Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/aTLAAWKqCviGsKzt5SF72jfuv2w.roa
File: aTLAAWKqCviGsKzt5SF72jfuv2w.roa (raw, json)
Hash identifier: ahAVUkxYWXlLEE+42HQzhOiO91bArP4kRxBTCI3FY1g=
Subject key identifier: 69:32:C0:01:62:AA:0A:F8:86:B0:AC:ED:E5:21:7B:DA:37:EE:BF:6C
Certificate issuer: /CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
Certificate serial: 01856E8215F1E764F759CF35C06F85784ED5
Authority key identifier: 7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/aTLAAWKqCviGsKzt5SF72jfuv2w.roa
Signing time: Sun 01 Jan 2023 18:04:57 +0000
ROA not before: Sun 01 Jan 2023 18:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:3980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:15:f1:e7:64:f7:59:cf:35:c0:6f:85:78:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f2c92a79f62fcb919e795ab5de313f4bda71ddf
Validity
Not Before: Jan 1 18:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6932c00162aa0af886b0acede5217bda37eebf6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:b0:d4:ac:99:a3:26:16:0e:b4:41:e2:1d:
9b:1a:de:de:16:3c:08:d7:4a:36:30:d4:a1:3a:1e:
1e:13:ca:90:76:d8:0d:ea:d6:6a:7a:84:cd:d7:c3:
7f:a4:7e:11:9a:57:00:84:71:b8:78:79:f7:c3:46:
13:04:d4:c9:ec:f5:81:16:81:8b:8b:24:19:da:31:
75:63:d5:31:5e:96:47:b7:a7:1b:fd:fe:32:cb:6f:
c4:60:c7:8b:f2:33:23:30:ed:21:ae:8b:bb:ad:8a:
dd:12:31:29:c3:32:38:b6:7e:f1:44:b0:eb:8c:b3:
85:58:60:80:7b:fc:71:a9:99:70:df:44:65:65:46:
36:f4:a6:fa:48:21:fa:87:46:b7:30:f6:8e:7b:12:
0b:2a:d6:ba:4d:d7:76:c5:03:09:e9:19:b6:8c:b1:
7e:cb:a6:3e:20:8b:ab:d6:09:ed:55:ff:27:69:d9:
db:aa:eb:87:7c:e0:70:80:b0:20:d0:b5:4f:32:35:
b8:38:78:c0:f7:a2:02:84:5f:de:53:ed:b4:69:10:
60:68:7c:eb:65:a1:91:35:20:f3:91:e5:93:cb:12:
96:6d:d0:a7:4a:ed:42:44:ae:26:b1:9f:f1:96:13:
48:25:f6:a2:e0:e9:80:92:32:c8:74:7b:1a:9a:e2:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:32:C0:01:62:AA:0A:F8:86:B0:AC:ED:E5:21:7B:DA:37:EE:BF:6C
X509v3 Authority Key Identifier:
keyid:7F:2C:92:A7:9F:62:FC:B9:19:E7:95:AB:5D:E3:13:F4:BD:A7:1D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyySp59i_LkZ55WrXeMT9L2nHd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/aTLAAWKqCviGsKzt5SF72jfuv2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ffb906-676e-4e0a-82f6-11f83d70c898/1/fyySp59i_LkZ55WrXeMT9L2nHd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3980::/29
Signature Algorithm: sha256WithRSAEncryption
4d:14:5b:80:1d:59:5c:51:8f:9d:db:dc:88:75:9e:a5:91:b6:
94:da:49:3c:a2:c1:14:d6:7d:f8:b3:57:22:29:6a:c4:ce:91:
18:ea:03:2f:3d:73:61:ac:cf:6e:5e:5e:31:8d:ab:ef:f8:d9:
c9:24:8f:68:5d:02:f1:50:1e:a6:10:c5:0e:63:fa:fb:7b:e9:
18:24:8e:42:9d:e1:51:51:33:30:8c:53:8f:97:de:13:89:07:
48:7a:a5:9f:43:3c:e4:13:59:e7:25:b0:08:6b:83:21:a9:68:
1a:50:e5:26:d9:d8:94:99:0e:64:52:c2:80:a5:5b:cb:6e:a6:
db:01:24:95:56:a2:33:86:78:b0:06:cb:a7:e2:65:a9:fe:c6:
33:aa:bf:06:c6:ce:94:37:ab:82:79:0b:4a:15:a6:03:ee:c9:
30:4b:8a:77:3e:42:84:ab:60:f6:95:2f:f5:13:d8:d2:55:a1:
5a:cd:45:71:2b:32:8d:a6:d1:65:70:3e:b3:3d:7f:9a:00:d3:
71:b8:76:51:d7:7a:1b:0b:e2:33:2b:3e:87:2c:7f:4b:bf:c8:
48:96:52:37:62:af:26:cb:7a:f8:2b:f2:1b:3e:10:d6:b6:c0:
c5:90:e5:47:70:96:69:83:d6:cb:07:8c:81:29:6a:aa:26:29:
9d:b8:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org