Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/lNmy9Y3EO_ZfgRC0rPugXPyRQ5A.roa
File: lNmy9Y3EO_ZfgRC0rPugXPyRQ5A.roa (raw, json)
Hash identifier: ktAZEd2Qcj+rA3oULFZBEU7iObMecOlFNF5T0Q3UYi8=
Subject key identifier: 94:D9:B2:F5:8D:C4:3B:F6:5F:81:10:B4:AC:FB:A0:5C:FC:91:43:90
Certificate issuer: /CN=7bec7ab82baa073bb12e62cb4d04c3e06ce97cfa
Certificate serial: AA3971
Authority key identifier: 7B:EC:7A:B8:2B:AA:07:3B:B1:2E:62:CB:4D:04:C3:E0:6C:E9:7C:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-x6uCuqBzuxLmLLTQTD4GzpfPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/lNmy9Y3EO_ZfgRC0rPugXPyRQ5A.roa
Signing time: Sat 01 Jan 2022 13:00:50 +0000
ROA not before: Sat 01 Jan 2022 13:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:1980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11155825 (0xaa3971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bec7ab82baa073bb12e62cb4d04c3e06ce97cfa
Validity
Not Before: Jan 1 13:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94d9b2f58dc43bf65f8110b4acfba05cfc914390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:cb:1d:ca:fe:e9:ef:f5:25:cc:c0:60:78:
f7:40:f6:bc:f0:23:db:69:a2:b0:4d:43:bc:8b:13:
63:ae:c2:47:21:06:71:57:37:1f:e0:38:e3:57:2b:
57:e4:e5:d6:0c:10:e1:b0:d7:5f:60:78:b8:3d:ca:
45:bf:33:b0:47:5a:91:80:9e:c6:3a:53:29:de:44:
5d:97:eb:a0:b4:72:ea:73:d6:d7:d4:ba:ac:40:c4:
12:ed:c2:27:b8:a3:63:30:c3:98:31:ce:73:05:3e:
0a:90:4e:64:3a:c8:07:f7:20:d3:53:fa:8c:21:78:
4c:9e:45:bb:34:72:2f:92:aa:ba:cf:35:57:45:b4:
74:3d:5e:84:07:cd:0d:09:fd:98:b6:40:45:a5:4f:
87:ff:42:8b:92:7d:74:87:49:35:bf:8f:97:2c:fd:
23:08:22:77:f3:80:1e:88:df:93:de:9e:da:96:aa:
df:da:0a:dc:5d:ee:35:61:83:a9:1d:8a:2b:12:e0:
f0:ec:93:3b:97:14:3c:1c:aa:33:81:99:e0:50:37:
ba:1e:93:f4:98:e4:7c:a1:f8:ab:e4:f8:45:37:5d:
30:2a:49:4c:7e:c8:7b:e0:39:fd:7c:7b:45:b3:03:
10:4d:73:88:ff:e9:87:79:30:9e:12:03:03:7a:49:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D9:B2:F5:8D:C4:3B:F6:5F:81:10:B4:AC:FB:A0:5C:FC:91:43:90
X509v3 Authority Key Identifier:
keyid:7B:EC:7A:B8:2B:AA:07:3B:B1:2E:62:CB:4D:04:C3:E0:6C:E9:7C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-x6uCuqBzuxLmLLTQTD4GzpfPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/lNmy9Y3EO_ZfgRC0rPugXPyRQ5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/011ee3-8bb5-4646-a5a3-73ac1975f698/1/e-x6uCuqBzuxLmLLTQTD4GzpfPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1980::/29
Signature Algorithm: sha256WithRSAEncryption
0b:ee:cb:a2:50:28:de:20:d1:00:5a:07:c7:e7:ae:57:4b:17:
ca:a9:80:02:9a:f4:4a:26:15:09:cf:27:cf:ca:c9:04:94:55:
3c:1f:e8:3a:4d:8d:19:5c:19:18:42:51:cb:cf:04:0d:11:62:
46:00:15:e1:a2:2a:92:2a:e6:fd:f9:d4:b8:ee:7c:13:be:f0:
d1:16:b5:f5:7b:21:d9:0f:9a:4a:c1:31:10:40:87:94:b6:39:
54:3b:1c:00:d3:17:f0:90:de:3f:e3:c2:06:7f:67:66:68:72:
b8:ac:2e:e5:d1:7d:85:74:a2:30:77:ad:3f:e0:ff:46:b2:63:
7e:88:70:6c:e8:44:c8:d2:b4:bc:32:ad:f1:34:18:ba:61:de:
46:58:d6:e5:1d:70:61:bb:db:4a:4e:c4:5f:85:ca:8e:98:46:
56:91:c8:e8:59:04:ec:1e:69:9c:77:17:6c:c2:ac:ae:21:dc:
bd:9c:81:61:3a:c7:b7:c1:7b:07:e8:72:c6:81:13:c1:8c:e9:
a6:9d:95:10:3b:f1:55:47:4c:a3:31:78:82:3f:fd:67:0f:aa:
ea:fb:84:da:5e:11:35:dd:56:22:7c:8d:85:ad:8f:9e:32:78:
e5:7a:16:3c:40:6a:47:76:90:cb:75:c7:85:a2:3a:41:76:d4:
82:c8:88:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:11 2025 by rpki-client