Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q93OCeDJEnj_levNS061GzycMMA.roa
File: q93OCeDJEnj_levNS061GzycMMA.roa (raw, json)
Hash identifier: mFlkLh/uac4Db5Jj6vMU7IUU3llOSpCIGBu08qIJEY4=
Subject key identifier: AB:DD:CE:09:E0:C9:12:78:FF:95:EB:CD:4B:4E:B5:1B:3C:9C:30:C0
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018F82D540DA70619C2ADD21C150376E9BC2
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q93OCeDJEnj_levNS061GzycMMA.roa
Signing time: Thu 16 May 2024 19:16:04 +0000
ROA not before: Thu 16 May 2024 19:16:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:c0c0::/29 maxlen: 29
2a11:d900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:d5:40:da:70:61:9c:2a:dd:21:c1:50:37:6e:9b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 16 19:16:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abddce09e0c91278ff95ebcd4b4eb51b3c9c30c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:09:44:3e:b7:3c:58:d6:5b:01:f8:c6:23:
e1:f5:7b:d2:7b:c8:12:3e:ee:03:36:db:c5:2e:dc:
bb:33:86:61:02:11:b1:74:5e:8a:8b:85:c0:99:02:
d3:6f:44:40:43:f4:0a:a0:fc:81:e0:d4:87:52:d0:
ca:ee:62:3d:63:ba:67:7d:61:fd:5a:c8:9c:1c:ec:
1f:00:9e:c5:bc:f1:a5:f4:fb:64:19:8b:5f:5f:37:
6a:ba:59:3a:3c:58:6c:36:93:78:04:70:ff:2e:a8:
dc:90:21:82:d0:58:39:a6:c1:49:d1:a1:de:70:03:
9f:6c:2a:66:4d:84:b0:c4:a1:ac:99:f5:d7:9c:ca:
dd:39:2a:96:f8:c5:e6:f8:38:e0:17:55:2c:7c:20:
51:f0:40:5a:4e:e1:35:ba:89:90:81:07:53:14:86:
63:f5:93:e7:10:45:97:35:7d:ea:1e:7a:8d:d7:26:
44:fd:b3:cc:00:64:5d:e4:6b:9c:f5:b2:e4:d9:95:
84:fc:ea:a4:f4:f1:27:2f:1f:37:11:b2:63:e0:53:
16:ca:6e:94:b9:29:08:54:e7:da:df:7e:c5:48:cb:
d7:d6:fa:d7:37:ba:e1:fb:c6:b9:29:d4:c8:54:16:
3f:be:28:46:a2:10:52:d1:3a:32:8e:a2:9a:aa:ce:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:CE:09:E0:C9:12:78:FF:95:EB:CD:4B:4E:B5:1B:3C:9C:30:C0
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/q93OCeDJEnj_levNS061GzycMMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c0c0::/29
2a11:d900::/29
Signature Algorithm: sha256WithRSAEncryption
6e:d9:a6:2e:6d:3c:eb:49:6f:eb:50:64:f4:95:0e:3b:0f:f4:
84:b6:2d:0b:cd:0c:0b:ce:2d:50:fa:1d:38:c0:01:3d:dd:f1:
d7:af:f5:a2:21:6b:6e:00:da:33:57:cf:f4:48:a9:fa:e5:6f:
4b:88:8a:2e:63:8c:8d:c0:f4:44:32:1a:81:36:41:fe:84:f8:
3d:1d:ee:a2:50:08:12:c9:0b:5b:aa:42:05:9f:fc:25:a4:41:
c7:43:87:ec:66:ff:6b:f6:f7:11:25:4c:9a:3c:db:69:be:c3:
1b:09:87:e6:86:ba:75:1c:4d:3f:3f:4a:09:94:67:d5:ae:71:
10:78:67:d8:35:f4:a0:30:2c:fa:7f:8f:22:c8:33:8d:c3:ab:
f7:d6:7e:98:3c:79:22:ca:84:b3:43:64:e9:24:2b:c8:71:2c:
2c:f3:83:ae:f0:d1:d8:48:84:ce:9b:69:bc:0a:11:ea:31:88:
ce:48:9c:57:22:2a:e1:34:a2:e4:e4:2c:eb:ec:f0:d4:38:0f:
a8:b9:2b:9b:b5:a3:37:01:5a:c2:8b:4a:d1:2b:c8:dd:fc:e3:
9e:b9:61:7b:b2:20:e3:e2:dd:c6:21:e4:ef:8f:0e:c3:57:0e:
65:15:97:b8:e7:5a:69:ef:aa:b8:34:09:fc:61:15:31:33:cf:
0a:3f:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:22 2025 by rpki-client