Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/qtwYrrlCXeZfPbtlf9DjJHwAczk.roa
File: qtwYrrlCXeZfPbtlf9DjJHwAczk.roa (raw, json)
Hash identifier: bmzVPpVgkTAhUjmya8568UFaopH0ADF+Jheo6VTnJ5g=
Subject key identifier: AA:DC:18:AE:B9:42:5D:E6:5F:3D:BB:65:7F:D0:E3:24:7C:00:73:39
Certificate issuer: /CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Certificate serial: CB3B33
Authority key identifier: 0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/qtwYrrlCXeZfPbtlf9DjJHwAczk.roa
Signing time: Sat 02 Apr 2022 08:07:14 +0000
ROA not before: Sat 02 Apr 2022 08:07:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29491
IP address blocks: 2a0e:b040::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13318963 (0xcb3b33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d676b1f04aa2cd4f3cd2568310ec141563b9243
Validity
Not Before: Apr 2 08:07:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aadc18aeb9425de65f3dbb657fd0e3247c007339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:5d:7f:f9:ac:0c:a2:81:be:b7:63:b3:88:
23:35:97:27:64:8e:ca:cf:9e:10:c2:e4:23:fa:6e:
3a:70:9e:8a:35:76:be:41:ea:1c:73:27:ff:54:16:
a0:46:98:60:25:76:6b:43:24:2b:af:aa:35:66:23:
4a:0a:a7:8b:c9:e6:31:ee:1d:7d:75:19:7f:c2:0a:
7c:33:72:04:47:02:1a:dc:be:3a:27:e2:a9:07:41:
29:62:d1:e2:d3:f4:33:dc:68:69:6c:f7:0d:46:f7:
4d:1f:2c:33:9f:58:75:e5:60:74:5f:b9:ff:8b:a6:
1a:7f:08:0f:27:35:e7:24:9f:11:d9:85:a6:37:79:
c0:3a:ef:ee:42:e0:52:3c:a7:36:bb:0d:93:65:b0:
c4:6f:8b:d3:b5:e7:db:9f:c4:31:43:1f:b5:02:06:
3e:5b:30:33:38:da:7c:ce:02:0d:01:d0:7e:81:6f:
1f:54:66:58:a4:3d:59:4b:15:27:34:db:e7:a9:d4:
46:77:77:29:85:24:b0:55:a4:86:5f:d0:2e:26:44:
a4:60:4e:15:59:db:4c:97:72:a6:73:49:80:cf:1b:
9c:16:88:40:9c:3a:05:a4:2e:03:b3:cb:21:06:b1:
28:14:70:08:cb:c6:b1:54:70:79:47:01:e7:05:cf:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DC:18:AE:B9:42:5D:E6:5F:3D:BB:65:7F:D0:E3:24:7C:00:73:39
X509v3 Authority Key Identifier:
keyid:0D:67:6B:1F:04:AA:2C:D4:F3:CD:25:68:31:0E:C1:41:56:3B:92:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/qtwYrrlCXeZfPbtlf9DjJHwAczk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1ebccd-8d1d-46ce-8d98-f004311d4570/1/DWdrHwSqLNTzzSVoMQ7BQVY7kkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b040::/29
Signature Algorithm: sha256WithRSAEncryption
12:1c:d8:07:87:6b:be:03:de:e5:f3:61:6c:7b:06:ab:fc:bc:
d3:01:35:cf:e6:74:dd:6f:92:92:d9:93:de:4c:2e:b9:b4:38:
78:61:7d:48:dc:2d:c2:04:fc:40:44:63:db:bf:35:55:e4:28:
9e:db:c4:7b:fd:d3:9c:3e:11:a0:6e:60:47:8b:87:1b:29:c9:
f8:d2:a6:49:3a:46:0c:2b:7f:94:1b:3e:0e:14:3d:98:07:a8:
3c:ff:22:fc:60:3b:c5:b7:c7:8f:be:64:14:70:78:37:61:ed:
11:0b:0b:e7:a0:c8:9f:2d:fa:1d:48:b6:1a:a7:ef:5e:48:9b:
04:a6:a7:b4:72:19:0a:85:ba:58:7a:7e:14:73:ac:e8:cc:ac:
f8:ce:b8:e8:46:cc:13:b6:b2:d6:05:9e:57:61:3a:cc:ac:81:
f2:87:78:0f:73:83:ff:5d:10:c0:1c:40:93:3a:82:a7:82:18:
0a:52:de:95:bf:dd:3f:17:48:4a:f4:c4:ad:dd:92:48:03:4b:
11:53:6f:2e:1c:f7:da:36:25:38:36:8b:6d:62:d7:b7:59:53:
43:0b:cf:2d:a4:59:10:fa:b7:72:ba:4a:6d:9f:7d:d3:75:bf:
49:66:d1:2a:c5:b7:ee:12:c3:75:40:e3:41:7e:bf:61:63:3a:
69:a4:22:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:17 2024 by rpki-client on console-fra.rpki-client.org