Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/rWwssRdRzYaHzThGUwDTu25K99A.roa
File: rWwssRdRzYaHzThGUwDTu25K99A.roa (raw, json)
Hash identifier: SzW/pBrmm/mxmh8zR5ivfdlIpLx1oHD2h0Qy+3eKgi0=
Subject key identifier: AD:6C:2C:B1:17:51:CD:86:87:CD:38:46:53:00:D3:BB:6E:4A:F7:D0
Certificate issuer: /CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Certificate serial: 018606B98882809893058E8D3C65E16A20CE
Authority key identifier: 8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/rWwssRdRzYaHzThGUwDTu25K99A.roa
Signing time: Tue 31 Jan 2023 07:27:47 +0000
ROA not before: Tue 31 Jan 2023 07:27:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 2a11:1940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:b9:88:82:80:98:93:05:8e:8d:3c:65:e1:6a:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5c18bfb9a5395dceab8cdd58bf1a6b993b1bd0
Validity
Not Before: Jan 31 07:27:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad6c2cb11751cd8687cd38465300d3bb6e4af7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c6:f6:85:9e:83:e3:57:d6:4f:0f:28:75:f5:
1f:dc:22:48:26:52:af:d0:63:2d:06:66:9c:3e:a1:
9a:f4:6c:75:1a:31:cd:19:f9:d4:dc:12:8e:40:68:
af:40:51:0d:72:13:ed:be:0c:c8:fc:1f:c4:6e:48:
ee:aa:6b:aa:ea:50:95:9e:c7:0d:45:40:43:0d:b7:
73:a1:f3:3a:31:cb:55:ee:3f:32:8b:26:c6:6c:08:
64:a2:dc:dc:cf:f5:0e:77:f1:eb:01:38:d9:fa:5a:
ba:23:ae:a0:fa:f5:a0:be:5d:ac:5e:8a:87:a0:92:
82:74:e4:55:57:c9:9b:34:5f:b1:eb:66:3e:ef:36:
17:84:ca:75:70:2c:f3:ce:7a:75:63:39:db:31:00:
1e:01:70:4d:c5:bb:8e:d4:9d:33:0e:15:9e:b6:db:
9f:e6:8e:19:8a:ec:7d:ed:de:68:a3:44:96:cb:c1:
f2:99:77:69:69:68:83:0d:59:c1:79:16:cf:45:a6:
e0:fd:71:f0:e6:fd:eb:22:af:5c:28:50:5a:ee:4b:
8d:1a:aa:80:3b:3b:31:35:9d:25:4d:20:45:70:ee:
07:07:f8:b2:23:c1:d6:a7:30:6b:cf:95:11:6b:f7:
b9:4a:38:2e:1c:d1:dd:7c:94:78:61:bd:06:00:c2:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6C:2C:B1:17:51:CD:86:87:CD:38:46:53:00:D3:BB:6E:4A:F7:D0
X509v3 Authority Key Identifier:
keyid:8E:5C:18:BF:B9:A5:39:5D:CE:AB:8C:DD:58:BF:1A:6B:99:3B:1B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/rWwssRdRzYaHzThGUwDTu25K99A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa4f40-d4a2-4a40-bac4-46610094ef9c/1/jlwYv7mlOV3Oq4zdWL8aa5k7G9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1940::/29
Signature Algorithm: sha256WithRSAEncryption
7f:ee:21:16:7e:31:66:78:e7:01:43:7c:6a:6e:75:c7:bf:dc:
1e:46:1c:81:2b:6f:08:90:2c:db:02:39:e9:e7:3c:22:a4:ab:
27:df:ea:2f:84:9c:f1:8c:52:6d:b1:00:fe:36:35:fe:df:c8:
f2:f1:c5:e5:f9:4a:89:d6:c2:83:7d:64:e2:7d:b8:4e:9b:10:
ed:4e:89:0e:aa:95:4f:ad:04:6c:77:2c:18:78:a2:2c:18:a3:
22:1b:06:8e:09:9c:45:e4:66:d6:f8:33:45:ab:82:b3:f6:5e:
d3:84:00:78:a9:4c:46:11:e2:b8:dc:de:fc:e2:40:77:ee:a1:
1a:1f:f8:a2:04:85:21:65:7c:fa:7f:de:de:3d:59:a4:28:61:
87:e2:b6:37:65:c1:63:69:3e:4b:44:93:30:ac:f4:61:66:fb:
37:88:d3:7e:86:5b:75:d6:76:49:c2:39:44:6d:6d:af:60:46:
66:d5:57:c3:7b:a6:87:8a:8f:0f:c2:fe:31:4a:00:79:1b:86:
fd:f8:cb:7a:2b:6e:98:fc:66:f2:81:14:73:05:44:b5:22:d4:
1a:e2:1e:3a:76:15:42:d1:e5:02:e0:2b:13:8c:32:4d:de:9a:
22:ac:24:34:34:af:53:9b:91:31:8d:df:cd:8a:3d:06:8b:38:
b6:fc:94:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:20 2024 by rpki-client on console-ams.rpki-client.org