Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/_Uzfk_M_AvH91n9u7mgA8bBQGWg.roa
File: _Uzfk_M_AvH91n9u7mgA8bBQGWg.roa (raw, json)
Hash identifier: dw11uZUXLvF4Vwa2n21st3Fa7T1CYmTwsy9PXuTM3gs=
Subject key identifier: FD:4C:DF:93:F3:3F:02:F1:FD:D6:7F:6E:EE:68:00:F1:B0:50:19:68
Certificate issuer: /CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Certificate serial: 01866F610EB649542360643275A70052E73B
Authority key identifier: 07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/_Uzfk_M_AvH91n9u7mgA8bBQGWg.roa
Signing time: Mon 20 Feb 2023 15:11:17 +0000
ROA not before: Mon 20 Feb 2023 15:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 2a11:7e01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:61:0e:b6:49:54:23:60:64:32:75:a7:00:52:e7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e444d42853df4a8be332908ee18dcdcf3b7109
Validity
Not Before: Feb 20 15:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd4cdf93f33f02f1fdd67f6eee6800f1b0501968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:7f:33:42:fb:b7:9a:5a:93:d9:a0:e4:ad:
16:ac:63:2d:1a:0a:ff:26:46:da:b2:a3:1e:93:86:
5f:f2:aa:1a:db:54:d8:5e:a0:d3:3f:40:e6:d6:77:
15:8f:9b:9b:a2:2e:2b:e7:d8:37:c8:2c:8d:63:a7:
c7:41:85:25:86:65:d0:93:10:58:6f:6d:56:ca:c1:
1b:0b:3c:52:2b:fb:1f:0b:a2:4d:4b:9e:51:99:10:
1e:25:90:98:27:2a:73:c3:02:33:1a:f1:8a:75:e4:
01:96:d8:3b:2f:26:63:07:ba:fe:1a:2e:4f:fc:aa:
c3:c8:b4:ba:12:27:5f:fe:be:d4:b1:35:d4:00:6e:
bf:57:a5:01:c1:76:61:ce:d1:70:e5:d1:64:05:98:
2a:ea:4f:f2:53:25:12:03:f2:f0:c5:25:e0:23:3c:
83:65:39:d0:37:69:16:0d:ca:8b:51:9e:06:28:f8:
70:d9:3a:c3:de:cb:a3:33:1c:96:17:a2:6c:fc:a3:
93:ca:4e:3b:42:aa:89:d8:59:42:c0:03:33:15:b8:
d4:82:15:83:f7:35:b6:61:b6:07:ac:27:05:a1:ac:
42:5b:2e:64:3d:ae:3a:e1:a1:5e:65:66:b8:4f:3f:
6f:da:52:bd:6e:4c:a2:5e:10:7d:e0:24:1b:46:55:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4C:DF:93:F3:3F:02:F1:FD:D6:7F:6E:EE:68:00:F1:B0:50:19:68
X509v3 Authority Key Identifier:
keyid:07:E4:44:D4:28:53:DF:4A:8B:E3:32:90:8E:E1:8D:CD:CF:3B:71:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-RE1ChT30qL4zKQjuGNzc87cQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/_Uzfk_M_AvH91n9u7mgA8bBQGWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4550ec-16a0-4e42-9794-2f351739ad15/1/B-RE1ChT30qL4zKQjuGNzc87cQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7e01::/32
Signature Algorithm: sha256WithRSAEncryption
6f:77:55:3f:42:cb:59:b9:5f:2b:d7:27:c1:5d:52:e5:a7:70:
52:85:c9:5a:c3:90:f2:bf:b0:16:ea:36:59:91:94:70:01:fb:
fe:cc:cc:e9:54:f0:02:76:1c:1f:23:23:5d:44:f0:23:64:15:
09:2e:f5:99:e9:66:4c:95:cc:ec:05:04:72:3c:88:27:03:3a:
e1:ca:b3:8e:18:ce:ee:ab:63:d9:dd:46:1a:05:e6:bc:12:36:
b4:77:1e:9d:66:cf:63:49:c3:f6:89:cd:3c:ab:b8:43:d1:20:
02:8b:8c:8d:0f:b9:f0:f0:b8:bb:08:1d:da:16:1b:1e:64:16:
4c:b7:c5:49:50:c6:8b:88:b2:1c:20:e3:f4:3d:25:1d:f3:ba:
3a:b4:4a:8a:29:fb:7d:a1:9e:e0:80:b9:97:04:92:ea:93:51:
15:96:1d:f9:6b:e1:d7:9d:f5:82:6b:04:f8:36:62:ae:d3:b3:
13:e7:47:c0:13:eb:80:79:1a:0c:99:69:89:15:f8:9c:b8:b3:
53:e2:a1:57:47:a1:e5:ab:f6:7f:8c:b3:a7:fc:5e:0e:5d:12:
13:0d:47:d6:2e:7c:f0:07:78:58:19:9a:d8:3a:6b:a1:c9:2b:
51:58:81:a0:7a:4f:f6:73:20:87:bb:4f:4b:aa:c3:56:97:33:
86:4f:4f:b8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYZvYQ62SVQjYGQydacAUuc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZTQ0NGQ0Mjg1M2RmNGE4YmUzMzI5MDhlZTE4ZGNkY2Yz
YjcxMDkwHhcNMjMwMjIwMTUxMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDRjZGY5M2YzM2YwMmYxZmRkNjdmNmVlZTY4MDBmMWIwNTAxOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPp/M0L7t5pak9mg5K0WrGMtGgr/
JkbasqMek4Zf8qoa21TYXqDTP0Dm1ncVj5uboi4r59g3yCyNY6fHQYUlhmXQkxBY
b21WysEbCzxSK/sfC6JNS55RmRAeJZCYJypzwwIzGvGKdeQBltg7LyZjB7r+Gi5P
/KrDyLS6Eidf/r7UsTXUAG6/V6UBwXZhztFw5dFkBZgq6k/yUyUSA/LwxSXgIzyD
ZTnQN2kWDcqLUZ4GKPhw2TrD3sujMxyWF6Js/KOTyk47QqqJ2FlCwAMzFbjUghWD
9zW2YbYHrCcFoaxCWy5kPa464aFeZWa4Tz9v2lK9bkyiXhB94CQbRlWZvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFP1M35PzPwLx/dZ/bu5oAPGwUBloMB8GA1UdIwQY
MBaAFAfkRNQoU99Ki+MykI7hjc3PO3EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1SRTFDaFQzMHFMNHpLUWp1R056Yzg3Y1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80NTUwZWMtMTZhMC00ZTQyLTk3OTQt
MmYzNTE3MzlhZDE1LzEvX1V6ZmtfTV9Bdkg5MW45dTdtZ0E4YkJRR1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80NTUwZWMtMTZhMC00ZTQyLTk3OTQtMmYzNTE3MzlhZDE1
LzEvQi1SRTFDaFQzMHFMNHpLUWp1R056Yzg3Y1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhF+ATAN
BgkqhkiG9w0BAQsFAAOCAQEAb3dVP0LLWblfK9cnwV1S5adwUoXJWsOQ8r+wFuo2
WZGUcAH7/szM6VTwAnYcHyMjXUTwI2QVCS71melmTJXM7AUEcjyIJwM64cqzjhjO
7qtj2d1GGgXmvBI2tHcenWbPY0nD9onNPKu4Q9EgAouMjQ+58PC4uwgd2hYbHmQW
TLfFSVDGi4iyHCDj9D0lHfO6OrRKiin7faGe4IC5lwSS6pNRFZYd+Wvh1531gmsE
+DZirtOzE+dHwBPrgHkaDJlpiRX4nLizU+KhV0eh5av2f4yzp/xeDl0SEw1H1i58
8Ad4WBma2DprockrUViBoHpP9nMgh7tPS6rDVpczhk9PuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:10 2024 by rpki-client on console-fra.rpki-client.org