Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa
File: 8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa (raw, json)
Hash identifier: WZlpZsXsoaMMQAUFBTXN2OEE2y6BlebiS1fuK7FoqMA=
Subject key identifier: F1:CB:93:40:AB:CB:6C:71:BE:C2:C6:31:64:6E:E5:86:66:98:51:40
Certificate issuer: /CN=92c51555a81fd209ff79abed14369ec7917ced62
Certificate serial: 01856F302377E824F8C708E3AA7D071C5889
Authority key identifier: 92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa
Signing time: Sun 01 Jan 2023 21:15:03 +0000
ROA not before: Sun 01 Jan 2023 21:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:3540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:23:77:e8:24:f8:c7:08:e3:aa:7d:07:1c:58:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c51555a81fd209ff79abed14369ec7917ced62
Validity
Not Before: Jan 1 21:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1cb9340abcb6c71bec2c631646ee58666985140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4a:92:7c:34:56:2b:a0:e9:ee:1e:10:15:0c:
43:07:3e:da:15:21:98:ef:7d:e3:12:1a:1b:01:c6:
1a:21:10:d3:dd:7c:6f:35:60:45:56:75:6c:c8:a8:
7b:e2:7a:bf:b6:46:81:54:f6:28:a7:b8:a6:63:92:
14:69:a9:8f:7e:0c:fb:12:31:7b:b1:ef:a7:b5:8e:
d5:73:dd:96:55:3f:75:b7:08:8b:18:5a:6a:e9:c9:
38:45:0c:b1:3f:a7:09:33:1b:ff:c5:a8:1b:82:2f:
1a:21:48:29:ce:a6:98:48:db:47:a6:4c:22:46:75:
c0:a6:4d:3f:c0:42:76:7b:0b:4f:56:9f:5b:65:fc:
80:85:2b:d9:93:8c:eb:ee:11:6c:df:56:d3:b2:98:
1d:66:c9:85:9c:d5:40:78:65:82:f4:0a:56:26:98:
03:5b:30:a4:82:ce:35:75:de:1f:c5:51:ed:5a:48:
91:1a:4c:54:00:49:5f:a5:32:6a:29:10:d4:c0:70:
b0:1a:17:6c:b2:39:bf:06:39:8c:a4:fc:00:da:aa:
13:5d:61:80:84:fb:67:a7:f4:43:6f:1a:ed:7e:e6:
d7:98:29:5c:09:1f:b2:8a:72:b3:22:fb:bb:ea:0e:
39:4d:17:a8:74:6c:9a:01:59:c0:85:37:da:7c:a6:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CB:93:40:AB:CB:6C:71:BE:C2:C6:31:64:6E:E5:86:66:98:51:40
X509v3 Authority Key Identifier:
keyid:92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/8cuTQKvLbHG-wsYxZG7lhmaYUUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/ksUVVagf0gn_eavtFDaex5F87WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3540::/29
Signature Algorithm: sha256WithRSAEncryption
a3:0d:73:5b:98:41:7e:a5:87:6c:05:b6:63:1c:1e:83:dc:fd:
0a:7a:e9:6a:36:cd:45:7b:e4:07:88:f5:00:fb:ce:04:96:8f:
c1:05:cd:e8:59:51:04:6a:1e:a1:e2:c7:46:f6:cd:df:e6:47:
a9:7c:8c:5a:ab:b4:e3:83:c5:6c:7f:71:74:92:88:61:30:39:
28:6b:90:9c:35:e7:af:ee:da:4c:a3:4b:6e:ba:c9:1e:7a:86:
59:6d:a9:a9:3e:58:f6:3b:df:c4:da:b3:19:07:1b:ab:3d:a2:
f9:fd:46:b8:08:b2:88:a9:14:c3:b1:dd:80:08:65:b8:d8:74:
dc:fd:1a:3c:0d:4d:7b:4f:71:f0:93:d6:db:39:bd:fe:12:40:
f9:91:00:03:1b:13:33:5b:1c:47:42:41:77:72:8c:41:cd:45:
5b:fb:ac:45:a2:38:c5:71:a5:b4:8f:35:8a:f7:eb:8b:a9:e8:
d3:af:c2:2e:4c:10:8b:34:e8:d7:0a:bd:49:82:96:4b:61:cc:
5e:cf:8e:70:46:8f:92:14:93:8a:7f:11:6f:32:22:a9:40:18:
e2:91:c8:ce:3a:94:b9:70:d1:2c:15:61:1a:d9:d4:6c:af:fb:
c9:3d:af:30:92:4c:52:75:8a:64:43:27:cd:82:4e:ac:ba:62:
5d:7c:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:44 2025 by rpki-client