Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/tArmHRsIzg4DYR6JD2lEsrR_7T0.roa
File: tArmHRsIzg4DYR6JD2lEsrR_7T0.roa (raw, json)
Hash identifier: mIhXX6ezJXkJHnD5YBpfwTEGWYp+mnQS4GKXtZphrRA=
Subject key identifier: B4:0A:E6:1D:1B:08:CE:0E:03:61:1E:89:0F:69:44:B2:B4:7F:ED:3D
Certificate issuer: /CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Certificate serial: 018486C05D30DD362132E7D6F76A7A8EA8CE
Authority key identifier: 48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/tArmHRsIzg4DYR6JD2lEsrR_7T0.roa
Signing time: Thu 17 Nov 2022 18:01:04 +0000
ROA not before: Thu 17 Nov 2022 18:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a11:5940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:c0:5d:30:dd:36:21:32:e7:d6:f7:6a:7a:8e:a8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Validity
Not Before: Nov 17 18:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b40ae61d1b08ce0e03611e890f6944b2b47fed3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:be:7b:1f:fb:40:bd:6c:98:43:5a:33:c6:0e:
a2:df:30:aa:32:89:4a:30:bf:63:41:c8:8e:c0:2b:
c5:5f:de:9e:f8:83:13:80:85:d6:2b:b3:d1:ea:0b:
44:34:c8:6c:06:20:33:51:a9:59:8b:bd:cd:a2:47:
65:4c:8d:3b:d6:21:9c:0d:b0:96:09:d2:aa:4c:2f:
76:71:de:f2:71:36:9f:7d:ea:73:a2:38:0b:0d:c6:
1c:f0:91:bf:01:1d:fa:e0:06:fc:00:40:e9:56:3c:
81:0c:b1:eb:24:4b:e6:95:b9:64:a2:a9:df:21:95:
ea:ef:61:bc:40:d1:56:6a:25:77:36:90:79:0d:db:
b9:c2:de:8a:a3:f0:9d:44:ad:d5:6e:9c:4c:43:26:
ec:77:98:da:f4:14:0a:7e:f0:8c:8c:5c:fd:35:c5:
14:6f:7f:c3:47:88:fe:15:01:24:19:4c:0d:b0:93:
22:14:10:4d:9c:de:82:8e:8b:8e:21:8c:53:ae:38:
92:66:b5:7d:24:c2:d6:fe:3a:cd:1b:0a:c2:e2:bd:
a4:dc:10:7b:53:f3:14:38:b0:25:a0:af:b3:9f:04:
96:0a:c8:d0:61:7d:ee:b0:e5:4f:fc:9b:f7:b4:1d:
04:c8:c9:bb:32:66:8c:de:bb:83:4f:78:37:cf:60:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0A:E6:1D:1B:08:CE:0E:03:61:1E:89:0F:69:44:B2:B4:7F:ED:3D
X509v3 Authority Key Identifier:
keyid:48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/tArmHRsIzg4DYR6JD2lEsrR_7T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/SK2Gz_EWcKs8aai24FBANzOqMO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5940::/29
Signature Algorithm: sha256WithRSAEncryption
54:d4:3f:a9:cf:4c:94:15:cd:f7:56:80:9c:99:ff:34:6e:60:
ef:d6:48:c4:e3:31:65:42:99:25:ea:f3:99:6b:5e:8a:d2:fe:
c4:3b:52:22:2a:0b:77:fa:b6:94:91:4e:05:93:fc:c6:f0:c5:
60:b0:00:e3:f9:31:b9:50:31:2e:2b:6e:88:18:81:8e:61:60:
92:5c:5d:f9:ec:f6:ef:19:53:c2:99:4c:9e:83:e4:db:58:c0:
3e:10:02:cc:fe:bb:94:66:76:5a:cc:b4:48:07:c4:88:2b:21:
23:8d:9c:9d:4c:d8:ee:80:79:c5:79:98:34:f8:f7:50:61:0b:
46:51:02:ee:f5:3a:15:92:4b:7e:2f:5a:9c:d8:0c:bb:14:19:
5c:58:74:c2:9b:d4:0b:da:ab:fd:71:5e:9c:d3:67:d0:9c:98:
21:cc:3c:f3:7e:99:e8:87:96:86:81:f3:98:f3:42:23:b2:2a:
27:43:38:c9:67:04:d6:6b:db:bc:51:4f:32:b8:aa:a3:d6:0c:
e7:9f:b4:33:cd:c1:7b:5c:80:57:9d:41:94:f9:1d:10:63:1e:
bc:da:9b:4d:dd:ed:16:bf:fd:68:07:ff:97:ad:da:ea:e5:0b:
fc:74:4d:52:9d:c6:b9:2c:8b:9c:b5:d1:39:14:ce:9d:f5:e3:
5b:9e:80:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:16:41 2025 by rpki-client