Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/sn4fAkFFgj4wrD8caHyxS2vGUEk.roa
File: sn4fAkFFgj4wrD8caHyxS2vGUEk.roa (raw, json)
Hash identifier: K7L2h7EUNhCKhx+VxbTXouaIAFsWtaMWwIOQqVaqcdU=
Subject key identifier: B2:7E:1F:02:41:45:82:3E:30:AC:3F:1C:68:7C:B1:4B:6B:C6:50:49
Certificate issuer: /CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Certificate serial: 018486AC37352FD78E281D73480238F7149F
Authority key identifier: CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/sn4fAkFFgj4wrD8caHyxS2vGUEk.roa
Signing time: Thu 17 Nov 2022 17:39:04 +0000
ROA not before: Thu 17 Nov 2022 17:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:d040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ac:37:35:2f:d7:8e:28:1d:73:48:02:38:f7:14:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb6b218f6d3cf0db0051ca16a1e52d50c6cb2b18
Validity
Not Before: Nov 17 17:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b27e1f024145823e30ac3f1c687cb14b6bc65049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:24:62:0a:51:0e:cd:b2:de:6e:1f:95:38:d7:
d3:13:1d:92:79:67:27:6f:e0:d1:0d:0f:29:4d:95:
af:f4:86:d6:f8:f9:ff:9c:10:cf:07:b2:cf:58:db:
d2:99:58:0e:7a:94:29:ac:77:75:42:34:ac:4a:69:
bd:3f:53:eb:1f:bb:ba:2f:e8:c5:2b:04:f5:38:09:
e2:15:ef:f5:f8:8b:08:31:06:77:9b:3d:31:99:a9:
35:e7:53:02:b6:5f:ca:ad:34:a8:c9:2e:fd:ef:6b:
8b:4d:ce:7f:5b:dd:8d:55:de:bf:4c:83:fd:bf:23:
ba:8b:a8:9d:58:a4:4e:ee:97:7c:e0:a7:0f:55:a8:
ee:45:13:b4:df:b6:e5:50:e7:fa:13:bc:47:cc:79:
a6:11:74:85:d1:b4:78:fe:f5:26:c3:83:53:57:e3:
f0:26:19:c4:6c:eb:48:e3:6a:ca:01:ac:0a:09:88:
52:42:f5:b5:86:3e:3d:1c:03:3c:82:ab:6e:64:eb:
16:a2:ea:01:b2:36:05:0d:1c:96:14:67:42:e1:bf:
1c:8e:5f:c5:41:ff:ca:71:d9:45:c1:d4:e6:22:06:
04:23:7a:5e:5e:9a:5c:a4:70:63:60:a0:c8:c7:eb:
12:43:bc:9c:ae:a7:10:0d:46:79:3f:c8:0f:01:55:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7E:1F:02:41:45:82:3E:30:AC:3F:1C:68:7C:B1:4B:6B:C6:50:49
X509v3 Authority Key Identifier:
keyid:CB:6B:21:8F:6D:3C:F0:DB:00:51:CA:16:A1:E5:2D:50:C6:CB:2B:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y2shj2088NsAUcoWoeUtUMbLKxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/sn4fAkFFgj4wrD8caHyxS2vGUEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5a3b1e-25f5-44ac-a1fb-d9d1f14a8b8c/1/y2shj2088NsAUcoWoeUtUMbLKxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:d040::/29
Signature Algorithm: sha256WithRSAEncryption
18:79:34:eb:fa:40:00:dc:76:6f:42:eb:0a:b9:8e:e3:8a:8c:
de:22:cb:5a:ef:03:f6:f1:ea:05:4a:36:37:03:f3:56:83:b9:
35:0f:4c:a4:ef:44:ab:46:e5:69:71:02:21:55:15:4b:df:40:
9d:b9:89:28:c4:1a:42:dd:aa:b4:d1:f6:be:bb:70:2b:67:b9:
a0:c5:b2:95:92:d7:bf:7c:21:75:3e:08:f4:13:a6:30:9b:c5:
0c:b5:29:cb:8f:09:af:a6:7e:af:f3:68:c7:23:25:de:10:e1:
38:70:f5:d0:ee:4b:f1:0a:b9:6e:6e:26:98:4b:84:57:7f:39:
ed:58:e0:54:92:6d:be:8a:44:7e:d9:32:8c:76:b0:c1:cb:48:
7a:1f:75:72:55:02:42:c6:74:1c:1f:01:34:fd:26:46:7f:09:
1e:f3:47:03:a2:b1:06:54:5f:8b:ee:df:11:e0:b9:1d:54:17:
0b:8f:b4:48:0a:dc:0c:0f:fa:ac:ea:ac:2e:9e:27:48:d1:99:
28:32:68:03:47:fc:82:a6:a6:52:86:88:09:17:64:a2:71:30:
70:21:1a:7f:1d:a3:fb:78:f8:83:01:dc:6c:52:eb:3e:ed:c1:
ef:ff:75:75:b2:72:f1:70:6b:88:df:ba:c3:21:8d:59:35:2c:
44:01:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:27 2024 by rpki-client on console-ams.rpki-client.org