Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/x7GKOXKtr9p1XtJCqmhaCAAn3L8.roa
File: x7GKOXKtr9p1XtJCqmhaCAAn3L8.roa (raw, json)
Hash identifier: BoV+Bq0GZNhM+Kx+pPdE3zf2+fyjknohLAOGQayVyN0=
Subject key identifier: C7:B1:8A:39:72:AD:AF:DA:75:5E:D2:42:AA:68:5A:08:00:27:DC:BF
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 0185D023AD81061B87E33C6D1A84B409AF60
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/x7GKOXKtr9p1XtJCqmhaCAAn3L8.roa
Signing time: Fri 20 Jan 2023 17:04:37 +0000
ROA not before: Fri 20 Jan 2023 17:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200198
IP address blocks: 2a11:5701:10::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:23:ad:81:06:1b:87:e3:3c:6d:1a:84:b4:09:af:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Jan 20 17:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7b18a3972adafda755ed242aa685a080027dcbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:48:54:49:5e:ec:b7:0f:6e:56:0c:11:86:
35:ce:e6:d4:28:08:e1:9e:ad:6e:d6:bb:68:d4:a3:
39:74:8f:0c:cd:33:21:83:09:e0:90:47:43:8b:b4:
d6:c7:53:99:6d:28:3d:2b:93:7c:11:20:38:4d:3b:
10:1d:9e:de:1c:9e:b3:c1:f9:85:cb:ff:8b:29:62:
98:eb:77:e0:61:33:2f:0b:b1:0b:59:84:d2:e1:45:
e5:10:4a:93:91:a8:55:fd:42:92:c6:fb:53:70:ba:
4a:00:b0:53:a4:21:40:88:64:fa:0d:bc:f4:d0:12:
10:1a:98:56:21:5d:1b:34:45:cb:eb:46:06:f0:cc:
eb:a7:de:a6:a5:3b:27:70:c2:d8:c3:85:9a:da:a9:
95:12:8e:34:d8:56:5d:8e:89:37:03:0e:04:fc:8a:
77:ee:e2:3b:c1:2e:a9:c8:65:7e:e2:ac:31:89:0a:
24:13:c1:5b:37:ab:99:12:22:96:68:7e:79:a6:45:
f9:01:02:05:e8:01:0c:d5:27:b0:99:02:f6:95:26:
2a:75:d9:b8:52:13:22:28:50:93:df:94:f9:46:2b:
2c:20:af:b8:bb:a3:9a:a4:6e:23:8f:28:e9:a3:3f:
d1:29:29:0d:73:00:a8:80:06:79:7e:e2:09:6a:95:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B1:8A:39:72:AD:AF:DA:75:5E:D2:42:AA:68:5A:08:00:27:DC:BF
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/x7GKOXKtr9p1XtJCqmhaCAAn3L8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5701:10::/44
Signature Algorithm: sha256WithRSAEncryption
7c:f6:5c:6a:67:55:d9:cb:77:d0:1d:09:83:71:6d:c6:ca:c1:
bb:a2:a1:f5:cf:f7:04:3a:9b:c1:4a:19:e4:5b:7b:84:04:d4:
64:4a:3d:33:59:00:e5:e9:70:b2:eb:5d:ef:c8:5f:56:12:5d:
16:cc:d1:ac:6b:bc:34:25:76:d3:19:aa:98:c9:36:6b:3c:32:
0f:06:f2:f6:63:3c:d3:5d:57:2f:95:28:38:dc:f0:58:48:9b:
3d:6e:1b:77:63:b1:c6:e2:6f:58:6b:17:d1:2f:40:4d:67:88:
be:70:42:80:2c:b6:ed:12:a2:32:61:79:74:3d:c0:32:31:2e:
17:44:10:f1:52:70:ff:6f:74:da:58:b9:e0:5e:50:a9:93:2b:
22:23:c4:e6:c1:21:fd:6c:ad:9e:e8:ee:d6:be:e5:53:7b:97:
5b:bb:2d:23:7d:47:7d:96:8c:b3:5f:14:b9:64:48:f2:63:6c:
ae:53:8f:11:ed:65:ed:b8:ee:67:f8:d7:27:6c:51:34:bf:79:
7b:5f:68:34:ca:62:c6:59:12:f7:36:28:8e:47:bf:85:92:5e:
f2:39:a8:7c:26:f9:80:29:2a:b6:e3:b1:ef:43:c1:53:1f:03:
7d:6c:bf:e1:0f:91:3e:59:59:01:55:fa:0f:3d:c4:97:59:67:
93:2a:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:59 2024 by rpki-client on console-ams.rpki-client.org