Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/ULToCSDsXrexfLTKD4MjuiTLGis.roa
File: ULToCSDsXrexfLTKD4MjuiTLGis.roa (raw, json)
Hash identifier: EZqiPyTURH6Havw6GiAtwBCPYlajNM7+Qdlr+HzUJEw=
Subject key identifier: 50:B4:E8:09:20:EC:5E:B7:B1:7C:B4:CA:0F:83:23:BA:24:CB:1A:2B
Certificate issuer: /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial: 018A516FEE74737B57707441F68873DB1AD3
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/ULToCSDsXrexfLTKD4MjuiTLGis.roa
Signing time: Fri 01 Sep 2023 15:50:04 +0000
ROA not before: Fri 01 Sep 2023 15:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55286
IP address blocks: 2a11:a580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:6f:ee:74:73:7b:57:70:74:41:f6:88:73:db:1a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Validity
Not Before: Sep 1 15:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50b4e80920ec5eb7b17cb4ca0f8323ba24cb1a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:ab:bf:55:15:c3:ba:2a:55:e7:b8:71:96:
87:fb:34:6e:c5:f7:39:7c:2e:c0:2d:c3:e8:64:73:
98:e5:9f:11:07:99:f1:2e:9b:07:37:b9:26:db:f8:
56:f9:c4:74:67:2b:7b:23:d3:90:fb:04:71:12:42:
06:ab:60:26:6c:89:3f:60:16:86:5c:4e:e3:07:27:
17:0f:10:2d:ef:96:54:cf:49:85:fa:67:65:8a:17:
a2:b5:ae:f9:43:92:c3:ce:a5:33:91:d3:34:e6:3e:
05:ad:64:00:23:f0:38:3a:df:4b:05:61:4a:1b:7f:
32:96:70:11:6d:05:38:98:42:5a:e0:11:2e:06:b5:
82:22:dd:b0:ef:7d:89:c4:02:86:eb:8a:47:91:1d:
82:c8:19:d0:26:f4:60:62:f8:41:56:5a:e0:d5:bf:
84:6b:e4:ed:83:82:8a:ee:d3:17:cb:bb:88:86:57:
b7:01:98:e4:b8:43:c5:c0:11:c2:db:27:a2:11:a3:
d5:f4:7c:44:cb:f9:50:5d:3e:6f:de:d6:bf:e4:5f:
4d:61:a3:b6:c3:d1:b5:f8:0b:57:5e:c0:30:4d:29:
79:1b:51:3b:ec:eb:e4:80:68:eb:e9:d3:07:31:1e:
25:80:11:92:20:80:99:96:bd:86:70:61:14:98:2d:
82:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B4:E8:09:20:EC:5E:B7:B1:7C:B4:CA:0F:83:23:BA:24:CB:1A:2B
X509v3 Authority Key Identifier:
keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/ULToCSDsXrexfLTKD4MjuiTLGis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a580::/32
Signature Algorithm: sha256WithRSAEncryption
1c:2d:85:9e:cd:1c:53:60:c1:8f:e2:1e:2c:cc:36:81:2a:d5:
f3:21:fd:37:7e:5a:01:5b:ea:5e:7d:aa:aa:04:f4:f4:c1:e6:
73:5f:01:4c:cc:65:bd:59:40:55:ef:22:ee:9d:e2:6c:ad:68:
d7:53:ac:f9:8c:e9:61:fa:d4:b2:40:f2:75:40:c0:32:e3:a3:
10:62:6c:45:06:a9:08:0e:de:93:af:26:86:54:ca:15:1f:e4:
30:fa:e5:7c:67:b7:91:87:31:9a:89:ba:29:78:b5:02:7f:62:
81:14:fe:42:21:50:87:6b:e5:ce:d4:97:07:4d:60:d9:7a:30:
3d:c1:70:45:fd:ff:73:2a:97:fa:34:b3:f8:e9:bf:71:dc:30:
07:05:64:89:4f:5c:06:b7:26:dd:ca:f2:43:b0:ee:dc:12:e0:
f0:18:81:bb:09:12:2f:87:5f:ea:e7:b3:da:7c:63:1e:c8:d8:
63:cd:9f:80:f8:e1:9f:57:07:5e:dd:a2:eb:94:47:08:d1:df:
fa:07:d5:d9:cf:8c:d1:21:9e:0e:9b:9c:44:2e:68:1f:bd:aa:
53:96:d8:17:88:d8:d1:f7:d3:d0:02:99:88:45:cd:3a:17:aa:
7d:30:18:08:73:ee:ae:ef:b8:41:3b:cb:89:e3:0d:39:76:54:
ec:95:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:11 2025 by rpki-client