Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/KhxBvvgu6wBIELDyqpWc9MOx4U8.roa
File: KhxBvvgu6wBIELDyqpWc9MOx4U8.roa (raw, json)
Hash identifier: +ftzDnFsiIjoOAdrdTwwbbRBB+jOcIBHNmBna4LJy2w=
Subject key identifier: 2A:1C:41:BE:F8:2E:EB:00:48:10:B0:F2:AA:95:9C:F4:C3:B1:E1:4F
Certificate issuer: /CN=f998035895f95549c2cdaac3f005446cbdd11c02
Certificate serial: 078F542B
Authority key identifier: F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/KhxBvvgu6wBIELDyqpWc9MOx4U8.roa
Signing time: Sat 01 Jan 2022 06:03:31 +0000
ROA not before: Sat 01 Jan 2022 06:03:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201963
IP address blocks: 2a0e:fcc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126833707 (0x78f542b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f998035895f95549c2cdaac3f005446cbdd11c02
Validity
Not Before: Jan 1 06:03:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a1c41bef82eeb004810b0f2aa959cf4c3b1e14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:4a:02:9c:a7:0a:3f:17:50:3b:5a:d3:43:
86:45:75:94:7b:7c:4d:72:57:b8:de:9c:28:3f:42:
a5:d2:ec:98:8a:ca:f1:21:f6:5f:9c:b9:c5:f3:15:
71:a8:4e:30:e2:4d:02:1e:32:fa:82:fb:71:7f:5a:
89:f6:a6:b1:bc:09:fd:94:cd:b8:9d:5b:b4:b1:7c:
a0:27:f7:ee:43:da:27:50:85:b7:f5:cd:82:6a:8b:
69:05:d1:b8:12:4d:b7:d0:aa:75:dd:87:92:ad:be:
05:29:7d:9a:8d:f6:96:5e:e0:fe:ea:85:2c:b3:3f:
e3:c8:ff:46:ed:82:fe:eb:98:e5:4b:54:8c:12:d4:
12:7d:22:e1:a7:ab:06:e4:93:92:ba:5d:52:f9:a2:
a1:f4:11:2e:e4:1c:a6:30:79:a2:fe:7d:3c:80:29:
d3:9a:c7:1c:77:87:91:f6:4e:42:63:1b:91:6b:a0:
26:54:23:61:b3:6e:75:13:fc:ac:76:ac:55:81:0f:
80:97:de:d8:f9:da:85:03:0c:19:04:89:df:9c:a7:
9e:77:07:65:33:49:5c:5c:aa:99:47:63:25:fd:dc:
aa:7d:54:17:43:fe:bb:0a:3b:51:2f:60:05:21:d1:
6f:44:d9:07:f9:60:d2:cb:78:c5:07:e2:39:16:e2:
24:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1C:41:BE:F8:2E:EB:00:48:10:B0:F2:AA:95:9C:F4:C3:B1:E1:4F
X509v3 Authority Key Identifier:
keyid:F9:98:03:58:95:F9:55:49:C2:CD:AA:C3:F0:05:44:6C:BD:D1:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/KhxBvvgu6wBIELDyqpWc9MOx4U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87c3ee-d086-4559-90d4-f3ba9e7ec78f/1/1-ZgDWJX5VUnCzarD8AVEbL3RHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
90:93:82:ad:c9:db:9d:25:2f:bd:f3:2f:47:2c:ae:6b:e0:c5:
b2:e5:71:02:b0:04:06:49:e6:31:2f:85:2f:21:1d:58:4d:76:
37:4d:55:57:1c:5b:4e:f4:4b:fe:9a:df:e0:94:ad:19:9d:fc:
cb:ad:ed:93:c3:07:eb:a4:d4:cd:ca:99:98:93:67:77:a0:12:
20:30:ae:eb:d8:c1:5b:17:a7:43:19:13:cc:33:94:17:7c:22:
51:88:5f:8d:0a:72:ee:f9:9c:50:43:fc:a8:e6:53:8c:76:e0:
21:ec:ff:b5:07:ec:7f:82:ed:63:32:02:b2:4e:fd:2a:98:3b:
bc:54:a5:51:e8:15:89:93:ce:08:f9:89:b2:c9:88:97:7f:f4:
ce:2c:b5:cc:12:b1:93:3a:7b:4f:87:13:e4:44:5c:d8:70:d9:
30:cf:85:96:22:83:67:d1:48:e0:8e:47:10:94:c5:bb:79:72:
07:0c:ab:70:2e:a6:ad:50:8d:16:11:76:15:6f:21:4f:84:db:
92:51:10:c2:c6:95:26:3f:65:9c:d8:ee:5c:41:5c:ae:07:34:
5b:65:f2:e8:3d:31:5b:43:4f:87:b9:27:83:1b:31:a3:95:4a:
3e:c0:e2:17:7f:8a:54:8c:e3:dd:2d:ef:44:b0:d5:5d:ce:d1:
4b:67:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:01 2025 by rpki-client