Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/426ab9-ea35-477d-9a3a-e10c8a570b70/1/Fqd2rsZEiAOy689xKBesnwcI1fs.roa
File: Fqd2rsZEiAOy689xKBesnwcI1fs.roa (raw, json)
Hash identifier: NstTLQGwhoK3NyEFXROKbZYBHBAkd1HPjP8H8S+SF3w=
Subject key identifier: 16:A7:76:AE:C6:44:88:03:B2:EB:CF:71:28:17:AC:9F:07:08:D5:FB
Certificate issuer: /CN=bb9d4574a1473c54a60d6fabbe46025a0f1df800
Certificate serial: 020DADFD
Authority key identifier: BB:9D:45:74:A1:47:3C:54:A6:0D:6F:AB:BE:46:02:5A:0F:1D:F8:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u51FdKFHPFSmDW-rvkYCWg8d-AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/426ab9-ea35-477d-9a3a-e10c8a570b70/1/Fqd2rsZEiAOy689xKBesnwcI1fs.roa
Signing time: Sat 01 Jan 2022 08:03:47 +0000
ROA not before: Sat 01 Jan 2022 08:03:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44103
IP address blocks: 2a11::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34450941 (0x20dadfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9d4574a1473c54a60d6fabbe46025a0f1df800
Validity
Not Before: Jan 1 08:03:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16a776aec6448803b2ebcf712817ac9f0708d5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:2c:70:7d:0c:64:3b:3a:43:79:80:be:b6:
f4:8a:3a:46:41:a0:eb:cb:95:52:35:d7:68:08:06:
c8:78:d1:cb:3a:46:77:f7:37:77:1e:17:76:6c:06:
5d:9f:ba:17:72:1f:6c:e7:b1:88:98:0f:20:cc:ae:
1e:96:b1:ef:c3:e0:2e:52:d6:62:ba:e7:e8:67:43:
52:12:2f:c0:ef:d2:38:d9:6e:fb:95:d0:aa:a4:19:
2e:92:f1:86:73:a4:80:cc:07:6c:27:3f:71:c0:ac:
36:17:7e:e1:66:9d:86:68:fc:a1:5f:48:bf:75:d0:
6d:25:cd:4d:f6:8f:e5:2f:09:3b:9d:52:6f:53:99:
e7:f7:47:6e:42:53:57:5a:1b:7f:49:14:a9:d5:84:
76:5e:9a:8b:9f:61:e9:c0:3b:b7:16:29:61:32:08:
9b:0e:49:7a:62:b4:45:d8:56:cb:11:a0:f5:d2:b8:
7c:99:c8:31:7e:d0:21:41:0c:34:3a:c8:ea:f5:77:
7d:96:80:19:91:4f:a7:88:c1:68:cf:bd:88:07:c8:
5f:5c:bb:cb:0f:ac:dc:25:35:85:83:01:2f:5d:f2:
44:99:ec:f0:56:6e:6e:bf:c7:fb:83:77:6b:bd:e0:
7a:9e:d9:95:b6:1c:c1:d7:63:1d:9a:ff:2f:fb:93:
1b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A7:76:AE:C6:44:88:03:B2:EB:CF:71:28:17:AC:9F:07:08:D5:FB
X509v3 Authority Key Identifier:
keyid:BB:9D:45:74:A1:47:3C:54:A6:0D:6F:AB:BE:46:02:5A:0F:1D:F8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u51FdKFHPFSmDW-rvkYCWg8d-AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/426ab9-ea35-477d-9a3a-e10c8a570b70/1/Fqd2rsZEiAOy689xKBesnwcI1fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/426ab9-ea35-477d-9a3a-e10c8a570b70/1/u51FdKFHPFSmDW-rvkYCWg8d-AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/29
Signature Algorithm: sha256WithRSAEncryption
51:a4:f9:33:cf:d8:6f:df:f5:2f:2d:99:3f:4b:69:4e:02:a0:
4e:d2:81:0e:a0:22:98:43:24:84:bc:03:6a:19:a1:72:9f:66:
1b:ee:7d:b9:41:a2:bd:83:52:f9:b0:90:a4:54:28:06:de:91:
e4:9d:97:75:32:70:45:4e:f7:60:e8:94:b0:a3:da:b7:26:b8:
d0:b7:34:d4:1f:00:6d:df:49:ba:3a:89:8a:a0:27:cb:29:76:
34:96:eb:18:da:7e:59:5e:30:64:54:f1:13:b1:89:b2:26:e6:
fe:08:8c:15:0e:1d:c0:5d:ef:a3:fc:90:83:0d:d6:2a:94:0e:
8e:1a:6e:9a:b8:6f:34:95:ea:11:26:b3:d7:be:37:49:1c:ec:
4e:d5:94:28:b1:07:c0:55:bb:04:c0:61:12:2d:9e:b7:27:f6:
cf:45:5f:b8:79:79:a4:fd:1e:66:f2:fd:08:ee:00:03:30:c2:
fb:44:c2:0c:74:0c:1d:26:fa:d9:fe:6d:2b:69:c6:51:4f:c4:
60:dd:be:61:8c:99:dc:1c:05:78:63:42:7f:4e:27:c5:f7:e7:
60:75:3f:68:cf:8d:8d:9d:92:ee:10:dc:c5:97:02:28:89:0f:
2d:9b:f5:e4:a3:b2:eb:ae:35:11:6d:42:6f:9c:d2:2d:35:7f:
6d:db:31:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:09 2024 by rpki-client on console-ams.rpki-client.org