Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vYq6iuYa3kXX7xqSl3PfahC6N_0.roa
File: vYq6iuYa3kXX7xqSl3PfahC6N_0.roa (raw, json)
Hash identifier: Uct5ivlLaGByjv0hNYunZdyFrV5Gnv75E7IrH1a0VuA=
Subject key identifier: BD:8A:BA:8A:E6:1A:DE:45:D7:EF:1A:92:97:73:DF:6A:10:BA:37:FD
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0193A7C540A45BBAEC6D78FF27D7561252E1
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vYq6iuYa3kXX7xqSl3PfahC6N_0.roa
Signing time: Sun 08 Dec 2024 19:35:42 +0000
ROA not before: Sun 08 Dec 2024 19:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214168
IP address blocks: 2a11:4540::/29 maxlen: 29
2a11:7b00::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a12:8580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a7:c5:40:a4:5b:ba:ec:6d:78:ff:27:d7:56:12:52:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Dec 8 19:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd8aba8ae61ade45d7ef1a929773df6a10ba37fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:3e:aa:de:bf:04:2a:be:76:3b:a9:21:5f:
47:5a:51:14:05:ec:79:d2:fe:85:a2:39:c3:41:0e:
78:05:56:93:91:2e:a7:52:28:64:c4:f1:61:a4:7e:
33:1e:ec:6c:ea:84:5c:ef:87:5b:71:cb:2e:d1:42:
0c:f1:9b:fd:33:89:89:0b:7c:d5:1b:0d:c7:1a:82:
dc:19:de:02:5c:94:be:2e:00:bb:e0:a4:ed:ae:64:
cd:78:76:a2:e6:75:9f:a5:ee:f3:b8:0e:86:18:2a:
17:26:54:72:13:e4:54:e0:7c:e9:c9:8a:fd:10:97:
20:7f:97:28:0c:08:e3:8b:e9:6f:11:80:d0:df:cf:
ae:e2:e0:1c:fc:1b:07:bc:09:7e:d8:dc:4a:70:6b:
21:70:53:b6:a1:ae:66:d5:aa:21:66:f8:46:df:66:
fd:7f:00:fa:ec:a2:03:cb:bb:2f:43:e9:48:f8:15:
dc:65:0c:36:cf:5e:dd:34:3f:0c:93:40:84:fc:9d:
e0:23:81:54:77:18:83:5c:8c:c5:f0:27:64:99:7d:
a3:83:74:f8:f2:df:9a:4f:4b:6d:a9:6b:e6:c1:93:
be:f6:6b:54:fb:5f:3c:80:4b:67:54:f9:ec:37:a5:
29:e8:de:4d:fe:a9:89:96:ee:ba:7a:c4:01:3a:78:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:BA:8A:E6:1A:DE:45:D7:EF:1A:92:97:73:DF:6A:10:BA:37:FD
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/vYq6iuYa3kXX7xqSl3PfahC6N_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4540::/29
2a11:7b00::/29
2a11:8740::/29
2a11:bbc0::/29
2a12:8580::/29
Signature Algorithm: sha256WithRSAEncryption
38:1e:0b:04:91:96:89:c4:44:9c:4a:75:2a:38:8e:e1:98:02:
d6:e5:fa:6b:6d:bb:9e:5a:b3:c4:04:17:b8:9a:81:af:c3:23:
a3:55:f4:7d:e6:24:88:44:d4:26:2a:36:7b:41:5b:de:60:99:
4d:cb:f6:fb:6b:ce:b6:77:14:33:4f:0d:f7:98:22:90:a5:6c:
57:13:2d:a4:eb:8f:01:17:c2:7e:0a:dc:bc:d5:a9:e1:0f:95:
b3:a7:23:fe:5f:a9:22:d2:98:a3:84:a3:4c:be:65:12:dc:e2:
51:20:f8:10:94:22:01:79:bb:34:cb:a6:e5:3c:8c:8a:97:77:
01:3d:9a:35:db:16:6a:54:5c:ba:71:6c:b5:fd:a6:0c:c7:f8:
b4:f1:b7:00:32:4c:b6:02:d5:e7:b1:70:f7:e3:eb:1f:7e:1d:
45:f8:9a:a7:67:d8:42:1f:a1:91:4b:26:cb:14:d0:a2:ae:fb:
00:c1:8f:0c:ff:c8:68:f6:ed:d1:7f:10:cd:ca:60:04:94:d4:
46:d1:44:c4:da:4e:8a:5f:ad:7c:57:62:d2:4a:90:e1:ff:61:
f4:81:b3:20:43:3f:8c:ad:d1:17:99:01:01:7c:07:49:e6:85:
4b:45:8a:06:5b:a3:b7:ec:e8:83:ce:bb:61:81:30:59:4d:85:
31:0e:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 24 21:25:05 2024 by rpki-client on console.sobornost.net