Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/tPXrcnPGGXZ_cBTK1eMqQlMOZhE.roa
File: tPXrcnPGGXZ_cBTK1eMqQlMOZhE.roa (raw, json)
Hash identifier: E6v/80ni2JdyTMaZQClZxGMBiSDAjB0Uhj1LNdVeEHY=
Subject key identifier: B4:F5:EB:72:73:C6:19:76:7F:70:14:CA:D5:E3:2A:42:53:0E:66:11
Certificate issuer: /CN=c7308faa4710efe23d2d844b4f0dcb0accc44ceb
Certificate serial: 01856BDC9369EFA23786D11ADE9796C20F65
Authority key identifier: C7:30:8F:AA:47:10:EF:E2:3D:2D:84:4B:4F:0D:CB:0A:CC:C4:4C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xzCPqkcQ7-I9LYRLTw3LCszETOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/tPXrcnPGGXZ_cBTK1eMqQlMOZhE.roa
Signing time: Sun 01 Jan 2023 05:44:55 +0000
ROA not before: Sun 01 Jan 2023 05:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:5ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:93:69:ef:a2:37:86:d1:1a:de:97:96:c2:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7308faa4710efe23d2d844b4f0dcb0accc44ceb
Validity
Not Before: Jan 1 05:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4f5eb7273c619767f7014cad5e32a42530e6611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:a3:35:62:c6:ca:eb:bc:19:ed:64:48:45:
21:97:71:c1:6b:25:5b:44:80:36:72:98:29:db:c2:
81:49:c6:83:82:8b:87:9e:e9:90:5a:30:82:3e:4d:
4d:f6:3d:0a:c1:09:f3:9c:26:9c:6d:43:79:dd:f0:
b8:7b:2c:61:5c:53:a9:10:e1:97:0b:cb:91:3a:d0:
4e:9b:77:3f:a6:93:4f:3d:ea:ac:78:90:c7:29:ba:
e8:91:b2:b5:fa:a0:0b:e6:14:64:d9:f6:c2:d4:d5:
e9:46:f1:cb:35:a0:73:3a:04:3d:10:21:db:00:86:
02:05:26:3f:c6:95:ea:6c:5f:f8:f3:ee:6d:70:82:
c4:d1:a5:1c:4a:ac:dc:e0:f0:6c:28:57:4d:ca:fb:
a3:cc:c7:b7:1c:86:17:8c:ae:89:f0:80:4e:2e:72:
57:1b:e8:97:83:51:4d:fb:17:81:66:24:78:0d:64:
48:75:40:7d:32:fc:05:1c:df:b4:88:b8:05:14:f4:
4d:13:ff:4d:71:d6:44:b6:7e:1d:78:a6:d4:60:dd:
88:9f:c3:f4:8f:fb:33:79:d4:51:52:77:59:24:c1:
8d:bb:6a:10:fb:34:55:22:f4:5c:9a:a4:e8:76:9b:
29:85:40:3d:8f:56:d5:6e:97:31:f0:5a:2e:f5:7b:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:EB:72:73:C6:19:76:7F:70:14:CA:D5:E3:2A:42:53:0E:66:11
X509v3 Authority Key Identifier:
keyid:C7:30:8F:AA:47:10:EF:E2:3D:2D:84:4B:4F:0D:CB:0A:CC:C4:4C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzCPqkcQ7-I9LYRLTw3LCszETOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/tPXrcnPGGXZ_cBTK1eMqQlMOZhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7e3bce-4c30-402d-9692-dbc79d708ff3/1/xzCPqkcQ7-I9LYRLTw3LCszETOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5ac0::/29
Signature Algorithm: sha256WithRSAEncryption
16:93:ce:7d:01:96:61:9c:bc:2e:6e:2e:e1:dd:94:fe:ed:18:
1f:0e:b3:db:57:ba:ce:1f:ec:65:e2:d0:d1:d8:8e:0c:1e:13:
48:6f:ca:0b:39:c7:3a:45:24:90:8d:13:83:4f:30:a9:7e:19:
d2:fc:82:8b:44:61:bb:05:11:33:ac:a6:d6:63:6e:e8:43:b0:
d8:84:03:3f:fd:73:b6:b3:3f:c0:3a:a9:8c:4e:2c:30:ac:6e:
8b:eb:03:77:46:d8:57:0f:cb:60:6d:52:ad:32:cb:35:f5:e3:
e4:d2:7c:80:9b:24:bf:65:45:7c:e7:84:8e:4f:52:fb:6f:81:
f1:94:f3:e2:0a:bf:a6:63:44:e6:ef:f6:0f:be:82:82:28:7c:
74:6d:e4:9a:99:71:85:b1:09:90:83:f3:d5:0a:2e:0c:e6:28:
69:2a:f2:5f:b0:00:f3:3c:ee:15:2b:11:ba:7f:0e:a9:da:6f:
a2:d6:13:3e:b4:c7:0a:b2:1c:7d:aa:13:c6:3e:89:13:d5:54:
0d:ba:26:ed:82:f9:26:29:c1:f4:da:a0:13:cf:69:c7:3e:e7:
0e:34:75:77:93:dd:24:b9:68:45:42:9a:d5:30:11:9f:57:8b:
2e:ce:40:22:d0:04:3a:9b:56:d1:4e:eb:64:b5:93:7c:7c:44:
6b:a8:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:37 2025 by rpki-client