Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/7HDipohwg3OjzQo7lHrcIoI8b2o.roa
File: 7HDipohwg3OjzQo7lHrcIoI8b2o.roa (raw, json)
Hash identifier: EAbd6AYh3TnNLKxpdUKAKNDYDfNoGK4+HETRui3LCL0=
Subject key identifier: EC:70:E2:A6:88:70:83:73:A3:CD:0A:3B:94:7A:DC:22:82:3C:6F:6A
Certificate issuer: /CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Certificate serial: 018486AD23E2F0B2510D66FF357000FC9241
Authority key identifier: FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/7HDipohwg3OjzQo7lHrcIoI8b2o.roa
Signing time: Thu 17 Nov 2022 17:40:04 +0000
ROA not before: Thu 17 Nov 2022 17:40:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:e3c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ad:23:e2:f0:b2:51:0d:66:ff:35:70:00:fc:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Validity
Not Before: Nov 17 17:40:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec70e2a688708373a3cd0a3b947adc22823c6f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:ba:c4:25:10:62:b2:5b:7d:ee:cf:9f:55:
17:a4:db:36:d0:6b:8f:95:28:84:36:66:66:0c:fa:
b4:bf:c9:86:2a:b5:bf:3d:1c:75:e4:05:17:0a:3c:
01:03:a7:c8:c8:54:12:32:f9:ca:34:38:07:68:7e:
50:e6:89:ad:4d:f1:3b:6c:c5:59:7f:84:94:27:43:
1f:e2:75:4d:d0:0b:a3:ea:ed:20:2d:48:18:96:b7:
3e:33:a8:e8:d8:06:68:91:0b:af:7d:be:bb:9d:99:
b3:b6:8b:08:40:c8:9a:a8:72:50:d6:63:1d:34:58:
9b:ef:7e:c5:72:18:91:3e:36:84:24:7c:a8:42:11:
d2:f0:72:54:0f:1e:75:11:eb:f2:18:be:27:3e:20:
40:5c:c6:8a:4e:5a:81:fd:a9:4c:f0:17:01:f6:d3:
1e:ed:fa:f6:4d:75:39:8d:ca:16:c8:2b:39:c5:7d:
c9:f8:e1:c2:e9:b9:b9:23:98:85:5b:1a:23:37:ef:
da:82:2f:c9:7a:7e:34:99:a7:e2:90:c8:57:bd:fe:
66:81:69:10:a2:84:8b:b3:f2:73:57:8e:34:d9:6e:
0d:13:29:6b:27:f9:8c:fb:2c:59:ea:f6:02:07:f4:
4f:f7:20:6b:a0:af:b2:74:d5:4a:83:d7:5b:c9:6f:
fa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:70:E2:A6:88:70:83:73:A3:CD:0A:3B:94:7A:DC:22:82:3C:6F:6A
X509v3 Authority Key Identifier:
keyid:FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/7HDipohwg3OjzQo7lHrcIoI8b2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e3c0::/29
Signature Algorithm: sha256WithRSAEncryption
56:db:a8:90:b2:aa:af:fb:a7:03:55:23:45:70:68:f5:eb:1c:
85:9b:7e:66:9b:06:70:c0:37:1c:df:b5:10:ee:48:ac:b5:94:
a4:e2:bf:56:a2:fd:93:32:e9:78:e4:53:66:66:3f:0d:9e:1f:
51:3e:0d:11:b5:22:1c:a5:25:ef:84:51:e0:b3:2c:22:33:a9:
93:84:99:9e:bf:27:b7:da:50:5a:f1:aa:1e:a1:99:97:de:2a:
b1:f4:b6:32:7f:92:2c:2a:42:d0:0b:00:9e:1a:29:b3:90:63:
9b:c2:76:ae:ab:5e:75:e5:86:cc:ed:ee:c2:b5:01:b8:59:42:
67:a3:4d:ec:97:e5:88:e7:b0:71:41:8c:28:1e:98:65:ad:1d:
e5:e7:f6:93:9d:60:b6:52:6d:32:21:51:c3:68:98:0b:5c:f5:
be:16:f5:7f:37:56:aa:16:31:e6:74:49:0d:cd:25:31:cd:ce:
50:b1:c9:1b:3a:dc:c5:b7:09:66:c0:be:54:ac:b6:f5:5f:e0:
e1:02:9a:a7:0a:05:47:c8:ad:51:b8:a0:d3:21:4f:d5:73:0b:
51:c7:c3:13:1f:ad:47:74:68:84:27:ab:16:f7:97:51:c2:88:
c8:00:6b:7c:9c:2c:d6:b5:f9:cb:f7:34:fb:64:41:a3:a4:dc:
7e:e5:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:56 2024 by rpki-client on console-ams.rpki-client.org