Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/2eKlfYF_ixhfYsrhO3dNhiG4Azs.roa
File: 2eKlfYF_ixhfYsrhO3dNhiG4Azs.roa (raw, json)
Hash identifier: jjnPnnQyPK/c7CvFA2tntUqmx/Z/hbCU1aZE1bRxtkk=
Subject key identifier: D9:E2:A5:7D:81:7F:8B:18:5F:62:CA:E1:3B:77:4D:86:21:B8:03:3B
Certificate issuer: /CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Certificate serial: 0186655D986CCB9F93B5A22CBBB3E9CA6B00
Authority key identifier: E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/2eKlfYF_ixhfYsrhO3dNhiG4Azs.roa
Signing time: Sat 18 Feb 2023 16:31:18 +0000
ROA not before: Sat 18 Feb 2023 16:31:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56708
IP address blocks: 2a0d:b980::/29 maxlen: 29
2a0c:2e00::/29 maxlen: 29
2a0d:9080::/29 maxlen: 29
2a0b:af00::/29 maxlen: 29
2a0e:9a80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:65:5d:98:6c:cb:9f:93:b5:a2:2c:bb:b3:e9:ca:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e314905c56633e9fde791b3005d9a4af7d31a7a0
Validity
Not Before: Feb 18 16:31:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9e2a57d817f8b185f62cae13b774d8621b8033b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:a8:92:b7:e8:7a:fb:6e:a7:51:57:c8:b3:
4b:6f:76:7c:ad:db:66:5f:5d:96:a7:ca:91:1a:29:
e2:6a:80:3a:fb:83:3b:c6:bf:8e:41:64:65:1b:46:
6c:3c:d4:f1:20:2d:17:7a:d4:df:ff:72:ad:ac:19:
12:96:b5:6a:cf:b3:51:5b:da:43:74:98:40:e6:f0:
6a:ce:e0:a3:78:74:c6:cf:a1:f7:6e:d6:b8:66:c4:
8b:1c:0c:9f:13:ce:e9:b0:27:ed:58:b8:8c:96:4e:
87:b2:49:1e:63:dd:de:76:f4:57:ab:a1:6b:2e:34:
97:9c:42:bf:4e:03:c8:8c:f6:4d:96:aa:9a:fb:63:
f0:99:99:6a:ab:2a:2b:31:59:86:48:09:f7:4f:6c:
5e:3d:45:3b:af:4a:89:bd:50:e7:2d:02:30:e5:7b:
35:97:44:9e:f7:9c:5f:6f:df:f9:1d:be:eb:25:0f:
06:b3:11:d5:96:19:87:62:e3:4c:31:2c:24:46:cb:
d9:4f:f9:dd:21:70:39:d0:02:69:0a:93:63:6d:ad:
6f:8b:d6:f6:de:ac:d1:01:0c:58:5e:0a:ca:a2:ee:
d3:35:93:8e:e4:05:f7:7c:58:5c:e8:eb:21:96:91:
08:14:a5:92:53:9a:9d:ff:e2:20:a7:85:85:5b:e8:
fb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E2:A5:7D:81:7F:8B:18:5F:62:CA:E1:3B:77:4D:86:21:B8:03:3B
X509v3 Authority Key Identifier:
keyid:E3:14:90:5C:56:63:3E:9F:DE:79:1B:30:05:D9:A4:AF:7D:31:A7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xSQXFZjPp_eeRswBdmkr30xp6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/2eKlfYF_ixhfYsrhO3dNhiG4Azs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/11a678-11b6-4a35-a5ac-bb74c97f7269/1/4xSQXFZjPp_eeRswBdmkr30xp6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:af00::/29
2a0c:2e00::/29
2a0d:9080::/29
2a0d:b980::/29
2a0e:9a80::/29
Signature Algorithm: sha256WithRSAEncryption
a6:51:dd:04:63:7b:7e:6b:09:1a:cd:45:78:ce:2e:a3:df:80:
cd:d3:d8:d3:5d:d4:bb:5a:ea:84:5b:20:c9:72:c6:09:ba:f8:
bb:43:6b:1a:be:d8:f2:fc:0e:ba:9a:c0:c8:43:40:b2:b5:ee:
68:93:42:ac:74:4c:56:fb:c1:da:e0:f7:98:b4:99:9a:29:6f:
6e:fe:69:8f:a0:50:56:e5:24:9b:cd:b6:e9:16:80:c7:9b:8a:
20:02:21:ba:05:27:cb:e7:84:a9:d7:be:8b:fa:33:72:a4:e3:
cc:07:4d:ae:00:25:6b:59:37:e0:13:c4:c6:fa:8e:fd:ab:c5:
39:0d:4b:65:56:73:ae:c3:3b:92:9b:18:60:95:35:94:42:d5:
b4:b3:29:a5:17:51:73:d3:e8:ff:58:3b:21:c4:13:ac:f6:d7:
76:f4:15:ee:dd:58:c6:80:0c:d0:39:9b:64:c3:ee:47:0c:76:
8e:a2:69:14:06:84:c7:25:70:52:6b:84:1c:16:71:19:70:e9:
10:1f:a3:0b:e3:d5:36:5f:d4:1e:a1:3f:06:ad:5e:82:45:1b:
7e:1a:9f:79:ab:2c:dc:16:07:ae:c0:8c:0d:f0:78:21:e4:93:
6f:12:ce:14:b0:14:3a:a4:7c:5b:a9:87:05:c3:43:61:19:c7:
68:df:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 12:31:58 2023 by rpki-client on console-ams.rpki-client.org