Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/eoYgcYCNOx7yzCefFQ4QR7fZps8.roa
File: eoYgcYCNOx7yzCefFQ4QR7fZps8.roa (raw, json)
Hash identifier: l7pCMWuWG7G8xHZYFo7CQK2vJS4TgOZhXHHs057TXHs=
Subject key identifier: 7A:86:20:71:80:8D:3B:1E:F2:CC:27:9F:15:0E:10:47:B7:D9:A6:CF
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 0193038C870180D7F8D74A3DC9E911138B5F
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/eoYgcYCNOx7yzCefFQ4QR7fZps8.roa
Signing time: Wed 06 Nov 2024 22:16:01 +0000
ROA not before: Wed 06 Nov 2024 22:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20649
IP address blocks: 2a11:1800::/32 maxlen: 32
2a11:1801::/32 maxlen: 32
2a11:1802::/32 maxlen: 32
2a11:1803::/32 maxlen: 32
2a11:1804::/32 maxlen: 32
2a11:1805::/32 maxlen: 32
2a11:1806::/32 maxlen: 32
2a11:1807::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:03:8c:87:01:80:d7:f8:d7:4a:3d:c9:e9:11:13:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Nov 6 22:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a862071808d3b1ef2cc279f150e1047b7d9a6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:b1:2c:52:ab:2a:31:4e:67:79:17:3b:96:
8b:c7:91:cb:58:e2:50:2f:2d:2e:c9:d2:07:da:b1:
82:50:af:3b:42:d5:3e:7a:4c:da:d0:09:d1:17:9f:
6f:b6:1f:ea:db:49:bf:db:af:40:25:0b:cf:62:2f:
a0:6c:60:06:26:52:e2:32:3f:57:07:7c:09:12:54:
2b:46:34:a6:94:a9:a7:65:65:f3:98:2c:8c:d0:11:
93:98:a9:dd:ee:cf:c1:5c:a0:e3:40:a5:4b:65:00:
38:4a:4c:a2:39:ba:3d:96:d3:a6:6d:c5:b1:72:5c:
b4:10:04:4f:8b:a8:aa:4d:db:aa:06:7c:14:e4:e1:
8c:8d:8b:3b:7c:3f:01:5f:a4:32:03:94:26:e0:3e:
58:18:a4:0d:da:37:18:d3:92:0d:40:0f:d5:ca:3b:
50:ec:03:d3:d6:06:13:66:3e:0b:ac:9a:18:a2:a9:
28:bd:97:34:91:4f:0d:97:76:2b:24:72:8b:57:44:
a1:6b:49:01:f5:dd:95:f3:d7:8b:17:0e:65:b9:23:
1e:b3:5b:26:9e:4b:c2:75:fd:7a:88:1a:e4:61:ab:
f0:88:76:eb:6a:f2:96:c0:d0:cb:1b:14:42:c6:5b:
01:c6:6b:91:f4:9f:f2:11:aa:39:73:78:35:32:98:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:20:71:80:8D:3B:1E:F2:CC:27:9F:15:0E:10:47:B7:D9:A6:CF
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/eoYgcYCNOx7yzCefFQ4QR7fZps8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1800::/29
Signature Algorithm: sha256WithRSAEncryption
41:9f:07:6b:32:f8:7a:0c:af:14:3e:67:0c:0a:57:15:ae:86:
dc:7d:e3:92:94:53:a5:50:43:56:5e:6a:ac:c8:4f:27:0d:2d:
1f:21:4e:02:18:8d:7a:24:cb:bd:6f:f5:cb:d5:94:0f:e5:2f:
80:fd:1c:ce:99:89:35:60:4f:9f:5a:af:17:cc:19:cb:45:0e:
a5:ab:5a:51:10:af:73:63:a6:be:b8:0f:8d:79:f1:11:bb:da:
29:48:09:63:ea:b5:04:ff:0a:09:94:7b:23:32:36:2b:94:8a:
54:c0:ce:e0:cb:a1:20:e1:79:79:44:d3:8e:5a:0a:3f:15:82:
00:e5:b7:a5:4b:71:6c:5a:54:03:41:1f:5d:51:b3:0e:51:97:
e0:0e:b8:0c:3b:86:26:71:1a:ac:e7:33:74:f8:7b:ac:78:ee:
42:1b:63:6c:fc:3f:52:a9:dc:99:62:6f:dd:13:35:8e:5d:a9:
46:9d:90:fc:75:db:ee:71:68:7c:a7:7b:e9:7d:34:9a:5e:a7:
cc:7a:6b:08:31:35:7b:b0:ca:8c:e1:e3:3b:25:af:e4:3f:97:
26:e7:98:70:45:b0:45:57:b8:4e:ea:21:5e:82:eb:98:cf:77:
d7:95:51:38:2e:68:5e:f1:a2:41:e8:77:60:01:37:fc:8d:e3:
40:fe:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:28 2024 by rpki-client on console.sobornost.net