Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/jAsOB_XomdVx0lMQSFYTfAI9yR8.roa
File: jAsOB_XomdVx0lMQSFYTfAI9yR8.roa (raw, json)
Hash identifier: teqH0AvzmhKCaZw8rTSE+jd+Qh29ECDGhpshF7w7TMs=
Subject key identifier: 8C:0B:0E:07:F5:E8:99:D5:71:D2:53:10:48:56:13:7C:02:3D:C9:1F
Certificate issuer: /CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Certificate serial: 018220C028CEA82CB5C3DD8B9A2E8F6F19F3
Authority key identifier: 5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/jAsOB_XomdVx0lMQSFYTfAI9yR8.roa
Signing time: Thu 21 Jul 2022 12:34:00 +0000
ROA not before: Thu 21 Jul 2022 12:34:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 2a11:a580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:c0:28:ce:a8:2c:b5:c3:dd:8b:9a:2e:8f:6f:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef104fc4b0b5c08272e3ae783b8cd777ba2aa90
Validity
Not Before: Jul 21 12:34:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c0b0e07f5e899d571d253104856137c023dc91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:6b:af:b1:6a:c5:dc:05:8f:42:ad:65:03:
47:f1:c2:28:28:6a:f8:ba:01:a5:e5:55:44:25:52:
a4:b4:89:a0:a1:a8:1d:cd:0c:3e:32:4f:e8:e6:44:
64:7c:be:eb:e9:c0:33:0e:7f:84:80:fe:2d:d5:b9:
44:48:a3:ff:d1:34:2e:26:5d:40:33:4c:2b:81:15:
e2:06:92:53:ff:a6:66:97:8c:cd:da:88:1d:aa:f3:
8c:1b:4f:f1:08:6f:0f:04:e2:8d:8a:00:ca:06:87:
95:72:02:04:e5:16:ed:c5:81:f6:2e:20:94:be:e9:
29:fd:33:d2:e5:a6:b9:78:41:a6:c5:cb:ba:5d:44:
86:d6:c7:68:0e:e6:81:91:9e:02:68:c8:92:c9:a9:
2a:40:d4:f6:54:35:32:29:9d:9e:c2:33:cd:89:4d:
6b:b2:5b:6c:a4:50:10:aa:e8:4b:ce:94:d6:0b:52:
aa:9f:f6:53:76:2a:87:78:e6:35:d6:41:ad:9d:20:
d6:8d:e2:b4:ac:4b:51:3c:d5:d5:c4:d8:4e:ee:49:
36:36:f4:33:9b:91:08:54:0e:73:9a:87:a4:a8:9a:
ee:6c:ff:b7:10:c9:b5:f9:45:23:00:d2:fa:5b:78:
12:d4:e6:07:d7:b6:3f:1c:b4:3e:b2:02:38:f0:85:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:0E:07:F5:E8:99:D5:71:D2:53:10:48:56:13:7C:02:3D:C9:1F
X509v3 Authority Key Identifier:
keyid:5E:F1:04:FC:4B:0B:5C:08:27:2E:3A:E7:83:B8:CD:77:7B:A2:AA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvEE_EsLXAgnLjrng7jNd3uiqpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/jAsOB_XomdVx0lMQSFYTfAI9yR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/353bfa-abdb-444a-8154-4fc54b0baa78/1/XvEE_EsLXAgnLjrng7jNd3uiqpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:a580::/29
Signature Algorithm: sha256WithRSAEncryption
27:0a:47:b1:a9:89:59:ad:26:0d:e5:62:1e:a9:e6:c0:6e:13:
ac:60:5d:8c:b8:a4:6c:1d:f9:17:2c:f4:f9:f8:0f:b8:f4:b6:
85:1e:08:23:72:57:8a:d9:56:34:78:92:8f:60:fe:97:3d:4f:
4e:e9:3e:9e:2b:8b:9e:89:f1:cb:c8:dc:e7:99:4f:c7:98:dd:
6b:ff:cd:88:49:32:46:63:8c:47:bc:0d:27:8a:52:14:a2:68:
5e:6c:d3:e7:7b:ab:ee:fd:10:8c:77:38:aa:58:b1:d2:83:61:
05:bf:27:22:f8:f5:4f:70:21:c5:48:f6:30:28:73:07:40:a2:
42:14:96:66:a3:8c:f8:2d:f5:8b:6f:49:5d:12:be:63:bd:8b:
ea:8c:eb:4f:94:c1:81:10:1f:4a:06:72:81:d1:be:c5:72:af:
51:71:be:ae:c6:7a:b6:a7:b6:44:b4:08:c2:db:b1:57:6e:b2:
d6:ba:a8:0c:1e:f8:d1:a7:69:8e:84:2b:87:08:71:7e:45:9c:
a0:e0:96:57:2d:53:9a:0e:68:e7:e5:0d:15:0c:f8:a7:d1:c7:
98:50:da:8c:93:df:61:e9:56:f9:75:eb:2a:12:6d:75:69:21:
4b:6b:c7:9c:8b:82:5b:90:2e:05:77:0f:21:91:62:dd:cf:5b:
42:2b:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:22:45 2025 by rpki-client