Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/8jvGiLJe0y1i6E7qEhNpQyaHWNs.roa
File: 8jvGiLJe0y1i6E7qEhNpQyaHWNs.roa (raw, json)
Hash identifier: vY4Us8oPX0K4ZoYdk+VcQNSdS+H1YkR/aKmF3WmuS1o=
Subject key identifier: F2:3B:C6:88:B2:5E:D3:2D:62:E8:4E:EA:12:13:69:43:26:87:58:DB
Certificate issuer: /CN=56b001a946e67129d794235b515b20d9ea908a87
Certificate serial: 01856BF7EDEB667FA4544F5B386A5A318FB1
Authority key identifier: 56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/8jvGiLJe0y1i6E7qEhNpQyaHWNs.roa
Signing time: Sun 01 Jan 2023 06:14:48 +0000
ROA not before: Sun 01 Jan 2023 06:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:9cc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:f7:ed:eb:66:7f:a4:54:4f:5b:38:6a:5a:31:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b001a946e67129d794235b515b20d9ea908a87
Validity
Not Before: Jan 1 06:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f23bc688b25ed32d62e84eea12136943268758db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:2a:59:c1:24:46:1f:eb:09:dd:72:8d:8e:
98:b2:49:e2:e7:cc:ff:00:ae:ea:ff:27:33:71:6c:
9e:22:13:c6:a0:78:3d:dc:cc:53:e3:eb:f5:aa:34:
f7:18:bb:e5:34:24:1f:85:93:d5:00:25:c9:20:6f:
41:03:1d:29:73:c9:4d:18:90:e8:ef:8f:16:ad:0e:
aa:96:10:ec:09:b3:7d:56:44:cd:aa:46:d4:ab:89:
12:15:13:51:f7:95:9f:23:71:af:cb:53:22:d2:eb:
ad:df:2e:36:ac:02:29:0f:c0:f1:41:13:e1:d3:33:
6d:e8:68:51:e9:38:be:1a:2e:7a:02:2d:67:c2:1a:
48:af:80:ab:90:2e:98:98:49:62:14:dc:24:9b:cc:
33:0a:dd:5f:17:28:33:7f:7a:11:ec:66:f4:94:b1:
15:bd:e0:fc:7d:98:d3:54:7b:cb:24:75:aa:88:40:
c0:5d:d7:03:02:8d:75:57:ff:fb:33:1f:c3:5e:13:
11:0e:52:c7:d9:42:17:07:cd:34:b8:c3:21:98:76:
be:5d:51:1e:c6:83:1e:df:e0:8d:b2:7e:2b:62:dd:
2d:a3:64:42:b6:27:9f:30:b7:f1:c0:b6:12:ea:8b:
21:b0:6d:46:a4:ed:10:47:65:3d:72:6f:cd:e1:99:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:C6:88:B2:5E:D3:2D:62:E8:4E:EA:12:13:69:43:26:87:58:DB
X509v3 Authority Key Identifier:
keyid:56:B0:01:A9:46:E6:71:29:D7:94:23:5B:51:5B:20:D9:EA:90:8A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrABqUbmcSnXlCNbUVsg2eqQioc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/8jvGiLJe0y1i6E7qEhNpQyaHWNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c62f5a-fe95-4926-85a2-e18e3c4e9cd1/1/VrABqUbmcSnXlCNbUVsg2eqQioc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
03:97:69:95:a6:5f:93:fb:9a:75:76:64:a7:ca:5c:29:28:ae:
5f:ae:b0:7b:ce:2b:79:c9:3d:6d:21:71:6b:ee:19:3c:1c:39:
84:83:d4:d3:6d:14:4b:2e:4d:10:78:95:14:5c:ea:50:7a:de:
73:8f:89:10:64:42:f3:a5:3e:48:d3:68:19:a7:49:7c:1e:4f:
e3:5e:54:85:73:ef:90:02:90:6d:5b:a1:88:00:6b:8a:37:d8:
f0:cb:aa:5f:c7:e3:e3:48:a3:3c:d4:fb:00:ff:24:86:2d:38:
61:ff:a6:4a:2e:31:52:af:6f:f1:3f:6e:8c:05:8c:2c:02:95:
bf:e1:78:a1:89:ed:c7:77:db:c2:ed:3e:4d:a3:7c:ac:93:dc:
05:4e:26:6e:b2:71:55:84:87:c4:08:95:be:8d:87:eb:e8:a0:
ef:61:4c:e4:d7:1d:98:9a:ea:ce:c2:75:2b:ee:a5:6e:a5:fa:
67:1a:1b:40:67:43:02:7a:98:2b:88:c7:f7:0e:1b:5f:3d:6b:
b4:b8:4c:dc:60:06:b7:6e:fb:45:cc:fd:bf:02:b0:41:0b:6a:
1d:ed:09:a6:20:b3:e6:23:fb:7b:ac:94:bd:79:41:de:34:fd:
d5:16:70:c2:02:01:77:4c:5e:dc:40:38:39:29:49:da:d2:f3:
ec:d2:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:14 2024 by rpki-client on console-ams.rpki-client.org