Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/Zg3dZOCfxUIwbdW3eAFvA0C2URQ.roa
File: Zg3dZOCfxUIwbdW3eAFvA0C2URQ.roa (raw, json)
Hash identifier: vzqOMLnMUQFqDwmKdJ7F1QNoMLl43n2fl0bA9MXMv/8=
Subject key identifier: 66:0D:DD:64:E0:9F:C5:42:30:6D:D5:B7:78:01:6F:03:40:B6:51:14
Certificate issuer: /CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Certificate serial: 01840FB5A206B1E0F8C500771F1AB460FA42
Authority key identifier: 8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/Zg3dZOCfxUIwbdW3eAFvA0C2URQ.roa
Signing time: Tue 25 Oct 2022 15:14:32 +0000
ROA not before: Tue 25 Oct 2022 15:14:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 2a11:1940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0f:b5:a2:06:b1:e0:f8:c5:00:77:1f:1a:b4:60:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Validity
Not Before: Oct 25 15:14:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=660ddd64e09fc542306dd5b778016f0340b65114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:5a:8e:8f:c6:7b:38:a5:7b:e4:46:47:17:
6f:4c:2f:c1:05:64:9c:d8:8f:5c:d9:66:68:90:46:
2d:cf:ae:dc:f4:3b:1e:80:cd:22:2c:c6:61:1e:16:
58:05:98:19:b4:b4:d5:5d:1f:c0:be:fc:96:15:d0:
c7:92:bd:31:e9:49:60:15:87:e6:61:26:ae:ac:11:
5a:50:69:23:50:40:91:14:29:68:7a:95:14:c5:21:
4d:be:19:d5:fe:64:92:e1:4b:9d:93:43:e1:19:0e:
ac:3b:30:d1:fc:04:b0:b4:36:93:77:47:ff:a0:b9:
b0:e3:3b:2d:eb:ef:0f:c7:96:9f:ec:d2:1c:d4:1a:
63:32:59:9a:47:06:34:cd:91:b3:fe:f7:25:93:53:
30:a5:b9:42:29:5e:98:32:ff:69:1d:de:9e:ad:a7:
40:c4:7b:df:63:98:98:75:1d:e8:e4:b2:d8:dd:3c:
b1:f7:a5:30:7d:4d:7b:53:da:bb:76:e8:7c:84:d1:
e2:75:6b:2f:49:f3:19:93:ca:4d:5b:5f:68:a5:d0:
26:66:7a:f1:21:64:d3:77:3a:20:d5:e0:37:1c:86:
f3:ba:ef:b6:16:41:5a:ae:27:d1:fd:96:93:12:14:
9a:2a:04:f2:cd:f5:af:0c:40:c2:34:da:84:60:ad:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0D:DD:64:E0:9F:C5:42:30:6D:D5:B7:78:01:6F:03:40:B6:51:14
X509v3 Authority Key Identifier:
keyid:8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/Zg3dZOCfxUIwbdW3eAFvA0C2URQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1940::/29
Signature Algorithm: sha256WithRSAEncryption
0b:90:94:54:7b:5d:cf:6e:62:8b:03:ff:db:3c:f5:e0:3c:d9:
0e:95:5c:99:b7:ab:62:15:b9:e4:c4:e5:c2:03:0a:64:13:0a:
f8:79:b7:a7:11:b9:28:89:82:d7:7a:79:02:c1:cc:4c:e2:5e:
90:68:f6:3e:73:4b:2c:e8:f9:20:e2:2d:da:7c:1e:9e:34:7f:
e9:05:89:23:9d:e6:54:4b:e9:c4:2c:20:29:f0:13:72:c1:e9:
06:5e:28:d4:68:99:c2:99:b0:4a:26:64:74:9b:17:42:c1:a9:
5e:b9:a9:a3:6f:7f:92:8f:f6:ac:48:86:dd:b2:e5:31:c4:53:
e5:a4:70:1f:51:c7:fa:3d:40:24:70:43:c4:0b:aa:45:bd:40:
9f:82:27:9c:e2:df:e6:9c:c6:ab:e9:fc:3d:53:0a:57:e9:02:
2a:b3:c5:4c:35:67:27:88:fc:87:fe:6f:9c:03:d6:91:8e:4d:
3f:80:b7:4d:82:aa:d3:ee:53:60:0c:54:80:2c:4a:84:8f:c3:
61:c6:40:1e:dc:69:64:2d:b4:16:5c:0a:92:1d:26:4e:b0:ee:
28:e1:3a:3b:95:50:e0:fd:c0:16:ba:c4:f9:ed:9f:79:4c:92:
b6:bc:18:3f:ff:c1:de:4f:70:62:68:15:1d:30:81:78:6e:11:
ba:9e:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:26 2024 by rpki-client on console-fra.rpki-client.org