Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/nzvAlQ5TubJphskEA3pD2O9JH5I.roa
File: nzvAlQ5TubJphskEA3pD2O9JH5I.roa (raw, json)
Hash identifier: LdHchssysjArcmspcOTSk8cmYDxN6QaPID8S5jJiyg4=
Subject key identifier: 9F:3B:C0:95:0E:53:B9:B2:69:86:C9:04:03:7A:43:D8:EF:49:1F:92
Certificate issuer: /CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Certificate serial: 01904A12A5EAD5A42956414AB759C6AE7505
Authority key identifier: 76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/nzvAlQ5TubJphskEA3pD2O9JH5I.roa
Signing time: Mon 24 Jun 2024 11:47:34 +0000
ROA not before: Mon 24 Jun 2024 11:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:cd01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:12:a5:ea:d5:a4:29:56:41:4a:b7:59:c6:ae:75:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=763d457e5d3cc0acd8a74f8b10e2686bfbc496cb
Validity
Not Before: Jun 24 11:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f3bc0950e53b9b26986c904037a43d8ef491f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:a7:e1:50:5f:1d:37:34:f9:f7:04:ff:45:
36:b4:1f:6c:f7:12:47:26:6a:d6:74:e6:ed:3e:92:
f2:f9:a0:b6:11:55:11:eb:c1:61:65:54:8a:a1:df:
ff:ef:85:d4:fe:72:a0:ac:ac:94:3d:f6:37:79:1b:
a9:e5:cd:7c:fe:c9:75:f9:16:5a:3b:d6:8e:42:35:
a1:bd:31:54:d5:28:e9:0f:58:c2:27:21:ec:3d:35:
ad:60:54:9d:e0:e7:7a:98:17:10:30:98:da:60:fd:
17:c6:04:49:bc:3c:43:9f:25:c0:7d:f8:1e:16:cb:
e0:7d:9b:bd:49:2d:03:22:c3:22:0c:61:ad:ce:9e:
33:d3:b9:cf:e3:a7:be:05:3b:1d:a6:3d:f8:1b:ae:
5e:dd:00:f3:83:70:93:4e:b0:94:22:1c:59:3a:67:
86:94:af:12:0a:e7:e8:46:99:0d:01:81:34:56:68:
fc:5b:58:1e:37:c7:62:03:62:91:df:86:fd:c6:de:
c1:45:50:6d:0a:f9:95:56:d7:cb:fd:cd:09:da:ec:
90:29:fb:28:0d:d0:6d:d5:40:86:e8:67:e1:c4:31:
87:76:56:95:17:6f:ed:c0:c1:78:00:80:cb:bb:ca:
9d:95:39:f9:f4:ae:25:2b:e0:a6:81:7c:f4:7e:e3:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:C0:95:0E:53:B9:B2:69:86:C9:04:03:7A:43:D8:EF:49:1F:92
X509v3 Authority Key Identifier:
keyid:76:3D:45:7E:5D:3C:C0:AC:D8:A7:4F:8B:10:E2:68:6B:FB:C4:96:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj1Ffl08wKzYp0-LEOJoa_vElss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/nzvAlQ5TubJphskEA3pD2O9JH5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ccc94b-c287-4e5f-8604-7e594f2494cc/1/dj1Ffl08wKzYp0-LEOJoa_vElss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:cd01::/32
Signature Algorithm: sha256WithRSAEncryption
99:3b:a2:10:4a:ca:ab:e3:4f:f6:e6:4d:f2:80:c8:86:b3:70:
de:28:e8:ea:48:68:e6:a7:26:a9:71:18:6a:69:b5:46:35:3e:
26:0e:2c:65:58:5c:83:f6:c6:4e:85:2e:86:08:03:3b:75:d1:
da:6d:9a:c3:d5:65:c7:6b:4a:61:7f:5d:ce:af:87:d1:37:db:
9a:51:ab:f8:d8:ad:41:cb:b3:24:e6:5d:0d:8b:d1:a4:cb:60:
c0:ca:bc:9d:d6:37:f1:99:e9:0a:5e:b1:bd:8c:8a:6a:88:12:
fd:d8:00:b7:87:b0:c3:0b:55:25:33:84:86:13:37:04:8a:94:
3c:03:01:a5:0f:d9:0a:fa:75:a8:a9:85:5e:88:8c:dd:cf:bd:
a4:bb:95:b1:2d:49:14:49:22:bb:33:d9:c2:73:59:68:e6:d2:
19:ea:bf:d2:3e:65:e7:0e:01:3e:3d:1f:38:2d:1e:58:43:cd:
89:b5:a5:1a:b5:f8:a6:bc:fd:9d:6b:a9:ad:a9:6a:d2:24:c9:
ba:28:a9:c4:55:fa:45:8c:4b:d3:57:bf:0d:0e:c4:20:6e:82:
ce:e8:fe:b3:64:5f:cf:3b:76:eb:3b:29:ce:70:c2:fd:9a:04:
98:a2:38:d5:a1:57:28:a5:e9:d2:69:da:31:9b:ec:ab:65:44:
86:94:a3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:07 2025 by rpki-client