Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/t38Vf484aW7IhFhCTWJI2fDMcFA.roa
File: t38Vf484aW7IhFhCTWJI2fDMcFA.roa (raw, json)
Hash identifier: 1YrmDiaKopXYlZguOPobZ6lBSFLeR+ExEKYzt8va6F4=
Subject key identifier: B7:7F:15:7F:8F:38:69:6E:C8:84:58:42:4D:62:48:D9:F0:CC:70:50
Certificate issuer: /CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Certificate serial: 0183130E8AE0C2EE29C54C47B779544B1DFE
Authority key identifier: 3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/t38Vf484aW7IhFhCTWJI2fDMcFA.roa
Signing time: Tue 06 Sep 2022 13:47:43 +0000
ROA not before: Tue 06 Sep 2022 13:47:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:3c80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:0e:8a:e0:c2:ee:29:c5:4c:47:b7:79:54:4b:1d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4709d8bd7573ab1df2233b741def2f84c94fee
Validity
Not Before: Sep 6 13:47:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b77f157f8f38696ec88458424d6248d9f0cc7050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:aa:b2:17:43:b2:83:ee:39:77:c8:fc:0c:
1b:b0:1c:bf:a4:c9:f4:d5:9b:f4:09:40:85:70:d3:
63:05:87:94:d4:c7:fa:21:f5:de:45:d7:76:b0:c0:
d0:c0:96:70:83:55:eb:87:68:26:98:a1:76:df:de:
79:1e:a4:24:d5:14:a8:c2:49:45:b4:44:05:b2:7c:
6e:cb:a4:37:62:ef:b3:eb:0a:d3:5c:22:c2:9e:03:
ed:cc:76:6e:34:26:72:c0:bb:2e:25:4d:ef:0c:be:
6e:b0:45:6f:ea:6f:bb:16:9b:11:87:8c:c3:31:d5:
b7:90:e3:9c:43:0e:07:23:91:fe:44:15:1f:97:56:
72:88:54:0e:34:f3:66:86:89:49:f0:f3:b7:05:fd:
50:35:48:54:56:7e:09:2b:07:b9:9c:9f:40:22:30:
75:a3:e3:fe:fe:c7:5c:e9:94:48:f0:03:3b:9b:b0:
74:a7:bd:d6:24:c9:5e:aa:b1:69:8a:44:bd:59:cd:
be:a1:0f:de:a4:9b:f4:03:93:f9:34:8c:b7:a0:19:
d4:e9:19:f7:21:44:10:9f:a0:6e:ce:4b:c1:34:7e:
eb:9d:0d:70:0b:b9:01:aa:ed:e3:77:53:a5:23:15:
48:fd:a1:31:a2:61:4f:b1:1b:b3:fb:e5:46:f8:a4:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7F:15:7F:8F:38:69:6E:C8:84:58:42:4D:62:48:D9:F0:CC:70:50
X509v3 Authority Key Identifier:
keyid:3D:47:09:D8:BD:75:73:AB:1D:F2:23:3B:74:1D:EF:2F:84:C9:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUcJ2L11c6sd8iM7dB3vL4TJT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/t38Vf484aW7IhFhCTWJI2fDMcFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/238c6a-c671-4a34-934a-505d681d6172/1/PUcJ2L11c6sd8iM7dB3vL4TJT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c80::/29
Signature Algorithm: sha256WithRSAEncryption
87:fc:a7:a1:23:ea:d8:ab:74:56:60:c7:16:89:7b:56:85:f1:
03:c9:e6:ed:89:8e:f4:4f:77:06:a5:12:2c:ad:61:3b:95:13:
e8:c0:b3:6f:70:ce:86:e1:f8:23:98:d0:ab:fb:11:2e:4c:db:
13:7b:27:d8:0d:a0:b3:9d:f2:49:c7:6a:13:a0:3b:00:65:70:
84:91:09:ae:b2:44:7e:ab:33:0b:44:b9:a8:b6:be:7a:1c:cf:
bb:20:89:cb:5a:22:43:f2:d3:dd:9a:a7:95:dc:bc:08:aa:43:
4e:3b:2f:4b:c0:5c:4d:a3:74:17:37:e1:20:4d:c0:d8:16:11:
11:1d:a2:67:8c:5f:31:e0:7c:c2:9b:77:0f:4b:bb:e8:5b:ac:
b3:31:d8:21:9d:a5:92:a3:1c:9b:cf:f6:db:2d:ac:d0:98:12:
7f:5e:65:99:b0:62:ad:47:78:1c:4e:60:14:73:24:d4:2b:e5:
3f:d6:ec:77:f8:76:52:6b:90:e9:31:b4:5a:9f:04:72:e8:a6:
76:6f:f5:f1:52:60:81:a6:0b:18:16:a3:02:f7:58:6a:68:66:
7d:8c:14:71:43:bd:48:1a:ed:d2:03:fe:17:ac:71:52:28:73:
07:59:36:44:1b:e4:ca:72:1f:4b:19:12:b1:aa:c9:69:7c:39:
de:de:34:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:03 2025 by rpki-client