Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa
File: pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa (raw, json)
Hash identifier: bUiA29TAbBGtRBS6JxnbsraDKrojzBiMghXzF1pFZWE=
Subject key identifier: A5:B6:4A:13:B9:75:14:52:B7:BD:84:E2:A3:42:15:E1:91:87:8E:6D
Certificate issuer: /CN=0dcef0e1fa4a0088ff8d7b91b8a864eed9ec61dc
Certificate serial: 013694BB
Authority key identifier: 0D:CE:F0:E1:FA:4A:00:88:FF:8D:7B:91:B8:A8:64:EE:D9:EC:61:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa
Signing time: Sat 01 Jan 2022 10:59:33 +0000
ROA not before: Sat 01 Jan 2022 10:59:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:c480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20354235 (0x13694bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dcef0e1fa4a0088ff8d7b91b8a864eed9ec61dc
Validity
Not Before: Jan 1 10:59:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5b64a13b9751452b7bd84e2a34215e191878e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:74:ee:5c:34:fa:31:49:2a:93:21:12:f9:
16:d8:2f:37:9c:5c:5a:11:80:03:1e:12:60:7f:c1:
33:0e:84:7b:38:7b:4c:cc:ab:56:b2:e4:fe:93:96:
84:78:e0:a6:56:31:07:3f:88:00:40:b0:c7:f0:e5:
88:cb:ed:8f:4c:be:4f:d3:5a:41:13:61:4e:e1:c2:
a9:97:ea:d1:52:1b:59:4b:4d:44:0b:72:6d:26:b9:
2e:6d:e7:7b:4f:3c:b9:a8:2f:7b:30:21:34:d2:71:
84:63:5b:a1:59:96:b0:e5:13:93:40:b4:60:94:cb:
f3:83:4b:f0:09:72:11:55:03:d5:65:7a:05:d9:49:
ef:fc:81:8e:75:7d:3a:1f:60:53:2c:e3:2c:0d:af:
cd:96:4f:87:6e:2d:8e:fe:09:3d:4a:ca:57:43:ab:
07:0e:8c:e5:7d:ba:3d:83:2b:46:ae:8e:29:ba:c5:
73:cb:f5:6e:f9:88:ec:4f:6f:87:7e:ef:6b:1e:e4:
81:17:c1:9e:a4:09:f2:dd:97:c0:10:5e:11:30:83:
ee:53:9c:fd:45:1a:8e:a9:63:e3:98:01:00:7b:34:
05:80:ed:f1:60:5e:d7:7b:55:78:d6:0d:5b:34:82:
9f:4d:73:4d:ef:66:f4:88:6a:de:6f:11:8d:a6:eb:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:4A:13:B9:75:14:52:B7:BD:84:E2:A3:42:15:E1:91:87:8E:6D
X509v3 Authority Key Identifier:
keyid:0D:CE:F0:E1:FA:4A:00:88:FF:8D:7B:91:B8:A8:64:EE:D9:EC:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/pbZKE7l1FFK3vYTio0IV4ZGHjm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f9c0f8-bb07-4234-ab06-2b1aaae880ea/1/Dc7w4fpKAIj_jXuRuKhk7tnsYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c480::/29
Signature Algorithm: sha256WithRSAEncryption
a0:38:c3:dc:bf:b2:26:26:41:6a:30:d4:e7:86:d4:4e:4d:59:
63:1a:78:cd:b6:05:b9:a1:21:14:50:c2:30:f9:49:41:dd:45:
1d:bd:d4:3d:66:c7:10:c1:5a:3a:51:01:b0:b4:68:a8:f8:c3:
cb:82:0b:92:92:42:b6:b7:2f:69:6c:db:ae:c8:3b:c7:f4:81:
ca:16:43:84:1d:ce:29:7e:94:60:25:ea:22:81:50:de:af:87:
b7:8e:ee:5f:64:ca:ef:d3:99:27:b7:c3:54:69:04:76:fa:9e:
d9:65:e9:6d:3e:36:24:c4:ab:02:39:28:12:4c:35:1a:58:96:
59:6a:b2:4b:5a:2f:21:4c:84:93:94:7f:5a:b4:10:19:fe:49:
06:ee:64:3d:82:e5:21:f6:74:2b:cf:25:1a:ba:7d:90:f9:65:
da:da:d2:fe:b7:ad:49:0a:9c:30:55:9c:2f:89:0f:67:be:aa:
da:3e:72:9d:4e:64:9a:bc:54:55:11:81:5e:7d:2d:9b:2c:88:
a1:36:58:d9:f6:95:22:99:d6:59:1e:c8:7a:7a:81:8b:11:f3:
97:ca:f4:09:f9:61:de:64:47:e7:57:f2:d0:8b:21:bb:1f:27:
3c:e7:73:e8:58:3b:9b:2f:6f:69:7f:17:6f:66:33:8d:c0:ad:
18:5f:d7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org