Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/UM95q0mIGXqLE2GDK2mkOFlYSFI.roa
File: UM95q0mIGXqLE2GDK2mkOFlYSFI.roa (raw, json)
Hash identifier: Oa6SvKwCh42EKzIUoXMnXu+7jtRQk8Vv4FGh9GZA6Qk=
Subject key identifier: 50:CF:79:AB:49:88:19:7A:8B:13:61:83:2B:69:A4:38:59:58:48:52
Certificate issuer: /CN=92c51555a81fd209ff79abed14369ec7917ced62
Certificate serial: 0105978B
Authority key identifier: 92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/UM95q0mIGXqLE2GDK2mkOFlYSFI.roa
Signing time: Sat 01 Jan 2022 08:00:37 +0000
ROA not before: Sat 01 Jan 2022 08:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:3540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17143691 (0x105978b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c51555a81fd209ff79abed14369ec7917ced62
Validity
Not Before: Jan 1 08:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=50cf79ab4988197a8b1361832b69a43859584852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:d0:2b:08:43:d1:38:ed:52:3b:b9:0b:fc:
f4:a4:b8:3b:b2:61:9c:15:85:0f:16:38:90:d5:f3:
36:3c:57:83:ac:9b:28:91:43:82:00:9a:19:c6:61:
9a:f4:60:80:9b:c7:98:5a:09:bc:a3:17:e1:b5:db:
fa:1a:be:c4:0e:1d:11:b9:cb:17:30:8b:2a:ac:1c:
b7:7e:ef:4d:65:a0:91:44:72:45:47:14:91:83:dd:
e8:41:e3:83:1c:9c:09:b6:83:80:a9:68:71:97:5e:
2c:68:c5:03:03:ad:35:5d:0b:d0:06:9e:bf:16:94:
34:56:88:97:75:26:45:12:d6:42:19:e5:91:ea:4e:
b1:26:51:95:aa:99:9d:c4:0d:81:e9:93:a0:7a:b2:
d7:47:c6:29:09:c9:c9:a4:c9:e2:2f:2d:89:9a:4a:
97:53:a3:a9:b2:0f:d9:83:cc:d0:ab:5c:5e:26:a3:
3c:90:61:62:6f:44:76:6e:58:0a:33:6f:8f:e3:8a:
75:3a:62:df:c4:b0:91:fc:de:c4:07:cd:51:cc:a6:
eb:a8:27:94:09:3e:bc:fd:ce:e9:97:93:77:78:0d:
e4:3c:73:dc:94:84:2d:32:68:1c:54:26:2e:53:3a:
6f:08:5f:fb:c7:16:88:dd:ff:4b:3b:1f:d1:23:4d:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:79:AB:49:88:19:7A:8B:13:61:83:2B:69:A4:38:59:58:48:52
X509v3 Authority Key Identifier:
keyid:92:C5:15:55:A8:1F:D2:09:FF:79:AB:ED:14:36:9E:C7:91:7C:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksUVVagf0gn_eavtFDaex5F87WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/UM95q0mIGXqLE2GDK2mkOFlYSFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f78c76-0c2b-4edf-8c72-65d74a62ab22/1/ksUVVagf0gn_eavtFDaex5F87WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3540::/29
Signature Algorithm: sha256WithRSAEncryption
54:3f:e7:24:e0:35:06:7a:1b:7c:22:c7:3a:31:5d:11:bf:92:
8b:b0:49:87:0c:80:bc:fc:b3:ee:6b:47:b5:73:3a:fc:ee:c4:
46:fa:17:d9:3c:56:01:8e:c3:83:01:33:9b:6d:c5:89:9b:d0:
9e:ce:b6:18:62:87:a4:d7:92:4e:cd:f6:cd:84:ef:dc:b6:19:
a9:3d:7f:4f:fc:2f:a8:95:98:c8:f3:df:2a:c0:39:79:a9:e5:
ce:15:a6:4f:6e:1d:10:f1:69:ea:ed:03:14:13:11:ce:e3:b0:
aa:9c:74:3b:0d:09:c6:9d:24:9e:4e:07:4c:0c:17:56:d5:4e:
b9:a3:7c:70:b9:bd:84:76:ee:9d:20:dd:d0:48:ed:04:17:03:
e7:87:88:0f:ed:cd:9f:43:c5:dc:a4:99:de:2d:45:ec:47:6d:
ef:71:fb:13:d9:fb:60:e9:5a:06:72:75:27:6b:3a:32:e4:38:
b2:35:d7:67:66:fc:6a:92:03:4e:ec:99:9a:ed:9d:85:1a:f2:
ac:1a:0f:11:a7:0c:96:da:09:01:d7:a4:1e:8b:56:e3:74:b8:
aa:bd:d0:41:e7:b4:8b:00:3f:56:1a:96:61:83:1e:11:5f:c8:
9a:fd:06:39:9a:4b:bd:68:86:53:e5:5b:36:7f:62:86:37:f3:
1a:8b:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:03 2024 by rpki-client on console-fra.rpki-client.org