Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/IX8zeasCywom-JRnQAhvj2eI4yY.roa
File: IX8zeasCywom-JRnQAhvj2eI4yY.roa (raw, json)
Hash identifier: iOXDBJ+zV117yjNztFUuBlPgcfMdWrLBykPA0lADF2E=
Subject key identifier: 21:7F:33:79:AB:02:CB:0A:26:F8:94:67:40:08:6F:8F:67:88:E3:26
Certificate issuer: /CN=7b7645c8328f39afcdd079fa54a0ba3be78d4287
Certificate serial: 018340D750B9E4E5CF9805A48CD24762A334
Authority key identifier: 7B:76:45:C8:32:8F:39:AF:CD:D0:79:FA:54:A0:BA:3B:E7:8D:42:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/IX8zeasCywom-JRnQAhvj2eI4yY.roa
Signing time: Thu 15 Sep 2022 11:09:56 +0000
ROA not before: Thu 15 Sep 2022 11:09:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:1ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:d7:50:b9:e4:e5:cf:98:05:a4:8c:d2:47:62:a3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b7645c8328f39afcdd079fa54a0ba3be78d4287
Validity
Not Before: Sep 15 11:09:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=217f3379ab02cb0a26f8946740086f8f6788e326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:be:26:d7:3f:5d:55:4f:8b:c5:bb:ff:b3:
09:e0:f6:dd:bc:1e:c2:9e:11:d3:7e:26:2d:8f:2a:
78:17:8b:6f:cb:da:1c:aa:76:c0:e4:84:f5:38:52:
eb:51:f3:62:cd:c9:28:dd:57:07:71:40:ef:71:5c:
97:ce:c9:a6:c1:fc:18:d8:5a:64:0e:3e:bf:d3:c6:
ea:9f:de:2c:c4:55:2d:16:61:97:a6:df:d6:8d:e1:
4b:80:f5:85:d0:6f:30:9c:34:f3:aa:b3:56:ac:68:
fa:c4:a1:ab:d4:e8:25:34:85:a1:6b:cb:9f:23:cb:
72:98:38:90:69:93:04:91:54:28:75:46:ad:5e:0e:
ba:67:36:33:e4:b1:83:f7:36:38:ed:9f:71:66:b6:
0f:1e:3d:d1:00:60:87:b4:dd:22:41:cd:fb:29:cd:
f4:f5:28:38:32:37:61:ec:34:14:26:0d:17:c3:65:
d6:0c:a3:5f:02:1a:cf:15:af:e5:5a:0a:8b:e3:5b:
3d:0b:88:98:1e:02:7a:67:bb:f6:f6:d7:df:23:31:
de:79:ca:01:03:9a:1d:d1:89:a3:6c:83:d8:9d:f4:
84:2c:2e:55:39:71:58:e2:34:cf:89:94:e5:50:6c:
86:a2:3d:61:f9:ce:a7:6c:41:02:fd:32:31:e1:0c:
dd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7F:33:79:AB:02:CB:0A:26:F8:94:67:40:08:6F:8F:67:88:E3:26
X509v3 Authority Key Identifier:
keyid:7B:76:45:C8:32:8F:39:AF:CD:D0:79:FA:54:A0:BA:3B:E7:8D:42:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/IX8zeasCywom-JRnQAhvj2eI4yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/deeb1f-1f35-4c61-ab30-cbfa17e326fb/1/e3ZFyDKPOa_N0Hn6VKC6O-eNQoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1ac0::/29
Signature Algorithm: sha256WithRSAEncryption
b2:aa:b4:0a:e9:54:4c:a6:03:12:e1:5c:ac:28:4c:db:4b:fc:
b0:b4:87:a5:76:33:5a:a2:02:67:da:5c:d0:7d:84:96:a4:83:
46:60:07:0d:25:06:ce:34:1a:8c:83:ea:fa:34:87:ed:79:a4:
e2:43:d2:53:2c:d7:ec:b6:e8:b5:94:69:56:0a:74:0e:f1:2d:
4f:bc:8c:c0:5b:88:9e:ad:7d:6d:bd:e8:71:08:87:1b:48:f7:
45:52:38:af:78:f6:73:ba:57:15:00:c8:be:74:de:91:9d:a3:
69:16:64:c6:aa:61:94:64:e1:23:d4:c3:9e:41:9a:cf:a5:58:
2a:32:ca:e1:ea:19:5f:51:10:13:bd:3c:1e:c6:65:64:0b:a9:
4a:8d:2d:4d:9a:f0:42:23:c8:fe:22:d0:bc:26:5e:e2:b0:06:
6b:d8:01:f6:93:b5:af:8f:8a:27:a0:9f:a0:e0:2a:f7:c6:30:
9f:2f:7a:51:bc:e9:38:d1:99:90:8f:b5:86:77:8e:f6:02:ad:
68:97:7b:a5:d1:26:4b:57:6a:85:0d:a3:d4:f4:14:f4:8c:f4:
8c:19:5d:0b:c5:89:5f:a6:bd:0c:16:99:e5:d3:22:70:5b:e0:
bd:2c:97:32:fa:ef:50:c9:80:78:89:d2:29:fe:0c:e2:c7:e5:
5a:23:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:27 2024 by rpki-client on console-ams.rpki-client.org