Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/6b2QWo3Th9COjkTVODpRGKHqpoY.roa
File: 6b2QWo3Th9COjkTVODpRGKHqpoY.roa (raw, json)
Hash identifier: l8ds3SQdyT19BBEASIEkpVeA8ynC9G7fntu8rXauuj0=
Subject key identifier: E9:BD:90:5A:8D:D3:87:D0:8E:8E:44:D5:38:3A:51:18:A1:EA:A6:86
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01838731732AF6D95381B9BE048AE768E3E2
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/6b2QWo3Th9COjkTVODpRGKHqpoY.roa
Signing time: Thu 29 Sep 2022 03:01:48 +0000
ROA not before: Thu 29 Sep 2022 03:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 10111
IP address blocks: 2a12:f8c3::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:87:31:73:2a:f6:d9:53:81:b9:be:04:8a:e7:68:e3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Sep 29 03:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e9bd905a8dd387d08e8e44d5383a5118a1eaa686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:3b:ec:ff:e4:ae:9b:15:0b:5a:cc:80:b3:
75:19:ac:d6:ac:3f:6b:97:72:7e:1d:8e:10:59:52:
c0:09:8e:a0:b7:cb:11:51:d2:d0:72:7f:89:52:5a:
64:ca:8a:d5:22:b5:f8:c7:bf:78:c6:c0:2c:a5:bd:
fb:48:d7:83:b9:ea:c3:4b:76:bc:3f:32:c9:68:42:
1f:13:83:85:d8:bc:d3:71:82:e9:e9:dd:4f:22:e5:
55:a6:d3:7d:40:6c:c2:74:39:0b:8c:3e:a8:e7:6b:
7b:ff:83:38:c1:1b:56:ae:4c:80:11:79:6d:fd:e8:
14:3b:ee:5f:8a:03:0b:cd:e2:e3:60:eb:96:fa:3f:
53:0c:8b:90:2d:2f:6d:1e:23:bc:32:a0:d1:50:f6:
6b:e3:85:6a:e8:d7:6f:9d:0b:f9:3b:85:2e:a8:6b:
e1:cc:be:ab:44:ec:38:f2:9e:7c:45:eb:61:62:a3:
4b:62:ce:d8:3a:55:17:7b:89:71:2c:b0:b1:4d:5e:
52:7b:14:e3:f8:b7:b5:b6:97:1b:fb:b9:74:1d:32:
cf:b6:89:01:79:15:03:60:2b:64:21:ed:31:6f:89:
7a:30:d7:50:5f:61:a2:c4:98:a1:33:4c:a8:77:52:
02:7a:a1:8a:52:5c:87:fe:6d:3d:d0:c9:27:9a:00:
c2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:90:5A:8D:D3:87:D0:8E:8E:44:D5:38:3A:51:18:A1:EA:A6:86
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/6b2QWo3Th9COjkTVODpRGKHqpoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3::/36
Signature Algorithm: sha256WithRSAEncryption
9b:b4:07:30:d4:e1:de:21:1c:76:1a:c4:14:52:83:7d:88:59:
38:5a:19:e6:81:39:42:1c:98:c8:e5:9b:7b:70:7f:01:b6:aa:
40:da:2a:70:27:e0:dd:cf:03:19:77:26:d3:a2:fb:eb:27:29:
2d:0d:4b:39:20:aa:9a:1f:91:af:1d:10:c4:20:e4:b7:6d:9b:
df:46:28:51:c9:c7:81:55:37:37:25:17:88:45:10:2f:fa:0d:
6c:0a:64:ca:d7:26:f9:97:4f:66:82:2b:1a:6c:01:73:e8:f6:
35:d8:67:a7:b0:da:b0:19:c3:b6:d0:61:66:17:20:d6:2d:a3:
af:12:45:8b:62:a6:c5:13:71:4e:d5:b8:90:02:8e:da:69:bb:
73:32:fa:5c:fb:e3:2b:78:02:9e:20:4c:a9:9f:ab:48:6a:a9:
3a:2d:54:79:17:0c:fb:25:99:d0:1f:dc:9b:88:a1:c8:bc:3b:
eb:9c:f4:4c:94:af:0c:37:2d:8e:77:97:d8:9e:0c:7e:b2:b3:
f9:94:41:3c:b0:e4:8d:0e:8f:1b:ee:99:2d:ba:a2:69:bf:da:
41:e5:64:3e:41:bf:ce:3a:71:78:65:fd:1d:7d:f6:05:47:41:
9f:83:c6:49:7c:9e:01:2b:36:23:1f:ce:f7:3f:54:c3:72:6d:
93:ad:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:41 2025 by rpki-client