Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/EUBpVJiknn4ZkMsjCpa2oqn7Ilc.roa
File: EUBpVJiknn4ZkMsjCpa2oqn7Ilc.roa (raw, json)
Hash identifier: PLN7fiOJNgPZPog7+Bz/BRvz0aFJn91RUh01GZJy4Zo=
Subject key identifier: 11:40:69:54:98:A4:9E:7E:19:90:CB:23:0A:96:B6:A2:A9:FB:22:57
Certificate issuer: /CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Certificate serial: 01856BDC8E984DB714F2FC23055255E00E7F
Authority key identifier: 3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/EUBpVJiknn4ZkMsjCpa2oqn7Ilc.roa
Signing time: Sun 01 Jan 2023 05:44:54 +0000
ROA not before: Sun 01 Jan 2023 05:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:f540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:8e:98:4d:b7:14:f2:fc:23:05:52:55:e0:0e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf6a3db7a15ab57fabaa6feca289e7557715bac
Validity
Not Before: Jan 1 05:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1140695498a49e7e1990cb230a96b6a2a9fb2257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e3:2e:a9:1e:05:0f:9a:dd:9b:e0:7c:7e:bd:
83:75:82:ad:8f:d1:9b:20:8f:4d:71:73:94:ab:92:
87:41:bc:44:0e:1c:9e:ab:c4:8d:ab:89:78:c5:7c:
3a:6f:01:48:83:cf:91:91:c7:da:83:a0:d9:eb:ff:
93:1a:67:ed:3e:67:b2:44:f9:3a:67:10:90:70:d6:
c0:49:f8:df:3f:a6:9b:69:30:a2:d6:a9:b6:f9:42:
7c:ed:d3:b1:89:1f:30:e1:f8:d2:11:f2:8f:81:fc:
f7:00:7d:ff:6b:5c:77:0c:c5:75:1b:fb:10:64:0a:
7d:d0:4b:60:25:20:c5:8c:f3:17:08:26:4e:1d:29:
66:b5:9f:d3:46:11:6d:1e:35:f6:e3:71:92:e4:8c:
0a:d2:df:c1:e4:2b:a7:49:dc:4e:36:7f:22:30:2f:
ff:f7:58:24:3f:56:48:1b:63:46:25:1e:e4:a4:85:
2d:81:dd:68:8f:98:be:fc:87:a1:3c:17:6e:96:c6:
75:fe:86:d4:a0:99:87:a7:b1:72:af:e9:24:d7:f3:
de:4d:c2:78:96:3a:68:ef:be:c5:6d:83:cb:c5:d7:
7b:79:58:74:f5:b6:d0:f8:04:89:d6:62:e7:82:24:
7d:21:a6:10:11:a5:82:ea:bb:ee:4f:19:6e:9b:f6:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:69:54:98:A4:9E:7E:19:90:CB:23:0A:96:B6:A2:A9:FB:22:57
X509v3 Authority Key Identifier:
keyid:3B:F6:A3:DB:7A:15:AB:57:FA:BA:A6:FE:CA:28:9E:75:57:71:5B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_aj23oVq1f6uqb-yiiedVdxW6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/EUBpVJiknn4ZkMsjCpa2oqn7Ilc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d67fe9-e18c-4351-a0a0-1e358ade24fe/1/O_aj23oVq1f6uqb-yiiedVdxW6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:f540::/29
Signature Algorithm: sha256WithRSAEncryption
76:63:db:f6:86:12:b5:54:22:2c:96:18:95:ee:89:7b:92:4f:
16:86:4f:99:08:7f:1d:de:e8:60:9f:6b:8d:3c:63:25:7f:11:
85:fd:2a:16:45:e8:85:66:ed:59:a1:e4:78:8d:df:6b:c3:43:
87:1d:63:f8:42:15:9d:ed:20:52:91:da:af:88:98:06:6d:ae:
1f:0a:ad:00:2b:88:3a:f2:c3:18:38:36:f2:cf:1b:7e:eb:ab:
bd:c0:5d:fc:ad:11:74:1f:07:71:99:67:27:23:79:e0:7f:d8:
a2:29:5d:57:a1:1f:f4:a9:b4:10:fa:1a:e5:d5:8b:a3:64:91:
84:ea:16:03:7e:b0:8a:37:1c:f7:37:25:fb:00:c8:02:ed:83:
1c:a4:0a:9c:5f:d0:32:90:d5:83:6f:f2:8d:ea:46:1e:18:49:
33:26:71:28:f7:94:06:6c:4d:d4:b0:31:97:65:a1:0f:56:68:
f5:81:cd:8b:30:02:33:f3:c4:d2:5f:9f:30:0b:ba:89:2e:1c:
81:96:57:04:66:34:fa:02:43:b8:10:c7:82:3a:c6:63:76:3c:
ac:0a:ed:2b:ee:a7:76:90:a8:a2:fa:34:e7:fc:14:80:7e:cc:
82:a0:1b:cc:1e:fc:c7:a5:90:8a:3a:4b:74:a2:34:d9:2d:f5:
65:f7:b8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:39 2024 by rpki-client on console-ams.rpki-client.org