Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/BABOSW2ZZyqJMfRStcWjK3S_evo.roa
File: BABOSW2ZZyqJMfRStcWjK3S_evo.roa (raw, json)
Hash identifier: 8uyrcEHiAlL0WTN6RR+F4s9LF2VwVkDVHCwqmguaSfk=
Subject key identifier: 04:00:4E:49:6D:99:67:2A:89:31:F4:52:B5:C5:A3:2B:74:BF:7A:FA
Certificate issuer: /CN=ac4c9b4c9ffe7be1093481e459e73b411e7e1c33
Certificate serial: 01856F5DB8371B8F6D6F2541CBCDA5842FF6
Authority key identifier: AC:4C:9B:4C:9F:FE:7B:E1:09:34:81:E4:59:E7:3B:41:1E:7E:1C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEybTJ_-e-EJNIHkWec7QR5-HDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/BABOSW2ZZyqJMfRStcWjK3S_evo.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:7040::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b8:37:1b:8f:6d:6f:25:41:cb:cd:a5:84:2f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4c9b4c9ffe7be1093481e459e73b411e7e1c33
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04004e496d99672a8931f452b5c5a32b74bf7afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:03:88:d3:3f:2a:c3:b4:82:94:74:72:c9:
ac:8e:f3:67:aa:b5:a9:93:b8:36:45:27:ce:cf:6a:
36:18:24:2d:5d:d2:89:c7:1f:cc:75:99:17:24:c9:
da:bc:e6:a6:e2:a1:8b:dd:5c:5a:a4:98:14:9f:90:
d4:63:5d:6b:f9:b3:ce:a9:fe:fa:80:ad:bc:37:0e:
13:0d:3f:d0:66:ac:9a:71:56:8d:c0:06:21:a0:69:
6e:81:c2:6b:ce:f4:30:bf:d3:2d:b1:eb:68:69:d7:
21:fd:60:2e:b4:11:86:a8:e5:49:68:a0:b3:c6:a1:
82:6d:31:f5:09:f3:d6:3c:42:c0:2e:83:40:d6:be:
62:55:74:cf:08:67:eb:33:8a:3c:01:36:54:05:b5:
70:ab:b3:6b:b4:6f:4c:b1:bf:6b:d1:d1:56:a2:38:
aa:24:92:77:0f:7c:57:5c:5c:60:7a:d3:08:97:cd:
df:2d:06:e3:3e:91:4f:02:69:f7:d7:d4:f6:44:4a:
9d:7e:b9:76:77:aa:4c:dc:bb:02:50:d3:fb:4a:1b:
f4:7a:74:18:95:4a:f6:97:66:69:36:42:b8:a1:84:
9b:50:e2:5e:cd:d8:1c:a9:03:6f:03:19:87:f6:23:
69:72:25:30:f5:f3:00:5b:b4:d4:ca:13:3c:6f:52:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:00:4E:49:6D:99:67:2A:89:31:F4:52:B5:C5:A3:2B:74:BF:7A:FA
X509v3 Authority Key Identifier:
keyid:AC:4C:9B:4C:9F:FE:7B:E1:09:34:81:E4:59:E7:3B:41:1E:7E:1C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEybTJ_-e-EJNIHkWec7QR5-HDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/BABOSW2ZZyqJMfRStcWjK3S_evo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/18fecb-14a5-434b-bf15-c89e2798b7bd/1/rEybTJ_-e-EJNIHkWec7QR5-HDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7040::/29
Signature Algorithm: sha256WithRSAEncryption
19:f0:e6:c2:0c:ff:19:53:4e:e4:04:8d:c8:ce:34:89:a7:0d:
5f:31:0d:70:99:05:28:2c:85:4e:d0:8c:5c:8a:1a:82:37:88:
f3:de:b9:69:3a:0c:7b:b0:8e:20:fe:d4:81:26:d8:e2:31:c1:
ba:c5:40:cd:90:3f:82:2d:f6:65:4e:c0:0f:78:6e:0b:a3:c1:
8a:14:25:fc:01:ee:62:40:f9:49:9f:ba:64:96:2c:6d:68:20:
43:4d:f7:b0:8e:ac:58:25:f1:6a:21:39:c6:bf:23:9f:31:ba:
74:bb:2b:64:19:d4:b4:ec:1f:83:b3:36:84:2b:b2:96:59:2f:
f3:51:c4:fc:f9:cc:b6:d0:e0:3b:f5:fa:77:6f:71:ec:27:73:
f7:ea:be:45:a6:6b:30:e3:04:39:1c:a4:08:17:62:73:ba:ab:
02:43:92:36:cb:30:1f:d5:0f:f3:4e:b2:b1:81:89:70:fa:d3:
91:99:55:5b:84:51:16:c8:8c:93:99:d9:87:d9:6e:f0:e7:fd:
26:54:f0:3e:7e:ca:69:5f:02:8a:22:c2:a5:27:b5:0e:27:d5:
c2:5a:d9:a3:50:f9:99:fb:7f:23:3a:4a:d4:f9:96:62:ca:bd:
63:17:c5:f4:b9:c6:17:79:e7:93:18:72:af:fa:98:57:f7:39:
93:7a:14:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:31 2024 by rpki-client on console-fra.rpki-client.org