Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/80OxCsAeznp7FXYHO39j10woKrs.roa
File: 80OxCsAeznp7FXYHO39j10woKrs.roa (raw, json)
Hash identifier: 9pbY1SD7a//nYGrJIBn4osf8X7YrR96lftBw60GETDw=
Subject key identifier: F3:43:B1:0A:C0:1E:CE:7A:7B:15:76:07:3B:7F:63:D7:4C:28:2A:BB
Certificate issuer: /CN=b811f8ce6dd0cc480f097540563920aea3d66396
Certificate serial: 018570151F947BC0B3274B78B239711F2A79
Authority key identifier: B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/80OxCsAeznp7FXYHO39j10woKrs.roa
Signing time: Mon 02 Jan 2023 01:25:10 +0000
ROA not before: Mon 02 Jan 2023 01:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:c000::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1f:94:7b:c0:b3:27:4b:78:b2:39:71:1f:2a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b811f8ce6dd0cc480f097540563920aea3d66396
Validity
Not Before: Jan 2 01:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f343b10ac01ece7a7b1576073b7f63d74c282abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:8b:e6:ea:3b:8f:4f:c8:0d:83:ec:33:7a:
4c:2c:d9:95:f8:83:39:19:90:77:56:46:40:3e:26:
ce:50:8f:a9:47:4a:1f:a1:76:74:b4:8a:0d:dc:ff:
02:f4:7d:ed:21:90:0c:13:da:39:39:53:78:b0:09:
49:40:72:76:1d:64:8f:34:f8:81:3b:06:0b:05:1d:
46:b8:c1:05:ab:46:26:98:92:8a:62:5e:12:5f:0f:
0f:57:f4:e7:39:1f:cd:5d:44:0d:83:f7:3b:79:9d:
7e:a5:fc:69:10:07:c2:7e:79:77:3f:9d:17:23:9d:
a1:87:b0:a7:2d:28:ee:4e:7e:8c:53:b1:de:40:10:
d0:ef:6c:62:6a:bd:b4:43:b3:d7:ed:3c:03:e7:3f:
a4:0a:94:b5:cf:35:9a:d5:8d:7a:0d:94:e5:ba:75:
b9:df:3b:38:dd:c9:2f:9d:42:a8:88:3d:b7:92:24:
99:96:7e:a8:8c:71:0d:75:30:fa:4a:21:42:30:0d:
19:df:76:de:ce:32:95:8a:4d:79:ce:2e:cd:f3:af:
08:4f:01:d9:4b:3b:1b:bb:44:15:e7:47:53:43:a7:
11:3d:94:24:8a:ef:bb:2d:33:ba:01:9a:2c:bd:73:
65:d1:24:2f:b1:49:9d:fc:6b:ed:76:34:ee:42:9b:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:43:B1:0A:C0:1E:CE:7A:7B:15:76:07:3B:7F:63:D7:4C:28:2A:BB
X509v3 Authority Key Identifier:
keyid:B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/80OxCsAeznp7FXYHO39j10woKrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c000::/29
Signature Algorithm: sha256WithRSAEncryption
3f:1a:08:fd:ab:8d:e7:25:8c:a9:8e:a0:62:38:b9:4d:07:df:
6a:d6:08:63:9b:f4:d3:c8:07:d5:da:b5:a3:d3:ab:bc:5c:63:
84:4a:66:39:41:06:2f:bc:9c:85:0c:e0:a7:dd:5d:87:0e:e1:
34:53:b5:a5:d0:d9:d1:17:42:cc:5b:aa:3b:da:f4:33:d9:fa:
6c:e6:03:d3:b2:fb:48:25:8a:e5:ff:d3:8c:04:5c:b6:90:74:
94:65:02:c7:e1:5c:08:e2:0c:d4:99:35:c0:39:4b:ef:44:2b:
3d:ed:fb:0f:95:3a:75:b2:aa:3a:19:78:a6:0c:0c:57:44:e8:
c8:92:55:5b:d3:85:6f:04:b9:d9:7f:99:82:d3:0e:d8:e2:52:
ea:f6:43:b6:c9:12:d1:ae:5c:67:92:fb:84:43:0a:91:b7:65:
12:0f:a3:c6:e7:6f:78:9e:dc:a4:c4:1b:d7:02:06:ea:f8:f8:
b8:2a:ed:e9:d3:01:41:03:7f:94:9c:59:6a:f8:44:9f:f1:c3:
26:bd:18:41:63:5e:0a:27:4c:65:4a:cd:3e:3e:07:f5:52:ef:
59:7f:6e:7f:9d:c8:b4:8f:04:d6:ea:2a:7b:0b:07:0d:96:dd:
4b:ac:84:02:ae:fc:b8:8e:20:8d:3e:28:21:56:25:06:d2:b8:
99:99:e8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:42 2024 by rpki-client on console-fra.rpki-client.org