Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/b4L52l19AykWaanrhPx3la52eDw.roa
File: b4L52l19AykWaanrhPx3la52eDw.roa (raw, json)
Hash identifier: npdi9IGDl1VdyZO3boUfYagNouhT0VSMCZ8q/ujJ32E=
Subject key identifier: 6F:82:F9:DA:5D:7D:03:29:16:69:A9:EB:84:FC:77:95:AE:76:78:3C
Certificate issuer: /CN=91aa574b511c291b7cfae9195bdd09e0038602c0
Certificate serial: 01856F54BA0AAC181957A87BB420C7C4A1BF
Authority key identifier: 91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kapXS1EcKRt8-ukZW90J4AOGAsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/b4L52l19AykWaanrhPx3la52eDw.roa
Signing time: Sun 01 Jan 2023 21:55:01 +0000
ROA not before: Sun 01 Jan 2023 21:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:a8c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:ba:0a:ac:18:19:57:a8:7b:b4:20:c7:c4:a1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aa574b511c291b7cfae9195bdd09e0038602c0
Validity
Not Before: Jan 1 21:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f82f9da5d7d03291669a9eb84fc7795ae76783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:65:e1:3c:ae:2a:82:4d:6b:49:53:48:2e:3d:
06:72:91:fb:e4:1b:be:66:f2:a2:50:32:44:6d:60:
9a:2b:77:13:e1:b7:80:55:88:5f:ac:24:4d:19:f4:
b8:0d:5b:2a:2c:d7:46:91:6c:a8:42:02:e7:4a:e4:
7b:2f:b2:f4:cb:f2:85:df:30:ca:c7:35:5d:a6:34:
36:d9:ef:4a:01:04:3c:24:d2:37:b5:f5:a3:9b:16:
6c:ff:c4:72:09:2d:16:8f:02:63:df:a5:6b:5a:fa:
6c:80:fc:f3:ca:0b:5a:c9:51:30:a5:d2:36:41:c0:
93:8f:a0:13:e7:11:6c:6f:e5:d8:6c:1a:e6:32:c3:
6e:b4:56:05:11:39:92:7c:0e:2e:dc:39:88:f2:26:
ee:10:4c:db:ec:e9:7b:79:77:2f:4b:c7:1d:da:b9:
aa:4c:58:2c:5e:7a:30:80:87:78:36:bb:e5:fb:27:
66:ab:c5:c8:d7:d4:a5:a4:2c:fa:4e:ac:46:97:c6:
0a:8e:f6:93:eb:ad:8f:30:c6:ad:fc:e3:31:0d:f9:
15:fe:ea:cd:1d:96:a1:bb:6c:b6:7d:4e:a1:65:d7:
b3:e8:7c:0f:5d:aa:c9:0a:34:ef:f5:30:ff:b4:4c:
e6:0f:cd:d8:23:20:45:f6:69:37:ae:b1:f6:d2:37:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:82:F9:DA:5D:7D:03:29:16:69:A9:EB:84:FC:77:95:AE:76:78:3C
X509v3 Authority Key Identifier:
keyid:91:AA:57:4B:51:1C:29:1B:7C:FA:E9:19:5B:DD:09:E0:03:86:02:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kapXS1EcKRt8-ukZW90J4AOGAsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/b4L52l19AykWaanrhPx3la52eDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/1a31bd-42e3-4f89-b981-d0a1c92899a4/1/kapXS1EcKRt8-ukZW90J4AOGAsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a8c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:42:c1:13:75:30:45:df:44:be:30:7c:ea:a4:dd:69:f3:4b:
f4:03:ec:c6:31:7c:96:c3:e7:4a:bd:28:16:d6:c6:cb:11:e0:
b1:29:50:33:bf:22:61:9e:9c:4f:99:50:93:9f:f2:98:aa:3c:
d9:8d:5d:b4:e3:db:4e:b3:74:27:35:95:2d:f0:f0:bd:dc:36:
a3:73:13:8d:cd:a7:ba:17:18:00:7b:69:15:ed:3a:9c:4b:97:
d6:77:48:4b:3f:ba:b5:29:3c:b1:cf:88:1c:f1:a2:ff:2c:41:
31:2f:19:f8:26:71:c1:eb:09:04:f5:83:e6:e8:50:6d:1d:24:
aa:7b:2a:b6:0d:98:e0:6a:33:cf:dc:9c:63:62:39:98:8d:89:
b8:24:9f:ea:03:c5:6a:7a:87:f0:f8:a9:2e:44:e6:af:15:75:
2a:02:8f:f1:2e:16:48:7e:86:f4:69:cb:92:fa:85:91:a5:9e:
eb:98:de:1f:fa:8a:14:aa:14:cc:93:54:e0:19:22:d6:a2:de:
b5:e3:c8:08:82:ef:3b:ef:6b:2a:5d:f0:60:7e:3f:c1:ce:14:
ef:3e:a3:34:a6:fa:fd:b6:24:0b:e4:94:86:02:fb:e0:08:11:
69:f0:4b:f9:12:85:28:5d:58:a7:5a:e7:52:7f:9c:4a:44:90:
4b:35:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org