Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/R0q7dKbui1za34LD_EhJogXz8sc.roa
File: R0q7dKbui1za34LD_EhJogXz8sc.roa (raw, json)
Hash identifier: OG/wOMh4DCpwYX1SOsOamu3I5DzmholBrBsUQD7LJdw=
Subject key identifier: 47:4A:BB:74:A6:EE:8B:5C:DA:DF:82:C3:FC:48:49:A2:05:F3:F2:C7
Certificate issuer: /CN=81601c22138b5719c4027eee75ef74679ce68ca9
Certificate serial: 018486AC3932FEF75832DA26A1847FE2B04E
Authority key identifier: 81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/R0q7dKbui1za34LD_EhJogXz8sc.roa
Signing time: Thu 17 Nov 2022 17:39:04 +0000
ROA not before: Thu 17 Nov 2022 17:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:72c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ac:39:32:fe:f7:58:32:da:26:a1:84:7f:e2:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81601c22138b5719c4027eee75ef74679ce68ca9
Validity
Not Before: Nov 17 17:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=474abb74a6ee8b5cdadf82c3fc4849a205f3f2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:a0:5a:f1:1e:ba:20:6d:a2:5a:dd:9a:f3:
f8:24:b6:6a:d9:bf:d0:5e:f8:f8:9d:29:db:db:fb:
bc:54:01:58:09:54:48:1c:97:3e:f6:71:7c:96:09:
43:70:25:c1:8b:cf:69:25:fe:d8:82:f5:82:00:5c:
c4:63:9c:17:10:a4:0b:bf:57:20:21:7f:c2:ba:26:
80:82:f5:79:cc:99:ed:94:bb:c6:6b:63:8a:1f:c5:
d1:c3:6b:7f:7c:08:dc:2f:8e:bd:e2:db:80:3f:e4:
d9:af:68:e7:da:ec:59:37:a8:5d:be:b4:f3:c1:40:
e0:fe:83:e2:2c:52:b6:c9:72:99:7b:fe:ae:5b:01:
72:35:d5:cb:ed:3c:c5:1f:db:14:e7:f8:30:02:df:
22:26:97:6b:22:08:72:42:9d:08:d4:cc:fa:a3:e9:
77:ab:15:bc:82:d9:7e:65:7d:32:26:87:e1:cb:f3:
2a:e9:5c:94:ca:ef:1b:ad:c1:05:1e:42:1b:0f:f3:
2a:5f:6e:90:71:f6:c6:aa:17:4e:ce:ef:f9:d1:a4:
02:15:56:d4:c7:ca:0d:99:d4:be:dd:14:97:b2:40:
7b:95:24:91:c5:9d:e1:7d:56:e5:77:49:e5:e2:9b:
35:ae:1c:dd:c1:78:2f:12:eb:32:1f:b0:80:f7:93:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4A:BB:74:A6:EE:8B:5C:DA:DF:82:C3:FC:48:49:A2:05:F3:F2:C7
X509v3 Authority Key Identifier:
keyid:81:60:1C:22:13:8B:57:19:C4:02:7E:EE:75:EF:74:67:9C:E6:8C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWAcIhOLVxnEAn7ude90Z5zmjKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/R0q7dKbui1za34LD_EhJogXz8sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02d351-9aba-49af-ab74-a10f85046bf8/1/gWAcIhOLVxnEAn7ude90Z5zmjKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:1b:d3:03:2e:6b:63:f0:bc:1d:43:18:76:77:cd:01:af:6d:
40:6e:f4:db:f7:94:5a:ca:a0:67:ff:dc:18:97:c4:ef:4c:92:
f2:91:41:af:24:99:96:c6:46:d3:e7:05:d4:2f:6f:54:1d:1f:
f6:db:d8:41:9e:ae:04:0c:49:f0:00:6f:87:f0:ad:1d:1e:ca:
22:5b:52:ee:14:f8:99:50:4b:8a:db:d9:11:f0:be:52:54:aa:
3b:cf:29:7b:84:58:4c:90:0a:9e:02:af:0d:ab:94:23:d0:19:
57:6e:3c:d6:cb:9b:99:31:e1:62:fa:35:8e:ba:f4:3c:e5:39:
53:13:95:91:b5:fa:87:be:c2:57:9e:7b:49:1e:4e:18:70:96:
5a:21:68:8f:f9:fd:fc:90:9b:0f:ba:65:36:1b:83:db:11:ed:
3c:5b:73:e0:ae:87:97:57:db:c6:a0:d7:16:04:67:2b:f2:dc:
b1:c1:80:f3:0f:46:83:81:99:a8:a9:60:18:d0:bd:ac:7f:7b:
f4:a2:01:ca:55:6f:ee:45:26:52:59:57:ea:ca:ed:c3:28:3e:
49:6e:20:3e:17:d7:e3:fa:0f:8c:c1:19:ea:c8:95:2d:ff:45:
2b:f8:df:f4:fd:25:65:69:1a:3b:a9:64:ae:92:33:05:4e:9f:
61:f9:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:53 2025 by rpki-client