Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/_u3lzm-flkIZyUQsCAtTmEOZhUs.roa
File: _u3lzm-flkIZyUQsCAtTmEOZhUs.roa (raw, json)
Hash identifier: j02X3cteLNVDwfdti+PMJjmeCN1ePWH38VPgqNOmVHw=
Subject key identifier: FE:ED:E5:CE:6F:9F:96:42:19:C9:44:2C:08:0B:53:98:43:99:85:4B
Certificate issuer: /CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Certificate serial: 0187D9CADB7E92FDEFA1F5A844E40F65408E
Authority key identifier: 69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/_u3lzm-flkIZyUQsCAtTmEOZhUs.roa
Signing time: Tue 02 May 2023 00:09:23 +0000
ROA not before: Tue 02 May 2023 00:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 2a11:8280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:ca:db:7e:92:fd:ef:a1:f5:a8:44:e4:0f:65:40:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=693dfb8abd2b70512f88eaec5903ff92cacb5131
Validity
Not Before: May 2 00:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feede5ce6f9f964219c9442c080b53984399854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:f8:64:cf:9a:01:3c:25:39:38:80:3d:1b:
bf:71:29:3b:ff:1e:e9:29:dc:15:88:6d:c4:95:f5:
27:b5:7c:20:e3:61:28:0a:52:4f:77:ff:71:4e:79:
be:93:4d:4b:32:bd:8d:26:58:bb:62:65:cd:e5:ec:
77:1e:d4:7a:d6:74:dc:e2:07:ed:4e:ba:88:32:f2:
24:a4:a2:5a:aa:b8:cb:2f:40:18:25:91:72:63:25:
c9:13:26:6a:fd:25:85:2f:69:9a:63:be:59:04:d9:
3b:ef:4c:b4:e7:cb:6a:db:b8:33:17:33:4a:9a:2a:
3b:8e:eb:81:d1:e5:d5:2f:6b:db:5f:cf:ab:8c:44:
2c:b0:96:eb:02:fc:ec:49:cf:c5:ad:3d:f4:dc:b8:
0f:76:30:b6:00:e0:f4:51:91:34:85:e6:02:d7:f8:
ad:26:b0:5d:6b:71:df:91:eb:4d:af:12:d8:79:6d:
38:cf:8f:f7:e4:29:08:0c:70:81:ed:54:80:33:cb:
20:1a:6f:e8:ef:3c:c4:85:36:c2:a0:b1:2d:cb:69:
5c:0e:3b:03:55:d3:0c:9e:68:b0:27:d7:69:e3:69:
34:29:ae:d1:c0:a4:bf:97:06:ec:2a:80:2d:e2:c3:
4c:ff:44:67:b7:89:63:c8:16:b4:88:d2:d2:ac:37:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:E5:CE:6F:9F:96:42:19:C9:44:2C:08:0B:53:98:43:99:85:4B
X509v3 Authority Key Identifier:
keyid:69:3D:FB:8A:BD:2B:70:51:2F:88:EA:EC:59:03:FF:92:CA:CB:51:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aT37ir0rcFEviOrsWQP_ksrLUTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/_u3lzm-flkIZyUQsCAtTmEOZhUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/58272f-b8e2-441a-900d-b20716b074ed/1/aT37ir0rcFEviOrsWQP_ksrLUTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:8280::/29
Signature Algorithm: sha256WithRSAEncryption
64:60:7c:75:6a:a4:32:12:ce:ec:a8:38:39:1a:25:1d:53:32:
61:09:56:d6:93:44:4b:4f:ee:3e:dc:06:6d:f2:68:45:71:7d:
25:fa:1c:e6:ed:61:1e:c6:6a:3b:d4:6a:55:ec:a8:7f:00:5f:
48:a9:0a:0f:18:9e:a2:8b:78:df:20:85:1f:54:cc:3b:86:7c:
20:3f:d3:0d:61:4f:70:db:49:1c:bb:b6:78:7f:b7:bf:2f:34:
61:41:22:89:03:6f:e2:7b:8b:90:a4:4f:c7:5e:6d:67:c3:3a:
94:c3:92:05:79:af:fe:83:99:dc:24:90:09:62:95:db:97:e3:
25:05:7d:04:2b:7c:66:67:c7:22:92:1a:09:8a:db:91:75:36:
ac:1e:75:c5:32:2c:30:a1:08:47:f4:04:6a:76:d4:64:9d:36:
bd:ad:13:5d:2b:aa:f4:8a:79:13:d9:99:fe:5e:55:05:3e:30:
ff:ed:d3:77:f9:b3:ed:23:40:7d:12:90:96:62:14:54:20:9b:
bd:32:62:23:12:33:e0:64:7d:41:ec:e4:18:1d:a3:bc:fb:e9:
c5:00:cf:91:cd:93:8d:f9:62:fc:53:e5:eb:25:92:6b:0c:a0:
7e:7e:e2:05:56:be:cf:ed:d6:a2:a6:c1:e2:cc:82:8f:e3:55:
67:e4:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:37 2024 by rpki-client on console-ams.rpki-client.org