Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/LNMzdTWa2KsU9Ws9-ZGSY0Zqi4Q.roa
File: LNMzdTWa2KsU9Ws9-ZGSY0Zqi4Q.roa (raw, json)
Hash identifier: xnziHABgyRzqiJn+/iUzxhxcXs+cpgoW9f1Whhyi18I=
Subject key identifier: 2C:D3:33:75:35:9A:D8:AB:14:F5:6B:3D:F9:91:92:63:46:6A:8B:84
Certificate issuer: /CN=4674f507f5bff33fc81341623f69195274ae1183
Certificate serial: 011E298A
Authority key identifier: 46:74:F5:07:F5:BF:F3:3F:C8:13:41:62:3F:69:19:52:74:AE:11:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RnT1B_W_8z_IE0FiP2kZUnSuEYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/LNMzdTWa2KsU9Ws9-ZGSY0Zqi4Q.roa
Signing time: Sat 01 Jan 2022 11:02:25 +0000
ROA not before: Sat 01 Jan 2022 11:02:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 18779
IP address blocks: 2a11:7380::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18753930 (0x11e298a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4674f507f5bff33fc81341623f69195274ae1183
Validity
Not Before: Jan 1 11:02:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2cd33375359ad8ab14f56b3df9919263466a8b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:be:8c:0f:9d:90:63:17:8c:a4:a2:6c:fe:
9a:30:5c:82:6a:28:4c:ac:ed:79:ad:a2:51:60:5a:
08:63:d4:da:17:e4:06:a0:9f:58:ff:89:05:a2:85:
68:85:e0:d7:45:df:f8:2d:95:c0:66:8c:38:e5:ad:
b0:6c:05:7a:c0:1a:07:ef:7b:1f:ea:cc:d8:68:50:
d9:29:09:6d:19:cf:f7:62:4e:bd:f9:8c:32:15:2d:
8e:cf:28:c8:73:ec:e2:7e:18:3b:b9:7b:ec:cb:e1:
d2:cb:9a:98:ff:64:6f:44:89:9c:54:cf:bc:80:07:
0f:8e:c0:2d:65:58:bd:a8:6b:50:73:18:83:0e:10:
5a:f0:62:69:d5:d8:2b:a8:b0:44:a8:aa:22:4f:75:
e8:d5:8b:cb:99:24:cb:98:0b:dd:07:e9:05:b3:e5:
f9:dc:21:fa:29:77:b3:68:f9:19:66:b0:9a:76:fa:
21:57:77:5b:99:32:dd:11:07:49:d6:0b:e8:30:73:
52:1e:59:47:c0:cb:4f:70:7c:73:9c:a8:ca:30:3d:
4f:58:3a:e2:b9:20:9f:89:20:eb:9f:f2:0e:de:12:
8f:05:de:5c:eb:12:fe:f8:86:7b:c0:8b:75:14:11:
fb:1e:d0:0f:a8:f3:dd:bb:3b:ab:1c:4e:bc:a9:b5:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:33:75:35:9A:D8:AB:14:F5:6B:3D:F9:91:92:63:46:6A:8B:84
X509v3 Authority Key Identifier:
keyid:46:74:F5:07:F5:BF:F3:3F:C8:13:41:62:3F:69:19:52:74:AE:11:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RnT1B_W_8z_IE0FiP2kZUnSuEYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/LNMzdTWa2KsU9Ws9-ZGSY0Zqi4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5a1fcf-186d-4d3a-a950-e809320c6b1b/1/RnT1B_W_8z_IE0FiP2kZUnSuEYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7380::/29
Signature Algorithm: sha256WithRSAEncryption
74:2f:b4:b2:72:c2:21:4f:a1:f2:29:59:73:72:6c:f0:c5:68:
8e:48:0b:db:f0:87:5e:9c:9c:a2:40:5c:7b:d9:c5:ce:b6:82:
af:89:54:70:ba:3e:69:0c:09:29:ff:fe:06:5a:dd:55:a1:1f:
13:98:82:fc:0f:e3:a2:22:52:d1:51:83:00:3c:d0:9a:97:a5:
28:f8:39:39:cc:ff:3f:3a:73:b4:79:b5:16:d1:89:f7:0e:e7:
9c:d6:c3:d3:da:6a:0e:01:1f:8f:95:76:ce:eb:2d:07:2e:a7:
a0:a4:19:7e:15:0f:25:0f:cf:92:e0:62:aa:29:cf:05:3d:a1:
48:7b:b0:b9:c8:a2:e3:c4:04:32:3a:43:8d:d3:0d:46:aa:0b:
b9:b7:ca:94:78:69:32:cc:a7:9b:ef:74:a3:eb:9f:a1:67:bd:
dc:6b:41:53:08:41:53:09:1a:be:19:e7:33:13:19:52:ef:5a:
63:e6:b8:59:8b:06:09:12:b6:51:e2:21:3a:17:e1:86:db:5c:
f4:b9:cb:47:8a:c9:26:1c:d3:63:9e:d5:f2:f8:96:22:98:dd:
b3:3a:40:5d:40:9c:93:d9:75:e3:d4:b9:20:b2:2d:1d:2d:bb:
67:2e:03:88:f5:55:c0:81:f2:8d:e5:42:6c:1e:2e:97:d0:3e:
33:a9:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:46 2024 by rpki-client on console-fra.rpki-client.org