Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/kaY9R4GrkgmflDnpi4xGXMjol8k.roa
File: kaY9R4GrkgmflDnpi4xGXMjol8k.roa (raw, json)
Hash identifier: MxHElJS4Bw+xlnDI7WeIIEsJy2jg74qGBW7DG9JHmv8=
Subject key identifier: 91:A6:3D:47:81:AB:92:09:9F:94:39:E9:8B:8C:46:5C:C8:E8:97:C9
Certificate issuer: /CN=57b81833f364bc6425b4255b7ee33de0072200b3
Certificate serial: 018A92C0E6A321D75466EE8D705414306F54
Authority key identifier: 57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/kaY9R4GrkgmflDnpi4xGXMjol8k.roa
Signing time: Thu 14 Sep 2023 08:13:50 +0000
ROA not before: Thu 14 Sep 2023 08:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205227
IP address blocks: 2a11:58c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:c0:e6:a3:21:d7:54:66:ee:8d:70:54:14:30:6f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b81833f364bc6425b4255b7ee33de0072200b3
Validity
Not Before: Sep 14 08:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91a63d4781ab92099f9439e98b8c465cc8e897c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:39:58:1e:91:c6:03:af:5f:44:d6:6e:0a:
a4:df:38:14:b2:21:44:09:94:87:43:e1:d3:f1:5a:
ea:d0:0a:cb:f6:01:dd:62:e8:4c:22:da:aa:82:de:
92:23:3b:37:eb:e2:cb:d9:81:17:d1:c4:e8:a6:36:
8a:88:98:f0:60:0a:56:fd:01:a6:3b:34:d1:dd:5d:
7f:21:2d:c1:7a:32:84:21:83:20:2e:a3:d5:06:80:
ca:89:d1:8b:8f:3d:33:07:a1:60:b4:22:d4:90:cf:
d9:4a:e5:d4:a4:17:7d:19:d0:dd:28:61:77:2b:52:
c8:68:cf:3f:4f:35:23:5e:ae:58:4e:36:41:0a:fd:
58:fb:07:1e:5a:b8:e2:3d:85:9e:07:f8:c4:54:8f:
bd:6c:02:9c:17:23:5e:c1:45:37:cc:80:22:fe:85:
2b:b4:39:a1:44:15:14:8d:9a:2f:5b:ce:4b:ff:9f:
d2:cb:06:77:d1:75:ae:ed:74:04:69:cb:c5:fa:39:
1f:d0:fe:90:05:ed:64:37:0b:b7:12:53:72:1d:02:
24:4b:6c:9d:f3:c2:1b:49:32:c6:d3:09:9c:6d:67:
de:29:27:22:8a:7d:8a:0d:8f:d7:50:e3:4a:54:ee:
68:52:60:46:55:99:da:75:d1:4c:69:ac:2a:e4:89:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A6:3D:47:81:AB:92:09:9F:94:39:E9:8B:8C:46:5C:C8:E8:97:C9
X509v3 Authority Key Identifier:
keyid:57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/kaY9R4GrkgmflDnpi4xGXMjol8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:58c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:5c:55:66:78:08:9a:e8:37:6b:04:24:7a:b6:53:cb:7f:a5:
07:39:0a:02:05:28:d6:83:7e:ac:a0:6b:88:3d:f7:30:04:61:
63:1b:81:69:c1:10:4f:88:4b:ea:c9:e4:19:23:73:85:c5:c7:
56:45:45:32:a4:e4:d9:5e:5e:bf:d1:4d:52:eb:80:11:ea:9e:
aa:69:9a:cd:b0:f8:67:68:da:95:b7:48:76:1e:98:98:25:0d:
34:fb:1a:18:d4:a6:4a:9f:e2:ca:40:98:2d:fe:1e:d9:cc:d6:
4d:71:e5:70:46:3e:e2:77:74:4c:13:e4:ae:b3:6c:a9:97:c2:
b6:be:c4:be:39:e5:4c:a0:10:08:8b:f2:7a:2e:d9:ad:bb:95:
63:64:aa:a8:17:9c:dc:1e:5d:d2:1b:df:45:32:b0:c1:a8:df:
83:79:42:53:28:f9:13:57:87:e1:64:d9:14:04:26:3c:11:94:
84:67:63:f0:fc:7c:96:a0:9c:f0:f6:0e:1d:f9:d1:11:d7:86:
09:20:5d:4a:62:3d:9b:27:a1:a7:93:76:b0:c7:f1:3c:95:e9:
f6:c6:1a:77:45:1d:65:f3:53:6c:f4:8e:12:c0:af:6d:8b:ca:
d1:d5:f5:91:5d:d7:ea:a3:2b:5c:35:e5:e3:3d:60:72:f0:20:
e7:b8:8a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:00:07 2025 by rpki-client