Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/QKKJOYZyUsQgfoxKwias4vZR9Gw.roa
File: QKKJOYZyUsQgfoxKwias4vZR9Gw.roa (raw, json)
Hash identifier: 1hX1zdgQjJ7+Izqp0hnI9EbboHF8kvPuj6CpWhJsdkQ=
Subject key identifier: 40:A2:89:39:86:72:52:C4:20:7E:8C:4A:C2:26:AC:E2:F6:51:F4:6C
Certificate issuer: /CN=0de110c435d6e68631ca1f5b9b844ac7aa275720
Certificate serial: A6D08A
Authority key identifier: 0D:E1:10:C4:35:D6:E6:86:31:CA:1F:5B:9B:84:4A:C7:AA:27:57:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DeEQxDXW5oYxyh9bm4RKx6onVyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/QKKJOYZyUsQgfoxKwias4vZR9Gw.roa
Signing time: Sat 01 Jan 2022 13:00:04 +0000
ROA not before: Sat 01 Jan 2022 13:00:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:c300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10932362 (0xa6d08a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de110c435d6e68631ca1f5b9b844ac7aa275720
Validity
Not Before: Jan 1 13:00:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40a28939867252c4207e8c4ac226ace2f651f46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:b9:dc:2d:e9:ee:d2:6a:c1:40:5e:c3:d4:
a2:ec:17:70:e9:ec:6c:c1:d8:05:d6:e2:b1:47:f7:
3a:0a:a1:49:ab:d3:f4:36:7e:93:0f:07:de:73:7b:
9d:fd:03:bb:fc:30:21:98:c8:2f:60:50:05:ee:77:
4e:08:d8:bb:b3:aa:cc:0f:91:e7:0f:3c:6f:11:65:
aa:07:7e:94:7c:84:da:31:a9:f4:c4:47:a1:d5:de:
d7:e7:19:00:15:52:cf:5a:3c:d9:13:4d:82:41:9e:
23:83:5d:c6:6b:ac:50:3f:a3:04:0a:ea:18:d3:02:
70:e9:27:2e:6f:2a:51:e7:4b:6d:64:38:ce:0b:cc:
81:95:0c:5e:7f:05:97:77:9c:11:ab:0a:58:c5:ff:
c6:50:1b:c9:a7:7a:e8:cb:61:fa:52:62:1a:ed:bb:
64:ed:39:ff:4a:98:36:6c:7c:ec:29:56:da:1f:0c:
f7:fb:8c:f3:13:f7:22:6b:27:0a:54:73:1b:56:91:
38:ff:e5:91:e0:4d:fd:ed:36:07:cb:6a:7a:0a:83:
7c:8e:dd:e2:59:52:16:ae:54:1e:08:88:f8:15:b6:
b8:fa:43:71:78:59:0c:f3:ef:2d:7d:54:96:c6:a9:
cf:26:50:28:27:47:e5:1b:31:5b:d3:ba:31:72:e7:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A2:89:39:86:72:52:C4:20:7E:8C:4A:C2:26:AC:E2:F6:51:F4:6C
X509v3 Authority Key Identifier:
keyid:0D:E1:10:C4:35:D6:E6:86:31:CA:1F:5B:9B:84:4A:C7:AA:27:57:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DeEQxDXW5oYxyh9bm4RKx6onVyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/QKKJOYZyUsQgfoxKwias4vZR9Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/67d5c8-0233-4d21-bd74-f4cb2c05929f/1/DeEQxDXW5oYxyh9bm4RKx6onVyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c300::/29
Signature Algorithm: sha256WithRSAEncryption
b0:f3:67:5d:d2:3b:d3:82:4d:32:5e:37:bd:6c:e6:9a:29:ce:
a2:a6:ef:de:f4:21:a9:61:f0:b1:f7:1e:bb:2b:a6:7c:74:31:
f5:49:6f:29:d3:cd:6b:ff:4b:88:3c:63:34:ed:06:9b:1f:11:
28:d7:0c:23:b7:0f:74:27:25:d0:ad:fd:bd:c0:99:09:74:24:
14:bb:79:68:51:48:95:b0:f6:57:6c:6c:80:82:97:bd:7c:b9:
c6:86:aa:c1:8f:c6:83:ba:1a:b7:d8:e5:92:72:91:c5:2d:c8:
9b:f3:91:b0:6b:6c:46:ba:fb:a8:75:ab:0a:f4:4e:37:29:1c:
ee:5c:8c:fa:43:3d:97:d1:0e:b9:22:97:47:27:32:b0:2b:9b:
fb:ab:81:50:96:38:8b:3a:3f:86:1b:a9:4a:ee:ca:52:ad:c2:
ca:03:fa:47:44:01:60:be:79:d3:ac:09:9b:32:66:2f:ab:23:
4c:88:0e:d6:1b:39:95:37:de:49:b8:ea:d8:8c:1e:a3:2c:03:
ae:63:e6:5b:9d:c8:42:0c:fb:e8:7a:53:be:32:e0:13:a7:3e:
fd:76:03:cf:d3:c3:d0:2c:4c:6d:99:8c:be:7f:98:8e:1b:76:
c0:56:91:88:55:b3:83:bf:0b:36:30:e7:11:8d:a9:45:32:12:
e5:0c:f3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:13 2024 by rpki-client on console-ams.rpki-client.org