Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/ZHbpn6IXUVhJiYi5FuaJWV8K65E.roa
File: ZHbpn6IXUVhJiYi5FuaJWV8K65E.roa (raw, json)
Hash identifier: NbwxAjGcwXRSiHFem8PM2uJTy2fqs3rNZ6eFC5h+4vA=
Subject key identifier: 64:76:E9:9F:A2:17:51:58:49:89:88:B9:16:E6:89:59:5F:0A:EB:91
Certificate issuer: /CN=6ca1bf52af2c9092cae2681ac64f8ca6cdb01594
Certificate serial: 0181DACF8AC5BB60E435DD056CAF9879DC81
Authority key identifier: 6C:A1:BF:52:AF:2C:90:92:CA:E2:68:1A:C6:4F:8C:A6:CD:B0:15:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/ZHbpn6IXUVhJiYi5FuaJWV8K65E.roa
Signing time: Thu 07 Jul 2022 22:37:23 +0000
ROA not before: Thu 07 Jul 2022 22:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 701
IP address blocks: 2a11:8340::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:da:cf:8a:c5:bb:60:e4:35:dd:05:6c:af:98:79:dc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca1bf52af2c9092cae2681ac64f8ca6cdb01594
Validity
Not Before: Jul 7 22:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6476e99fa2175158498988b916e689595f0aeb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:b2:63:ff:e7:d9:1a:f2:de:15:13:ab:31:
f5:ec:58:bb:20:dd:04:0e:8e:66:61:2b:c4:6e:de:
d6:10:aa:63:83:42:0f:01:c0:5e:c6:90:1a:d9:10:
9a:04:da:17:66:6d:f7:6f:f8:0e:f4:f5:03:2b:3f:
7d:28:65:2e:a6:73:62:21:e3:e4:e9:30:01:92:6d:
b4:47:00:d8:8b:0e:35:fe:9d:55:73:f1:e1:ac:2d:
83:9b:af:48:12:58:fb:4c:c9:c2:96:54:70:92:ab:
94:12:f9:9f:b5:a3:5e:98:47:e0:49:b9:25:8c:6a:
7e:d6:3f:1d:63:f3:31:93:e1:d7:e9:80:c2:57:33:
3d:07:bd:ad:4e:af:40:14:0a:ad:f7:2d:be:d3:d9:
df:53:56:76:93:9e:c7:dd:44:12:c5:4f:72:59:90:
cc:1e:22:2f:0e:2e:31:49:30:18:ab:24:c3:ad:db:
09:84:16:29:a0:08:49:26:21:12:64:c5:60:23:cd:
0f:13:56:ab:d6:fc:e9:86:0b:25:32:3a:0c:f8:da:
ea:1b:29:45:23:6c:05:22:f4:da:ff:d1:5a:83:b9:
d9:43:e8:8f:9b:e1:a0:5b:ed:ab:17:38:d7:90:11:
8b:97:7f:5c:c2:82:57:51:79:d7:e6:27:20:d2:27:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:E9:9F:A2:17:51:58:49:89:88:B9:16:E6:89:59:5F:0A:EB:91
X509v3 Authority Key Identifier:
keyid:6C:A1:BF:52:AF:2C:90:92:CA:E2:68:1A:C6:4F:8C:A6:CD:B0:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/ZHbpn6IXUVhJiYi5FuaJWV8K65E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a3ef3b-57a8-42a5-b340-f93743bbb8f0/1/bKG_Uq8skJLK4mgaxk-Mps2wFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8340::/29
Signature Algorithm: sha256WithRSAEncryption
3d:6c:b7:9f:5b:f6:2a:4e:71:cf:35:17:d7:eb:9a:a3:cf:76:
cf:65:0a:c5:bb:ec:23:2c:fa:e6:c2:cd:1b:26:5d:a6:a3:d5:
c1:4b:51:07:8a:01:b8:56:4e:06:9e:58:2f:06:df:7c:9c:4f:
05:2b:3c:88:7b:49:f7:df:14:56:11:77:50:a1:8e:8c:72:ac:
33:fa:4c:55:02:43:62:9c:92:1e:27:fc:12:b0:eb:75:cf:d2:
30:1f:6d:d1:68:49:e6:86:0e:d1:7c:85:6e:2e:70:bf:17:9b:
9a:b0:39:11:36:59:9b:c1:ab:92:63:fc:38:a9:79:54:40:d6:
73:99:ca:f3:01:e5:ef:b7:98:00:2d:7d:e5:66:4c:87:ee:44:
8c:6c:2a:e7:bf:97:74:8a:0b:6e:8e:13:8e:b2:cf:48:39:22:
b5:c9:f1:05:86:52:27:e5:5a:33:2b:36:82:ef:37:19:63:a0:
a4:3c:fa:77:96:ff:3c:5d:c1:f0:ef:27:42:40:d1:30:95:86:
09:3e:45:90:23:14:d5:ed:31:65:a9:7e:29:16:aa:0d:86:99:
00:b1:eb:e8:59:f9:08:8a:d1:33:cb:79:14:27:05:95:e9:69:
30:3b:1a:49:38:7f:79:bb:8c:7b:fe:b3:6e:47:80:1b:02:22:
68:a4:d1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:24 2024 by rpki-client on console-ams.rpki-client.org