Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/1YHgQ2fmNG6-Vr0wwHX7R5mp6Jc.roa
File: 1YHgQ2fmNG6-Vr0wwHX7R5mp6Jc.roa (raw, json)
Hash identifier: s6+cRXNEDZe9YYUFRpeqS0DnWwA7spg5fr2EUfZxoWs=
Subject key identifier: D5:81:E0:43:67:E6:34:6E:BE:56:BD:30:C0:75:FB:47:99:A9:E8:97
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 0184E5BE105E132B1391807B82621EDF46EA
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/1YHgQ2fmNG6-Vr0wwHX7R5mp6Jc.roa
Signing time: Tue 06 Dec 2022 04:42:29 +0000
ROA not before: Tue 06 Dec 2022 04:42:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 2a12:f8c2:200::/40 maxlen: 40
2a12:f8c2:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e5:be:10:5e:13:2b:13:91:80:7b:82:62:1e:df:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Dec 6 04:42:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d581e04367e6346ebe56bd30c075fb4799a9e897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:e2:5a:60:62:47:96:91:a3:f9:c0:25:9f:
44:43:ec:63:5c:e8:a9:39:ab:cf:e2:59:bf:79:24:
d1:d8:f2:61:8e:7f:66:e9:2e:8f:b5:6a:30:7e:8b:
4a:65:84:35:62:5d:af:86:c1:e9:dd:7f:0f:a5:18:
3b:35:b1:f9:69:20:78:72:4a:94:72:a1:51:a4:cc:
a2:f7:3c:7a:77:77:7a:e4:11:0a:ae:a3:9c:46:2b:
f2:09:3b:e5:ba:ab:90:51:c9:d5:5d:7b:b5:57:5a:
0c:5c:c5:e5:cb:bc:f2:51:71:65:75:a7:44:48:f7:
fc:3a:d3:3a:55:23:b3:85:55:90:7d:c0:e0:82:f1:
4a:d2:62:a4:99:64:dc:db:28:f0:18:ed:ef:4a:0d:
e2:96:72:a5:fc:ab:69:5a:e8:89:ae:28:e3:84:0d:
9c:28:68:53:2e:2e:a3:b4:44:ae:6d:f1:aa:6b:ce:
73:bb:2d:ac:28:33:66:f0:20:4e:71:8b:b4:f4:63:
24:ee:45:4e:13:3f:4c:d3:86:c4:00:d8:c1:3d:08:
ef:a0:fd:c7:be:e4:d8:d6:80:4b:6d:58:5f:48:e4:
c8:74:63:27:f2:42:9a:c8:ea:2b:36:fc:60:d5:e6:
b3:c1:a2:8c:7e:77:a6:86:67:26:87:17:c8:a6:e6:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:E0:43:67:E6:34:6E:BE:56:BD:30:C0:75:FB:47:99:A9:E8:97
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/1YHgQ2fmNG6-Vr0wwHX7R5mp6Jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c2:200::/39
Signature Algorithm: sha256WithRSAEncryption
77:26:43:b8:aa:03:ec:21:7e:d2:a4:a5:eb:d8:49:dc:09:37:
11:9c:95:e8:ab:9c:4e:97:41:f6:05:2c:38:64:bb:e9:b9:20:
ac:3d:d0:af:61:8a:bb:1e:b9:91:72:36:dd:5c:bb:f7:67:c5:
9f:c7:80:59:21:ef:9b:f9:50:4b:3f:37:4c:be:8e:18:02:71:
2b:d3:c1:8d:f8:1b:5a:21:25:6b:70:56:7c:f1:84:e5:4d:26:
02:c2:39:ca:38:ae:36:6d:20:e2:7e:84:55:bd:dd:a1:4e:bd:
33:f2:25:e3:ab:f5:55:10:29:a0:97:c3:ba:ef:0a:f4:cd:06:
9c:0a:73:ff:22:30:48:b6:d1:06:a4:07:5f:86:4b:c4:b1:02:
be:04:3a:cf:be:75:26:23:c1:31:27:70:2a:96:66:93:f9:1a:
9c:78:d5:63:a0:a9:d1:07:6e:0c:27:98:a5:8f:98:8d:33:69:
2d:0a:a8:a4:3e:39:06:d8:1e:ac:8e:15:b6:87:56:e1:8b:2d:
b1:64:b7:1c:fa:95:f8:48:a3:bd:ff:5a:23:9b:05:b3:02:e1:
e4:69:55:0b:d6:df:2e:ae:47:fb:4c:c7:a8:d4:14:ba:7b:6b:
b6:f6:26:21:1d:1a:a0:ea:56:25:20:cd:e0:fc:82:bc:4d:7c:
93:b5:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:09 2025 by rpki-client