Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/x34_1q3SFRc2DvKBHviNDk1snaA.roa
File: x34_1q3SFRc2DvKBHviNDk1snaA.roa (raw, json)
Hash identifier: Ijo/ceROEOC00FItusgPNQbM6ftWJlR9SoZgi9ywhUw=
Subject key identifier: C7:7E:3F:D6:AD:D2:15:17:36:0E:F2:81:1E:F8:8D:0E:4D:6C:9D:A0
Certificate issuer: /CN=1e9f66ed6e695f1c0c482f682cce3f069f804ede
Certificate serial: 013755B7
Authority key identifier: 1E:9F:66:ED:6E:69:5F:1C:0C:48:2F:68:2C:CE:3F:06:9F:80:4E:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp9m7W5pXxwMSC9oLM4_Bp-ATt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/x34_1q3SFRc2DvKBHviNDk1snaA.roa
Signing time: Tue 08 Feb 2022 09:37:30 +0000
ROA not before: Tue 08 Feb 2022 09:37:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34734
IP address blocks: 2a11:3a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20403639 (0x13755b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9f66ed6e695f1c0c482f682cce3f069f804ede
Validity
Not Before: Feb 8 09:37:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c77e3fd6add21517360ef2811ef88d0e4d6c9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:a7:24:a4:32:3e:74:44:90:74:b3:50:c4:
3a:17:46:2f:71:eb:97:ac:66:a0:cc:e4:31:dd:dc:
bc:8a:e1:fe:0e:5c:9b:09:5b:70:6a:8b:eb:0e:73:
8c:87:17:b9:64:61:61:a7:21:21:ee:b5:8d:64:30:
6f:c7:6d:b8:8c:36:7d:84:c4:d7:0b:01:68:a4:67:
92:78:70:36:5e:a8:0b:cd:11:52:f1:5c:17:f7:cb:
92:9f:83:e1:4e:48:9c:76:6e:19:52:18:a8:b8:7f:
f5:ef:25:7f:04:0d:96:9a:4d:51:23:2e:11:14:35:
b5:a3:23:94:c9:43:6c:6c:64:fa:f8:35:6b:af:84:
65:52:df:e7:b6:4e:3d:74:5b:a1:c4:06:2c:00:81:
ca:5d:df:f6:66:e7:92:dc:69:5e:df:83:c6:9d:ae:
7e:60:26:9e:85:e1:17:f3:1d:f6:24:97:07:aa:22:
17:87:b2:0c:db:ed:bc:02:75:7d:23:97:cc:92:95:
ff:c2:79:97:80:83:a4:5a:f9:a9:70:af:ca:5a:31:
30:f9:09:5c:a3:41:2e:98:f9:ae:04:a9:27:1c:23:
64:d7:d6:64:fa:e8:13:54:4a:cd:e0:92:f9:1f:61:
10:fc:5e:54:c8:85:da:c4:4d:df:29:d8:7d:7b:fc:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:3F:D6:AD:D2:15:17:36:0E:F2:81:1E:F8:8D:0E:4D:6C:9D:A0
X509v3 Authority Key Identifier:
keyid:1E:9F:66:ED:6E:69:5F:1C:0C:48:2F:68:2C:CE:3F:06:9F:80:4E:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp9m7W5pXxwMSC9oLM4_Bp-ATt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/x34_1q3SFRc2DvKBHviNDk1snaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/31a95f-1b56-4db3-90b6-29c838f6278d/1/Hp9m7W5pXxwMSC9oLM4_Bp-ATt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
7c:0f:e4:db:0e:29:d5:51:a7:8f:b6:a3:ab:64:09:15:1b:c8:
d0:a5:c1:6b:b5:40:6e:b4:a1:22:7f:97:4e:69:0e:8f:cd:b3:
b2:5a:b6:c7:9d:e8:ed:7b:e9:41:c3:cf:f4:2c:b9:2b:88:0d:
85:c6:d4:70:7b:70:76:2c:8d:52:99:e2:e0:14:10:df:19:a1:
37:fe:71:58:c5:ae:75:3f:4e:b4:7b:85:64:58:49:7f:b9:69:
ab:28:bc:d5:84:4e:b8:b2:57:95:df:fd:36:0b:dc:89:cb:8f:
83:d3:a7:aa:58:27:b4:eb:f9:09:f2:a2:1d:0f:0f:94:cb:6e:
02:d4:43:f4:ab:2d:5b:1d:b1:6b:43:9c:a9:7b:d1:cd:6f:71:
4a:5e:9a:d6:d5:17:63:96:b1:11:2c:26:f1:18:01:48:dd:cf:
1c:e8:cc:62:a3:71:0c:4d:82:94:2a:eb:ea:c3:6d:15:ac:63:
aa:2d:ba:72:1b:2a:1b:3d:32:b6:eb:7c:37:c4:14:25:9a:fd:
76:38:82:db:10:78:8f:4f:d1:a8:71:b6:46:11:ac:28:97:a3:
49:62:fc:c2:a8:0c:17:82:03:be:03:30:71:06:10:7b:73:89:
5c:f1:e0:b7:bf:dd:49:7b:a7:64:cf:42:7b:c0:2c:e7:8f:fa:
a2:85:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:18:04 2025 by rpki-client