Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/pyVxYcmIeX6qxXcKtguk1pNMwAM.roa
File: pyVxYcmIeX6qxXcKtguk1pNMwAM.roa (raw, json)
Hash identifier: qjT+vzKFA3oi81sEol9pDhhgtjSZht2U6aavCvZvWhE=
Subject key identifier: A7:25:71:61:C9:88:79:7E:AA:C5:77:0A:B6:0B:A4:D6:93:4C:C0:03
Certificate issuer: /CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Certificate serial: 018486AC3A8B17866EAE8DCE25D98B6BE962
Authority key identifier: 0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/pyVxYcmIeX6qxXcKtguk1pNMwAM.roa
Signing time: Thu 17 Nov 2022 17:39:04 +0000
ROA not before: Thu 17 Nov 2022 17:39:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:9240::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:ac:3a:8b:17:86:6e:ae:8d:ce:25:d9:8b:6b:e9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd55613dd54cd7d0516f77b86d19d8b6701a1ee
Validity
Not Before: Nov 17 17:39:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7257161c988797eaac5770ab60ba4d6934cc003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:77:5b:cf:83:e4:f3:c0:aa:9a:d1:9d:92:
29:e5:9f:b6:18:c7:19:3f:9c:2b:a8:03:97:97:1b:
9f:80:9f:78:78:5e:73:70:aa:4a:a8:98:d5:fc:6c:
4c:c4:6b:39:1d:ab:a3:d1:13:b4:54:b6:e8:d2:2b:
de:44:44:d0:2a:05:35:f9:08:09:bd:a0:71:2b:00:
ae:f5:39:ba:3c:ad:5a:3b:fe:d3:90:26:93:0a:42:
27:96:bc:e7:34:75:7f:ae:57:64:14:41:4a:62:b6:
0a:0d:f1:a8:9f:2d:29:b9:f8:f1:27:5b:a9:9b:f4:
36:b4:16:ce:b4:48:95:38:1d:21:40:31:cb:21:db:
66:1c:af:71:be:01:9f:2c:44:98:8d:eb:55:08:66:
85:e4:a0:9f:cf:de:b8:ef:fb:d3:b9:ae:df:77:7e:
ac:ff:9b:96:db:e6:1e:98:02:df:b8:60:10:ba:96:
ab:26:fc:96:96:64:85:4d:14:a9:85:be:1c:de:6f:
2c:03:e6:9e:e4:66:4d:f2:85:d0:4f:17:ee:5c:76:
38:18:71:72:e3:10:23:93:6c:22:d5:55:ee:a6:41:
60:98:95:62:7a:06:c8:5c:e1:38:10:72:42:27:fa:
fe:34:88:57:06:0f:d3:71:d5:5d:92:9b:f3:c1:8c:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:25:71:61:C9:88:79:7E:AA:C5:77:0A:B6:0B:A4:D6:93:4C:C0:03
X509v3 Authority Key Identifier:
keyid:0C:D5:56:13:DD:54:CD:7D:05:16:F7:7B:86:D1:9D:8B:67:01:A1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNVWE91UzX0FFvd7htGdi2cBoe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/pyVxYcmIeX6qxXcKtguk1pNMwAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/981095-e07b-4415-8ff7-a8e31b93be72/1/DNVWE91UzX0FFvd7htGdi2cBoe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9240::/29
Signature Algorithm: sha256WithRSAEncryption
81:f9:8a:f2:11:93:90:c3:8e:6a:a1:9a:4e:a4:e8:61:b8:38:
5f:74:54:84:1b:0c:6b:ab:4c:0e:68:00:3a:60:06:a5:c6:2a:
52:e0:94:15:dc:e4:c7:2e:14:08:4f:4a:82:f0:19:07:ee:1f:
93:03:8e:03:e3:cc:08:d1:c1:77:6d:29:1b:29:ce:f1:da:fc:
6c:b6:69:91:fe:51:18:4c:12:f2:58:73:8b:7d:1d:3e:f7:e6:
94:f3:65:eb:f6:df:b6:42:78:0b:6c:f0:85:7f:d6:4d:2f:0c:
37:6f:6d:9e:d9:76:90:e1:fb:4b:5f:16:c8:f4:e9:c7:ca:b0:
5d:be:37:fb:b3:20:97:f2:90:60:a7:00:aa:62:30:e0:bb:ce:
12:ff:99:c2:9e:07:45:ee:73:90:a3:ac:47:b7:ea:5e:f8:3a:
e8:6b:b5:e3:ad:16:19:14:e0:3c:96:a7:e2:48:56:b2:72:20:
64:f5:53:75:00:8f:e5:38:d9:63:34:97:1e:8f:db:85:5f:6b:
38:42:27:4a:67:e7:8e:08:57:d4:dd:a5:1d:15:ff:8a:81:df:
cd:36:7b:0c:ee:0a:ee:cd:a8:62:c9:d0:e5:e8:4d:bc:c3:62:
09:1a:43:c9:ef:de:fb:cc:21:f1:9c:f3:02:9e:30:c6:8e:5c:
80:a7:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:48 2025 by rpki-client