Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/1iw99pUCAxvBHumyGmGpKh0Fy3Q.roa
File: 1iw99pUCAxvBHumyGmGpKh0Fy3Q.roa (raw, json)
Hash identifier: 0MGrowzotNmPMXpTtaJi311rL57NLnuiKtyXMukL0tg=
Subject key identifier: D6:2C:3D:F6:95:02:03:1B:C1:1E:E9:B2:1A:61:A9:2A:1D:05:CB:74
Certificate issuer: /CN=75620e5666518bb700409fb4087a875c99f37211
Certificate serial: B5EE99
Authority key identifier: 75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/1iw99pUCAxvBHumyGmGpKh0Fy3Q.roa
Signing time: Sat 01 Jan 2022 06:58:17 +0000
ROA not before: Sat 01 Jan 2022 06:58:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:97c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11923097 (0xb5ee99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75620e5666518bb700409fb4087a875c99f37211
Validity
Not Before: Jan 1 06:58:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d62c3df69502031bc11ee9b21a61a92a1d05cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:70:0a:81:0c:55:9d:36:45:f1:9c:47:17:
21:dd:8f:97:66:76:2d:62:75:85:4e:fd:73:dc:b3:
69:e4:12:a6:53:7f:8e:a9:de:9b:ef:5a:15:91:74:
ec:40:18:87:20:a6:a3:89:03:4e:5f:b8:01:48:4f:
f4:85:30:f3:b1:de:54:82:5a:cb:c8:b3:70:58:72:
1f:d5:e5:bf:c8:8c:2d:cc:53:13:cd:02:16:a3:d6:
89:1f:8f:5e:5c:36:69:2b:94:da:ea:c7:ff:1b:7a:
74:a6:85:7b:a7:95:0c:44:98:72:89:51:c9:63:44:
3d:1f:2e:ab:e3:f2:5a:26:80:a3:88:1e:16:e7:5e:
26:2f:70:86:56:e3:0b:58:c4:89:c7:5b:e6:eb:08:
29:dc:4d:97:4f:eb:ba:83:cc:c7:76:64:a6:30:f9:
d6:9c:00:41:14:70:5a:09:90:45:eb:86:f6:aa:24:
12:19:e4:d7:7b:66:21:d8:77:60:5f:f5:9b:03:f0:
b2:c3:a9:63:3e:ef:ed:4f:46:57:24:2f:59:e9:95:
0a:6b:4b:e2:69:e5:1c:1a:11:f8:38:b0:c4:8d:1f:
93:27:ff:62:a0:d3:f4:dc:e9:da:d3:94:5f:1d:1f:
c7:20:13:8b:06:20:36:a2:f2:74:c6:bd:09:0c:8a:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:2C:3D:F6:95:02:03:1B:C1:1E:E9:B2:1A:61:A9:2A:1D:05:CB:74
X509v3 Authority Key Identifier:
keyid:75:62:0E:56:66:51:8B:B7:00:40:9F:B4:08:7A:87:5C:99:F3:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWIOVmZRi7cAQJ-0CHqHXJnzchE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/1iw99pUCAxvBHumyGmGpKh0Fy3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9a787c-6a9d-4689-b979-c9baeda06515/1/dWIOVmZRi7cAQJ-0CHqHXJnzchE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
96:84:8f:80:c0:0d:fb:78:cf:a1:03:dd:a4:7c:8e:73:80:90:
fb:73:21:57:bc:6e:73:b2:f1:2f:37:8a:9c:fa:a2:27:19:43:
03:8a:62:cf:a1:4c:53:03:b3:68:f6:11:27:f9:89:ac:5f:03:
c7:1f:3f:0d:c8:19:b2:b9:c6:60:23:fd:1d:7a:f6:04:6c:d5:
54:60:54:ee:fa:f5:71:88:92:8a:78:6a:4a:73:3f:60:ae:b3:
28:44:80:8c:9b:46:f4:a1:df:6b:f8:2e:f0:d8:b9:4a:9d:94:
88:c9:46:ac:8e:f3:b3:3e:56:e3:92:0c:13:40:d7:fd:80:d5:
d1:f7:9a:99:f9:bc:f7:be:d8:7b:37:27:b7:2f:e0:cd:d9:3a:
17:47:b0:b0:b1:62:c3:70:46:62:a2:74:9a:3b:1b:d8:85:7e:
63:fb:b3:b0:52:5c:23:89:39:09:9e:ce:08:5a:98:bf:08:36:
f5:f8:7a:63:cc:2f:7c:36:1c:5e:67:35:14:37:d7:9f:d5:b9:
f2:52:df:65:f0:af:b9:f8:30:12:17:08:87:0a:e3:dd:51:87:
03:62:17:da:2d:40:bb:67:c0:4b:8d:62:26:36:7f:df:6a:66:
f9:38:89:e1:a8:98:51:85:f1:77:db:9b:18:1f:6b:0a:3a:a3:
16:81:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:19 2024 by rpki-client on console-fra.rpki-client.org