Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/3b-v6f0xNPFjrPg3aZeVIYZHmoE.roa
File: 3b-v6f0xNPFjrPg3aZeVIYZHmoE.roa (raw, json)
Hash identifier: eGpuNQhGDGHaNTGUNyK0vAtmRsykzlJB1mNrlbr36MA=
Subject key identifier: DD:BF:AF:E9:FD:31:34:F1:63:AC:F8:37:69:97:95:21:86:47:9A:81
Certificate issuer: /CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Certificate serial: 0186EE4249A8E4C75A1172FFC045647A090A
Authority key identifier: 5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/3b-v6f0xNPFjrPg3aZeVIYZHmoE.roa
Signing time: Fri 17 Mar 2023 06:29:27 +0000
ROA not before: Fri 17 Mar 2023 06:29:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29491
IP address blocks: 2a11:43c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:42:49:a8:e4:c7:5a:11:72:ff:c0:45:64:7a:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae146afcb6e96868a1cd837de46cb184892dc28
Validity
Not Before: Mar 17 06:29:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddbfafe9fd3134f163acf8376997952186479a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:54:29:c0:d2:89:cd:79:6e:3c:bc:ff:40:
b0:76:db:df:8c:f8:ae:90:df:5d:32:03:88:8a:f0:
40:35:8e:06:6a:9c:c7:77:71:1e:81:79:99:80:5b:
f0:ae:8a:61:0a:bf:b7:2d:4f:a5:fd:41:a8:95:3c:
d3:24:62:72:7a:9b:76:a6:29:06:8e:79:81:7d:dd:
20:1d:3f:ac:bf:7f:0b:ba:68:a2:ca:9a:aa:c4:b7:
91:5e:39:34:59:65:52:42:f9:39:ce:99:bd:e6:d4:
86:03:80:bc:e3:a8:5e:4a:cf:08:97:0a:23:d9:a8:
60:14:d8:37:58:56:2d:3f:d8:04:48:c0:07:a0:2a:
d3:85:88:e4:d6:aa:b8:5a:33:24:2e:08:03:b9:1c:
62:72:18:82:a3:9e:f3:a7:d1:94:64:b6:d5:a9:5e:
cb:9e:1c:65:34:43:ca:b7:92:c2:a8:95:46:1a:00:
cd:92:3f:de:bc:92:90:89:00:ea:dd:f4:ec:d3:a8:
a8:be:94:5b:be:1c:ec:06:81:6b:23:81:e3:95:08:
5a:5f:d1:cf:21:43:57:40:36:9c:9a:c6:2d:55:69:
7b:d0:aa:8a:f4:26:0d:5c:70:8c:e4:b1:99:c6:84:
df:a4:cf:53:ab:c8:6d:6a:7d:39:45:51:da:65:47:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BF:AF:E9:FD:31:34:F1:63:AC:F8:37:69:97:95:21:86:47:9A:81
X509v3 Authority Key Identifier:
keyid:5A:E1:46:AF:CB:6E:96:86:8A:1C:D8:37:DE:46:CB:18:48:92:DC:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuFGr8tuloaKHNg33kbLGEiS3Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/3b-v6f0xNPFjrPg3aZeVIYZHmoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0d759d-3682-4943-884c-e3be5370f08f/1/WuFGr8tuloaKHNg33kbLGEiS3Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:43c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:1c:35:01:6a:04:ad:52:8f:69:2e:12:18:2b:0e:92:55:22:
c2:9b:a5:25:ba:86:ab:af:de:20:87:72:3f:9c:2a:56:59:3f:
07:00:d7:ae:c0:7c:69:c2:56:a1:6d:1d:a0:fe:4b:d4:44:a8:
37:c9:10:f6:8b:4a:39:30:09:66:6e:0a:7f:34:32:72:f8:8d:
2f:e0:f2:bb:83:6a:ef:eb:fb:cd:d2:aa:af:3d:d4:5a:04:5b:
c1:20:6f:e1:b3:a7:7d:2c:04:4e:71:9f:34:a9:c2:f0:0c:42:
85:3b:1e:77:66:00:28:26:50:f7:c6:42:da:e0:ea:5c:da:29:
d3:3f:c6:2e:bc:8d:40:4b:ce:b7:35:f5:ff:6f:9f:17:fa:26:
67:c2:dd:ed:0a:ec:61:60:db:40:75:08:2c:a4:81:b8:cb:ac:
67:37:2a:c6:b6:32:f7:da:e9:aa:0f:4a:a9:23:bc:19:30:7b:
c3:21:a8:b1:d8:cb:d6:ba:4a:64:0b:28:54:f1:ee:d1:d9:54:
f4:d0:81:14:38:41:0d:00:1e:4b:19:5c:a9:41:2d:ac:3a:8a:
f9:ca:78:84:7c:2b:ce:c0:30:62:4e:d4:e7:1f:44:12:e4:23:
6a:42:9b:92:9b:0f:50:13:67:f0:0b:c1:be:82:77:28:29:41:
3f:15:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:11 2025 by rpki-client