Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/m96Kt3z4sWwWRVHJk0-UMlhyT4M.roa
File: m96Kt3z4sWwWRVHJk0-UMlhyT4M.roa (raw, json)
Hash identifier: 2OwI+8US7NQsqykW44kAbKpgXipRqrUUjKrphAPaSKY=
Subject key identifier: 9B:DE:8A:B7:7C:F8:B1:6C:16:45:51:C9:93:4F:94:32:58:72:4F:83
Certificate issuer: /CN=ceac024ffd8df4918741f754c0db218ee7b2748d
Certificate serial: 018486A97762DADACFC8315EAE247DF3CF9C
Authority key identifier: CE:AC:02:4F:FD:8D:F4:91:87:41:F7:54:C0:DB:21:8E:E7:B2:74:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqwCT_2N9JGHQfdUwNshjueydI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/m96Kt3z4sWwWRVHJk0-UMlhyT4M.roa
Signing time: Thu 17 Nov 2022 17:36:03 +0000
ROA not before: Thu 17 Nov 2022 17:36:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:d600::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:a9:77:62:da:da:cf:c8:31:5e:ae:24:7d:f3:cf:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceac024ffd8df4918741f754c0db218ee7b2748d
Validity
Not Before: Nov 17 17:36:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9bde8ab77cf8b16c164551c9934f943258724f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:84:00:95:75:46:e4:3e:78:52:d0:9d:73:d4:
ef:92:3e:8d:f7:ac:c7:b5:d8:94:02:25:96:45:f2:
8d:77:94:6a:8c:d8:79:b5:b6:7a:16:2d:fe:9c:08:
98:a4:89:6b:7d:56:8e:98:2c:24:4f:c6:24:8a:a0:
22:06:3f:d6:2d:33:48:a4:ce:b4:fc:49:71:fa:bb:
56:f2:8f:d7:46:ae:54:4d:f3:db:e0:2a:fa:86:ba:
23:1b:71:75:4b:01:48:d0:b8:c2:77:be:8a:03:8e:
e1:92:ce:66:31:53:ee:1c:63:5a:90:87:a2:99:7a:
ce:52:9e:57:e9:b4:70:c4:68:99:d7:be:80:aa:65:
a9:0a:80:3a:ee:41:c2:e3:20:7b:bc:08:68:6d:da:
7e:f6:8d:9f:24:7d:8a:78:c0:4f:86:69:10:a8:56:
4b:d3:dc:a7:25:06:e0:a6:ec:ef:cd:71:73:dc:2a:
9e:ff:a2:44:7c:df:0d:5d:30:48:cd:a7:c4:0e:8c:
00:cf:eb:8a:f3:42:81:4a:6f:20:49:88:c3:dd:69:
31:e7:f6:d1:c0:31:6c:6a:49:f3:4e:a7:be:dc:72:
17:fd:9e:63:cc:7f:cc:3e:1e:58:9c:a8:37:e2:45:
b7:a3:4f:b2:9a:e6:63:d6:90:46:f8:4e:e8:92:72:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DE:8A:B7:7C:F8:B1:6C:16:45:51:C9:93:4F:94:32:58:72:4F:83
X509v3 Authority Key Identifier:
keyid:CE:AC:02:4F:FD:8D:F4:91:87:41:F7:54:C0:DB:21:8E:E7:B2:74:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqwCT_2N9JGHQfdUwNshjueydI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/m96Kt3z4sWwWRVHJk0-UMlhyT4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8cec28-8a86-4f69-8f68-c532349a7757/1/zqwCT_2N9JGHQfdUwNshjueydI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d600::/29
Signature Algorithm: sha256WithRSAEncryption
7e:71:5e:f8:ca:30:3d:d5:83:d2:32:f4:e8:82:a9:4b:a1:05:
c0:73:e4:f5:f8:c1:ad:0b:52:2b:52:53:f3:c3:23:53:c8:db:
69:14:4c:7e:a6:99:df:45:6b:be:aa:35:50:29:1a:d8:9e:40:
89:10:37:11:63:cc:3c:b7:e2:12:48:fb:95:98:b7:e8:33:78:
11:15:84:d7:5e:97:2e:01:8b:a0:7e:ec:77:7d:06:ea:06:0b:
52:a2:20:0d:72:9c:f8:f9:1b:77:44:83:6f:94:98:c0:ab:a2:
4e:d4:37:79:78:a2:89:a1:f7:15:3b:83:cb:c3:5e:55:14:2f:
43:67:c0:8b:ec:23:de:9d:57:fd:7e:13:da:26:0b:a2:c1:c7:
c5:45:3b:75:cb:c5:52:a1:bc:ad:60:95:01:b5:fc:45:c2:e3:
54:da:c8:d8:e4:c5:30:f5:8c:dc:90:f8:3e:9b:b7:bf:7a:58:
4f:0d:f2:10:05:31:d1:b6:ce:f3:ee:88:15:b4:9f:68:ff:73:
a1:0c:d9:e2:1e:03:04:5c:55:83:3c:c0:4c:ca:9a:8b:6a:ea:
fd:96:d4:1b:56:87:c2:3d:27:b2:f4:cd:de:5d:7f:df:9f:f1:
0f:0b:eb:20:b1:88:6d:7e:6f:e3:7f:8f:9c:90:8e:c1:b5:6a:
13:2d:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:52 2024 by rpki-client on console-ams.rpki-client.org