Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/56rsoqKUGpKsdXk6D5rarEfHa6A.roa
File: 56rsoqKUGpKsdXk6D5rarEfHa6A.roa (raw, json)
Hash identifier: 2KHNcIPDcB6yD1EJ+fHJ0uDrxqieEfDa2bvRmqsnpCQ=
Subject key identifier: E7:AA:EC:A2:A2:94:1A:92:AC:75:79:3A:0F:9A:DA:AC:47:C7:6B:A0
Certificate issuer: /CN=b192bf0a867a04a0b607687ae90c447ae62513a1
Certificate serial: 01856F26FA9E136B4BA6751861A4BD13258F
Authority key identifier: B1:92:BF:0A:86:7A:04:A0:B6:07:68:7A:E9:0C:44:7A:E6:25:13:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZK_CoZ6BKC2B2h66QxEeuYlE6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/56rsoqKUGpKsdXk6D5rarEfHa6A.roa
Signing time: Sun 01 Jan 2023 21:05:03 +0000
ROA not before: Sun 01 Jan 2023 21:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210661
IP address blocks: 2a11:7ac0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:fa:9e:13:6b:4b:a6:75:18:61:a4:bd:13:25:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b192bf0a867a04a0b607687ae90c447ae62513a1
Validity
Not Before: Jan 1 21:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7aaeca2a2941a92ac75793a0f9adaac47c76ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:e3:40:f3:76:45:94:8b:4c:80:1c:3c:07:
e0:23:36:d0:9d:e7:e0:56:48:5a:3d:98:a4:9a:cb:
9e:11:92:84:5c:84:23:a7:fc:88:91:d0:1e:6b:d3:
66:a0:f5:e9:06:ec:df:5d:b4:a3:38:09:90:48:25:
38:84:7d:95:36:46:0b:86:2b:48:24:eb:44:90:09:
88:2a:4b:b5:e0:bc:f4:97:60:f6:13:16:16:74:d0:
e0:73:db:8c:bf:3d:11:bb:10:c3:01:48:02:61:b3:
b7:03:d4:6e:88:82:72:60:96:e0:42:00:87:d2:52:
3c:09:c8:27:25:e3:5c:c4:14:5d:13:6d:a1:95:a9:
1d:59:a5:f5:c5:06:6e:c3:f3:2b:42:fc:97:31:31:
5b:21:b2:99:cf:32:f7:7c:5d:6e:a8:5c:70:ab:a5:
3a:b5:ea:65:50:d2:21:e7:e5:4a:bd:56:f2:20:e4:
6e:d6:48:4f:df:7f:d5:66:90:4c:d7:16:09:fa:76:
3c:31:d2:f5:9b:25:f4:ff:00:c7:59:28:4a:3d:24:
04:1f:af:a6:ff:f0:90:44:d0:22:a0:74:4e:2e:45:
8b:ff:96:e8:b0:8a:e3:d9:6b:7e:64:84:78:7a:d1:
58:bf:46:07:68:c8:b4:a7:05:97:a1:8f:7e:44:fd:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AA:EC:A2:A2:94:1A:92:AC:75:79:3A:0F:9A:DA:AC:47:C7:6B:A0
X509v3 Authority Key Identifier:
keyid:B1:92:BF:0A:86:7A:04:A0:B6:07:68:7A:E9:0C:44:7A:E6:25:13:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZK_CoZ6BKC2B2h66QxEeuYlE6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/56rsoqKUGpKsdXk6D5rarEfHa6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/74ce46-dda5-419d-b64a-9b67bd835ba8/1/sZK_CoZ6BKC2B2h66QxEeuYlE6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7ac0::/29
Signature Algorithm: sha256WithRSAEncryption
d2:44:46:c2:71:1f:e7:7f:4b:28:c0:ea:ec:1a:c3:47:9d:c2:
71:da:ab:f8:7f:f7:94:b9:9a:b4:93:d2:b0:33:c4:73:f8:03:
ba:b9:1c:85:eb:21:6a:ae:cf:dc:32:1d:a5:97:7f:4b:61:62:
e9:26:14:ba:c7:93:33:a0:b1:5a:cd:ad:e8:31:71:3e:6f:e9:
b6:78:f9:18:62:31:98:2f:41:05:bd:5c:9a:34:bb:7c:52:86:
ae:71:56:3d:2b:17:40:16:0c:56:57:8a:d0:23:d5:ac:bc:98:
7c:97:cb:e9:42:ed:29:c3:ec:7a:b1:e1:b4:2b:25:50:00:9b:
95:e3:a4:6e:1a:81:53:3b:71:89:9b:4a:1a:a2:d6:e4:27:21:
13:f9:84:a8:7a:f0:96:7d:6b:e8:c5:14:8c:03:29:df:22:26:
5f:a4:f8:e4:e1:48:53:74:65:9a:8f:05:0c:2c:a0:1d:3b:cc:
e2:0e:ff:88:2e:38:2c:15:a4:9a:b6:80:bc:75:42:48:76:80:
1d:37:cc:56:bb:5a:d1:63:78:22:76:e8:29:e2:07:43:1e:ba:
25:42:9b:b6:18:05:45:56:d4:1c:5c:cd:dc:69:3c:2d:25:1b:
ee:7d:75:17:5e:63:81:45:bd:66:24:51:e3:3b:2e:23:4f:82:
f7:a0:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:20 2024 by rpki-client on console-fra.rpki-client.org