d3:02:0e:19:3f:91:33:d4:dc:cf:1a:0b:60:ed:e2:a3:
d3:f8:cd:46:eb:c4:e1:50:4b:3d:55:26:62:b5:cf:43:4b:0c:
25:91:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:19 2024 by rpki-client on console-ams.rpki-client.org