Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/XaSnlqq3TPEp5UDBhWy1ImhNz-o.roa
File: XaSnlqq3TPEp5UDBhWy1ImhNz-o.roa (raw, json)
Hash identifier: HcblOqCVGjcdt25PcuAypi/ixmMhRx2qqtMMOmFhB78=
Subject key identifier: 5D:A4:A7:96:AA:B7:4C:F1:29:E5:40:C1:85:6C:B5:22:68:4D:CF:EA
Certificate issuer: /CN=6fe13471225912b9788789b05d5699a41f2a4e69
Certificate serial: 0182E7FD8F5DFDB924822A9E4D8AF6EB1D64
Authority key identifier: 6F:E1:34:71:22:59:12:B9:78:87:89:B0:5D:56:99:A4:1F:2A:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-E0cSJZErl4h4mwXVaZpB8qTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/XaSnlqq3TPEp5UDBhWy1ImhNz-o.roa
Signing time: Mon 29 Aug 2022 05:05:30 +0000
ROA not before: Mon 29 Aug 2022 05:05:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:53c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e7:fd:8f:5d:fd:b9:24:82:2a:9e:4d:8a:f6:eb:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe13471225912b9788789b05d5699a41f2a4e69
Validity
Not Before: Aug 29 05:05:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5da4a796aab74cf129e540c1856cb522684dcfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ad:89:25:e6:06:b1:0e:30:82:66:7a:9e:23:
66:4a:73:1c:48:19:a1:30:91:d2:34:d4:6a:76:32:
26:a2:fc:1f:85:0b:a0:19:c4:49:4d:77:3c:be:e9:
a8:8a:78:04:a5:99:54:15:ea:60:71:32:7a:cc:20:
ff:53:dc:fc:b9:65:7f:ea:90:d3:74:13:a9:c4:b0:
c2:c2:09:89:7f:c4:c3:b9:33:c5:26:4c:9e:db:56:
cd:53:e3:b9:f1:97:c3:7b:1e:55:fd:a1:71:c7:10:
9c:e0:03:c0:d2:3d:69:a4:70:60:62:e3:c6:be:7d:
7d:1b:39:fc:ef:9d:d0:d4:3f:23:b4:12:71:b1:4e:
63:a1:63:4f:07:af:08:74:04:a7:84:3b:a0:bd:cb:
11:bc:6d:83:a7:a7:39:e9:b9:05:18:d3:0e:de:9f:
91:52:33:71:7e:b8:00:87:52:e5:75:37:3d:f2:f4:
a0:ac:c5:b0:04:b1:3f:12:5e:e0:54:f9:06:89:9c:
36:e2:6e:47:09:63:43:d7:b2:8f:92:1a:26:a6:f1:
6a:5a:ff:5e:98:02:12:88:04:0a:07:33:19:0a:3b:
94:fe:95:a5:e8:f1:3c:47:03:47:bc:71:3c:fc:bf:
40:20:39:10:e7:4d:47:6e:a4:7c:18:7d:50:a7:19:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A4:A7:96:AA:B7:4C:F1:29:E5:40:C1:85:6C:B5:22:68:4D:CF:EA
X509v3 Authority Key Identifier:
keyid:6F:E1:34:71:22:59:12:B9:78:87:89:B0:5D:56:99:A4:1F:2A:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-E0cSJZErl4h4mwXVaZpB8qTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/XaSnlqq3TPEp5UDBhWy1ImhNz-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/30343a-7228-42d5-8ef1-03873f3073a7/1/b-E0cSJZErl4h4mwXVaZpB8qTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:53c0::/29
Signature Algorithm: sha256WithRSAEncryption
5a:9b:dd:79:ac:47:5f:3a:2e:19:37:3a:06:4b:e9:6f:37:91:
24:e6:c1:48:99:24:23:b1:b1:3d:2c:a0:c5:0b:2b:ef:23:49:
04:78:77:6f:56:49:b5:99:4c:dd:2d:30:2b:ce:6d:d1:72:6f:
ac:33:f7:4f:3c:54:d1:ed:01:81:a5:f2:99:58:6c:85:b3:6e:
fd:20:d6:39:ed:7f:61:03:7c:43:73:ee:49:ad:8f:12:16:13:
a8:a8:9f:60:25:24:42:db:c2:e9:da:8f:08:a9:ba:14:35:39:
fb:51:39:a0:0b:5d:35:a9:86:24:3d:a0:f1:e7:c6:c9:db:14:
38:cb:69:22:e6:9f:2a:48:01:29:ee:78:81:ce:d8:0c:83:0b:
74:3e:36:b5:a3:3b:65:1a:3d:2b:11:dc:bf:55:c0:b3:fe:80:
2f:aa:a6:9e:6a:8c:85:37:28:1b:91:45:0d:10:d8:41:31:33:
7f:9a:e4:1e:86:59:8f:bf:18:25:56:81:78:e9:59:0a:89:ac:
33:4a:e4:a1:8e:c2:36:1f:c6:e5:96:a2:df:c7:b1:97:dc:b9:
b9:a3:85:0a:c7:7d:77:20:dc:64:fe:8e:cf:84:d2:2a:9f:ff:
77:28:e1:40:99:99:45:6f:11:9c:34:6c:28:03:02:e1:10:43:
e5:ae:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:30 2024 by rpki-client on console-fra.rpki-client.org