Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/NlqfED-L_VffU8skke4aVFPJ6PQ.roa
File: NlqfED-L_VffU8skke4aVFPJ6PQ.roa (raw, json)
Hash identifier: 4IcOkKQW015F8OnfdVnVOc8RDBs15245QC/bdnakCb0=
Subject key identifier: 36:5A:9F:10:3F:8B:FD:57:DF:53:CB:24:91:EE:1A:54:53:C9:E8:F4
Certificate issuer: /CN=e5ed022a213d21a0cdf987f0ff1b88a9fafff588
Certificate serial: ED6A
Authority key identifier: E5:ED:02:2A:21:3D:21:A0:CD:F9:87:F0:FF:1B:88:A9:FA:FF:F5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e0CKiE9IaDN-Yfw_xuIqfr_9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/NlqfED-L_VffU8skke4aVFPJ6PQ.roa
Signing time: Fri 14 Jan 2022 18:05:35 +0000
ROA not before: Fri 14 Jan 2022 18:05:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 2a11:7280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60778 (0xed6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ed022a213d21a0cdf987f0ff1b88a9fafff588
Validity
Not Before: Jan 14 18:05:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=365a9f103f8bfd57df53cb2491ee1a5453c9e8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:44:3f:c4:66:c6:38:f8:42:d6:98:c3:af:
cc:03:0f:c4:b7:5d:2c:24:b4:e0:e4:1b:52:2a:b1:
dd:83:9a:c7:f2:09:40:eb:83:c5:39:61:a5:e2:8e:
cd:e3:7d:d2:b3:1e:e1:02:91:da:05:7f:70:cc:b8:
aa:b9:5d:92:c2:73:cd:a2:62:b8:ac:72:0f:6b:a5:
54:83:54:e4:02:e5:17:9c:9f:ca:66:31:e5:72:b7:
0d:c8:57:3f:f4:ef:f5:dc:11:39:d5:db:6e:f6:2e:
70:22:b9:ab:2f:40:aa:22:7d:a5:c6:a7:b2:9a:06:
84:c0:1b:f6:fd:6b:e5:ef:70:4a:7a:9a:a7:a1:0c:
90:77:41:9e:1c:65:f9:5e:04:81:67:f7:57:73:44:
95:b5:e5:e4:57:bf:a3:f8:59:a2:a3:f2:9d:7f:5a:
f2:fc:a6:09:77:aa:49:5d:4c:75:1d:1e:90:e9:eb:
25:ca:c3:b3:62:ba:db:16:5f:00:21:38:50:69:da:
5e:50:79:fd:7f:8b:01:95:d7:1b:67:5e:33:d3:b3:
64:c8:4d:74:69:49:49:eb:4f:9f:e5:c3:29:8c:05:
fb:fa:9c:22:ce:b7:a9:79:e2:30:02:df:3a:d0:9e:
b3:53:f5:3c:a8:29:8d:94:4c:ca:b6:aa:16:bf:ba:
db:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5A:9F:10:3F:8B:FD:57:DF:53:CB:24:91:EE:1A:54:53:C9:E8:F4
X509v3 Authority Key Identifier:
keyid:E5:ED:02:2A:21:3D:21:A0:CD:F9:87:F0:FF:1B:88:A9:FA:FF:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e0CKiE9IaDN-Yfw_xuIqfr_9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/NlqfED-L_VffU8skke4aVFPJ6PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/5e0CKiE9IaDN-Yfw_xuIqfr_9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7280::/29
Signature Algorithm: sha256WithRSAEncryption
68:c1:14:76:51:53:8b:3d:ba:eb:8e:d3:8e:48:17:e9:3c:e3:
ea:41:07:63:ce:6a:3b:c1:50:84:31:9f:a9:48:66:2b:d2:9e:
e8:2c:f5:1e:a0:a0:14:a8:9f:91:a9:5d:00:91:11:44:9e:36:
d1:b3:c2:7a:b9:c9:d7:e6:10:ea:c4:ce:a6:5f:11:31:ea:7e:
c4:f5:fc:9c:c8:8f:56:d7:50:a1:f4:a0:de:49:f8:21:21:2b:
1f:81:95:f6:93:26:bc:16:78:bd:23:ff:5e:48:1c:a8:c1:ef:
86:89:c2:3f:7c:03:ca:f0:da:25:aa:4d:0f:e6:82:40:b3:79:
ec:bd:e3:ba:ec:c9:3a:aa:3d:08:85:f4:00:43:fd:0b:18:3c:
fb:01:84:32:79:aa:66:5a:72:b8:5f:2e:97:e3:60:0c:51:dd:
82:25:3a:81:2a:7c:85:db:de:da:15:1b:c3:f5:88:ca:31:77:
3f:cc:72:00:ed:f3:24:3e:b4:ee:26:fb:ce:c9:e2:6b:b4:10:
c3:04:da:f4:92:6c:bf:0b:20:a8:c0:79:c9:cb:40:0e:7c:34:
7e:bd:78:21:73:aa:6d:37:34:35:55:5c:5b:16:37:2d:8b:7e:
75:bc:a9:04:09:94:fa:9e:95:2f:c1:8e:6c:9d:5a:42:a7:1c:
09:a2:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:14 2024 by rpki-client on console-ams.rpki-client.org