Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/6LDl214tdgRqDXeipMWDYC6MczE.roa
File: 6LDl214tdgRqDXeipMWDYC6MczE.roa (raw, json)
Hash identifier: 6iTRq4SWdTYbbcVZs0aR+/CjpsQmsoJjLSF+hCyuqqc=
Subject key identifier: E8:B0:E5:DB:5E:2D:76:04:6A:0D:77:A2:A4:C5:83:60:2E:8C:73:31
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 01941FFA7D0BB8EDDD4FBAE671DB5A4D7258
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/6LDl214tdgRqDXeipMWDYC6MczE.roa
Signing time: Wed 01 Jan 2025 03:48:17 +0000
ROA not before: Wed 01 Jan 2025 03:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50340
IP address blocks: 2a11:9887::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7d:0b:b8:ed:dd:4f:ba:e6:71:db:5a:4d:72:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Jan 1 03:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8b0e5db5e2d76046a0d77a2a4c583602e8c7331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:52:e4:67:5d:89:07:04:99:b8:f1:d2:cf:
d9:c5:38:28:df:b6:3e:64:40:b7:17:5b:9f:29:00:
79:95:20:c2:41:eb:7a:7d:d6:ba:92:87:76:03:21:
a8:dc:7b:9e:f9:65:f2:15:f8:38:04:dd:06:3f:0b:
14:49:0d:d0:b9:35:e8:46:19:1f:44:39:aa:34:e7:
42:9a:64:34:9b:4b:b7:00:d5:a4:3c:32:8b:94:50:
b5:17:94:29:0d:a3:15:c7:86:0e:2d:de:5b:58:9b:
9f:84:96:fe:9b:18:20:b7:7f:38:f2:4c:4b:41:0b:
f7:7e:3d:b4:8c:ff:03:bc:16:dd:ad:d2:5a:6b:69:
ee:a3:99:26:ad:0a:bb:27:7d:de:b9:10:27:34:87:
c8:3f:7f:d8:7d:86:d5:ba:5c:ca:d9:e8:3d:5f:81:
83:e7:0f:bc:82:a8:55:85:7e:e0:18:e7:05:de:44:
d2:24:55:c9:42:9c:21:a3:5e:a0:53:98:3d:d1:b2:
7e:bd:2b:f3:0f:e4:a8:c0:91:51:39:8d:54:c1:04:
b1:77:9e:eb:46:1b:56:e2:79:6e:3c:c2:37:04:19:
3e:7b:70:a0:42:4b:82:d6:43:4b:99:b2:d5:18:c4:
85:d5:67:3a:1e:c5:52:4c:58:7f:c2:23:7c:f8:ac:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B0:E5:DB:5E:2D:76:04:6A:0D:77:A2:A4:C5:83:60:2E:8C:73:31
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/6LDl214tdgRqDXeipMWDYC6MczE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9887::/32
Signature Algorithm: sha256WithRSAEncryption
71:aa:6a:99:d8:26:9c:47:a1:4f:ed:79:c8:dc:d6:75:92:cb:
68:1e:58:cd:8a:2a:79:36:b7:b8:6b:2a:93:0c:8a:fb:4f:d8:
da:e0:07:e9:9a:fc:ab:80:1e:a2:be:84:2f:47:4f:68:21:7a:
75:0a:fe:1a:82:38:98:c5:ca:a3:c7:a5:b6:3a:5f:ec:40:73:
b8:01:4f:d7:4f:c3:2b:de:9d:2a:6b:8c:d8:cb:70:6f:1a:d9:
5c:10:77:6c:49:e6:c2:58:a9:a3:b5:49:44:b0:5b:36:f0:83:
43:c2:98:32:2c:55:3a:ae:5b:a0:ff:24:0e:e5:1a:9b:8e:8c:
ea:90:14:6b:a8:17:37:ad:d8:71:60:3e:04:cd:7d:d7:df:75:
34:ca:f4:8e:da:fe:d3:9a:0f:5c:38:0d:80:10:d4:fd:74:42:
19:87:d1:0b:42:71:b2:e6:fc:56:a9:c1:d4:25:04:fa:f0:e1:
20:ad:d8:b8:12:16:e5:55:1e:5c:80:2d:7c:be:24:6c:49:14:
8e:e2:1d:48:3f:52:f8:7e:cb:ab:bd:31:0c:26:e1:06:a3:c6:
97:fc:2b:d2:70:38:8c:a4:54:2e:41:1c:a0:2e:1f:92:9b:9e:
b4:5b:4f:53:00:b4:d2:d7:f7:bf:8a:d5:2e:5f:11:83:cd:f6:
3d:f7:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:48:27 2025 by rpki-client