Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/kDOV2J72mVS-t0zeopAI-FwATnM.roa
File: kDOV2J72mVS-t0zeopAI-FwATnM.roa (raw, json)
Hash identifier: CjIO8AyPOWfNQGjdqIX/JyluRDhy04d2aLP/+VVkSEY=
Subject key identifier: 90:33:95:D8:9E:F6:99:54:BE:B7:4C:DE:A2:90:08:F8:5C:00:4E:73
Certificate issuer: /CN=44046a683ab92b41819977245ce759e267a5036a
Certificate serial: 02C7CEEC
Authority key identifier: 44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/kDOV2J72mVS-t0zeopAI-FwATnM.roa
Signing time: Sat 21 May 2022 10:55:28 +0000
ROA not before: Sat 21 May 2022 10:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205028
IP address blocks: 2a11:a606::/32 maxlen: 48
2a11:a601::/32 maxlen: 48
2a11:a604::/32 maxlen: 48
2a11:a603::/32 maxlen: 48
2a11:a607::/32 maxlen: 48
2a11:a600::/32 maxlen: 48
2a11:a602::/32 maxlen: 48
2a11:a605::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46649068 (0x2c7ceec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44046a683ab92b41819977245ce759e267a5036a
Validity
Not Before: May 21 10:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=903395d89ef69954beb74cdea29008f85c004e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:83:63:e9:4a:e0:9a:e5:70:c2:0e:35:f6:
01:56:e0:3b:32:df:9d:de:1e:85:f7:42:89:5a:23:
69:c1:93:08:42:cc:f8:3f:b9:35:fc:36:8d:05:a7:
0b:82:2a:25:e8:16:09:fd:10:a1:c0:31:48:1c:7f:
0c:d7:82:80:44:2b:6f:39:08:9f:3e:a9:d9:5c:54:
27:d2:47:75:2d:9f:aa:f7:cc:87:ac:f6:6b:24:bc:
93:00:63:26:29:e8:87:08:a3:23:49:a0:8c:35:40:
ec:f2:be:ce:7b:a8:f9:b7:ab:f3:4c:26:11:f5:d6:
c2:7c:6e:2e:b3:fa:29:e2:b0:7d:7d:00:dc:81:cf:
1a:3e:1e:92:0e:4d:03:b1:87:64:0a:e9:89:95:d1:
c8:1a:7d:6c:22:c1:33:e9:af:4d:64:95:02:10:25:
4d:b6:43:70:52:2c:b3:eb:36:b4:3c:2e:c9:ac:4f:
ac:3e:b1:85:66:dc:6f:04:76:72:b0:bc:dc:76:7b:
b7:6b:41:82:2d:14:8d:35:cf:0e:f0:f5:33:d1:e9:
68:b5:e5:0d:eb:e2:a1:e9:3f:e5:b7:fd:e7:e3:a5:
be:10:20:e3:2f:b3:ec:06:05:2a:d7:0a:06:05:bc:
a7:f7:86:de:92:05:53:22:c6:0b:62:40:16:93:2b:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:95:D8:9E:F6:99:54:BE:B7:4C:DE:A2:90:08:F8:5C:00:4E:73
X509v3 Authority Key Identifier:
keyid:44:04:6A:68:3A:B9:2B:41:81:99:77:24:5C:E7:59:E2:67:A5:03:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RARqaDq5K0GBmXckXOdZ4melA2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/kDOV2J72mVS-t0zeopAI-FwATnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/49db6c-7d51-4a4d-bc29-8412bef56f23/1/RARqaDq5K0GBmXckXOdZ4melA2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a600::/29
Signature Algorithm: sha256WithRSAEncryption
64:4f:c9:4d:68:9b:88:c1:79:99:b3:42:41:46:f2:05:17:18:
d8:9d:7c:a0:b7:62:79:4b:96:63:fc:38:67:08:70:8c:8b:43:
0f:78:2b:c0:c9:85:32:ef:76:b3:e9:fd:14:a0:22:3d:cd:fc:
ee:79:5d:72:00:d9:ba:bc:a5:1f:dd:e3:b9:3f:e2:53:27:ee:
47:c7:ff:03:7d:2a:d3:55:0b:ff:c2:3a:70:fd:6d:70:03:e3:
2f:6e:b4:54:24:31:07:66:38:c5:96:09:1e:c2:01:a1:2f:40:
14:42:4c:58:04:13:e1:5e:b6:58:79:5a:6e:02:86:8c:70:eb:
77:29:99:1c:5d:f6:a3:3d:da:e2:fa:84:da:d5:20:23:26:2f:
da:d5:b6:be:c2:b4:08:7a:34:c1:bc:d4:ed:92:00:0f:de:71:
6f:bc:be:2e:6e:84:e7:03:17:96:2d:25:37:35:f4:4b:3f:c7:
3a:b9:66:1d:8a:b4:3b:c3:1e:56:2e:6b:fd:e3:ed:a6:db:23:
13:76:10:31:72:52:7b:e0:f4:f4:00:64:21:22:84:86:ff:d0:
38:9a:bf:aa:a9:52:05:63:b2:9e:84:2c:0a:08:ed:ad:b0:f4:
38:79:61:9a:55:e4:07:4b:98:e2:30:35:73:01:ff:bb:9b:8d:
36:06:15:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org