Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/UyENzbzbHoGzeKXVNaT_EzK07F8.roa
File: UyENzbzbHoGzeKXVNaT_EzK07F8.roa (raw, json)
Hash identifier: txZA3yUhl8qnsMreX9Ei64apPP9I7TnYnojFOndbE7g=
Subject key identifier: 53:21:0D:CD:BC:DB:1E:81:B3:78:A5:D5:35:A4:FF:13:32:B4:EC:5F
Certificate issuer: /CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Certificate serial: 01AE05C8
Authority key identifier: 64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/UyENzbzbHoGzeKXVNaT_EzK07F8.roa
Signing time: Sat 01 Jan 2022 01:56:26 +0000
ROA not before: Sat 01 Jan 2022 01:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:2280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28181960 (0x1ae05c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647c0936487ec5d803e4d5a9a5100c4651f45437
Validity
Not Before: Jan 1 01:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53210dcdbcdb1e81b378a5d535a4ff1332b4ec5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:74:7a:db:8d:7d:19:b7:3e:16:43:48:9e:
a2:bd:44:d8:47:52:58:c5:4a:16:4b:f5:86:a2:7e:
50:54:21:8e:f9:b6:8b:ab:29:a5:77:ee:10:5f:db:
e4:63:87:a8:54:b5:50:cf:39:c4:74:83:80:70:78:
2b:4b:3b:60:16:60:fc:e3:8b:58:d2:47:ec:1a:ba:
18:92:fd:b5:b2:5c:88:a1:80:0a:24:e0:2b:a5:2b:
bb:60:75:7b:a2:ab:8b:81:23:2b:4d:83:c8:85:da:
df:75:40:90:1b:06:d9:0d:f2:72:e9:1c:09:a3:1c:
49:5c:01:48:2a:40:1a:38:b0:74:8f:15:e2:39:83:
c0:bf:70:ee:ce:83:6e:54:73:31:81:1b:11:41:03:
42:88:1c:a8:04:82:7b:c7:de:e7:97:ac:78:44:3b:
15:ca:d9:cf:88:08:cd:92:7d:80:83:9c:5a:c9:67:
a3:5f:90:9c:7c:8a:d8:fd:2d:3a:e2:a0:4b:76:e5:
6f:d5:5b:33:f1:8f:90:8d:ab:19:08:8f:6d:fe:c8:
40:6a:7c:99:82:29:3d:09:7b:5b:cf:f1:3d:f0:26:
5d:1f:60:d6:10:ae:16:50:db:77:eb:1c:cf:ed:4a:
4d:da:35:2e:15:d3:8e:d1:4b:c9:2c:51:df:48:84:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:0D:CD:BC:DB:1E:81:B3:78:A5:D5:35:A4:FF:13:32:B4:EC:5F
X509v3 Authority Key Identifier:
keyid:64:7C:09:36:48:7E:C5:D8:03:E4:D5:A9:A5:10:0C:46:51:F4:54:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHwJNkh-xdgD5NWppRAMRlH0VDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/UyENzbzbHoGzeKXVNaT_EzK07F8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/984602-4a90-4551-bf49-2edbdfaff47e/1/ZHwJNkh-xdgD5NWppRAMRlH0VDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2280::/29
Signature Algorithm: sha256WithRSAEncryption
70:ec:6f:0c:38:2b:0e:90:77:55:27:3b:ae:7e:4d:8b:fd:34:
f2:fe:63:52:b9:a4:28:67:ea:67:80:5d:71:69:e6:f9:91:ce:
44:3f:07:ea:da:06:f6:ba:73:bd:e3:09:89:72:7f:59:95:d1:
f4:ad:6f:4e:24:b1:1f:d8:0e:33:3c:f0:1c:3f:82:c1:4a:e7:
a4:ce:3a:1c:e9:43:ea:ad:42:43:6d:09:a5:64:e0:e5:54:27:
79:b2:5d:e5:e3:fb:3c:af:9d:84:5b:ba:76:16:cb:9c:8f:f6:
76:53:b1:54:fc:3e:4f:87:f2:80:85:52:00:d6:f2:59:61:61:
88:b8:70:14:ff:25:8f:c1:85:f4:bc:47:ad:6f:c1:2a:2c:a1:
87:bf:8f:5e:b2:61:75:10:e9:0a:a8:4b:0f:59:9b:03:67:74:
89:1d:7b:6e:ee:79:27:df:3f:d4:ef:68:65:44:e8:6a:ed:6c:
ad:f7:05:60:4a:6f:9b:c9:55:a8:ae:30:94:95:17:c0:1d:48:
ad:d9:ef:11:c6:e5:f7:7a:48:6a:0d:27:77:2f:fa:a3:17:8c:
b9:64:10:a2:91:a0:c2:73:c0:8f:8e:5f:10:e6:6f:37:2f:94:
a0:8e:7c:94:54:64:a7:b8:0d:42:b2:ec:b2:bf:a5:61:16:08:
85:24:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 06:39:32 2025 by rpki-client