Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/rXH0FWGcJjQbvcYp6VkUC1rEMcM.roa
File: rXH0FWGcJjQbvcYp6VkUC1rEMcM.roa (raw, json)
Hash identifier: SIQY/ld4hFnHuBhQ+vF6vdg8BNpQXyLWLbcdevIRuzY=
Subject key identifier: AD:71:F4:15:61:9C:26:34:1B:BD:C6:29:E9:59:14:0B:5A:C4:31:C3
Certificate issuer: /CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Certificate serial: 018570302B6B1E69F9148BE306867561B9C0
Authority key identifier: C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/rXH0FWGcJjQbvcYp6VkUC1rEMcM.roa
Signing time: Mon 02 Jan 2023 01:54:43 +0000
ROA not before: Mon 02 Jan 2023 01:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204790
IP address blocks: 2a11:9300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:2b:6b:1e:69:f9:14:8b:e3:06:86:75:61:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ffaf8ccae3639d9748dddcb833cd088938a901
Validity
Not Before: Jan 2 01:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad71f415619c26341bbdc629e959140b5ac431c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:91:55:43:26:4d:0c:3e:a8:a7:18:fb:11:72:
32:e8:e3:7d:ea:26:38:9e:62:b4:d2:df:3b:8d:31:
e4:ba:a4:c7:40:27:cb:c7:95:16:f3:ac:4f:5c:f5:
18:c3:10:1d:fd:f9:6b:eb:a6:3d:4c:dd:a0:25:32:
73:69:a6:22:4f:38:f8:39:c6:eb:e6:29:79:b8:d7:
a9:5c:01:06:2a:11:64:6d:bb:d5:87:8e:f3:2e:3a:
bf:86:e1:4f:9c:53:39:ff:da:43:20:52:06:82:06:
c0:95:ac:02:87:71:1a:48:44:e1:63:14:d4:24:b8:
4a:bf:38:20:ba:4c:c5:c3:9f:f8:4c:9e:32:12:d3:
23:56:6e:65:23:02:f0:57:f7:46:03:8e:f2:6f:c9:
b3:b1:87:b4:3e:6f:04:2b:7b:ea:c7:6a:08:5e:db:
94:ed:ff:23:3b:f7:d8:15:dd:15:da:b8:8c:3d:94:
c5:21:b4:cf:11:b8:35:ff:63:21:71:c3:ec:90:10:
3f:32:5b:2c:99:36:3d:7f:4d:45:83:be:1e:ed:5c:
35:64:f2:8b:a2:15:bd:df:c4:8d:ab:b6:66:cf:7a:
ba:f3:84:e5:b4:29:47:54:ac:ff:41:eb:79:d1:24:
10:9f:45:b8:a8:2a:74:e4:0c:11:69:e1:42:d6:92:
d0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:F4:15:61:9C:26:34:1B:BD:C6:29:E9:59:14:0B:5A:C4:31:C3
X509v3 Authority Key Identifier:
keyid:C0:FF:AF:8C:CA:E3:63:9D:97:48:DD:DC:B8:33:CD:08:89:38:A9:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP-vjMrjY52XSN3cuDPNCIk4qQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/rXH0FWGcJjQbvcYp6VkUC1rEMcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20d30-0313-419c-8245-6efbc68c79f6/1/wP-vjMrjY52XSN3cuDPNCIk4qQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:9300::/29
Signature Algorithm: sha256WithRSAEncryption
17:29:d3:8c:23:d9:ef:ec:53:5e:c6:1a:26:bd:5b:1d:49:c0:
0c:e9:19:b9:a6:d8:4d:26:57:b5:0d:d7:4a:eb:54:3c:dd:51:
0f:3e:df:98:cb:7d:f8:d9:2a:7b:e3:66:60:f6:10:f6:88:fa:
ee:d2:3b:89:94:c2:bb:93:bf:2b:dc:3e:6f:bb:52:86:f8:d3:
4f:13:c9:d1:49:ce:e0:d2:0b:e7:c6:09:9b:53:38:0d:cd:7e:
ad:f7:04:a4:48:bc:73:b5:91:36:73:ff:b3:26:e8:13:b2:81:
d9:42:2d:35:11:22:37:03:fe:7d:6a:37:0d:6f:48:a0:12:5e:
26:4d:15:78:3a:0f:97:74:15:c5:68:ec:ab:14:c3:bb:94:00:
23:2a:a4:75:50:8e:06:5a:94:ec:5a:aa:6d:08:64:91:88:e3:
25:d5:7a:48:80:cb:48:eb:e7:e7:a4:d5:68:f1:b6:ae:a4:e1:
6d:3e:e0:1c:6a:fb:e4:8f:a9:98:1e:fe:ea:e7:91:7b:57:7e:
5e:c1:76:24:60:3b:5e:da:5f:25:3e:31:98:d2:e0:ba:e8:ea:
ee:08:c9:7a:5d:25:0a:46:ba:fc:6e:bd:f3:04:4b:70:5c:57:
94:91:d5:8b:8a:d1:72:7e:60:ea:ec:ae:63:b1:be:da:d9:2e:
4a:5d:2d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:30 2025 by rpki-client