Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/7fSpTFN9OXWvulp9FE32ttJ07Gw.roa
File: 7fSpTFN9OXWvulp9FE32ttJ07Gw.roa (raw, json)
Hash identifier: hZ8L26vXMe6zgKgkBVXhuVhnfz95PNXbqVi4cfJ8r7A=
Subject key identifier: ED:F4:A9:4C:53:7D:39:75:AF:BA:5A:7D:14:4D:F6:B6:D2:74:EC:6C
Certificate issuer: /CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Certificate serial: 01856C41346F216049A0547E818F42E779C4
Authority key identifier: 7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/7fSpTFN9OXWvulp9FE32ttJ07Gw.roa
Signing time: Sun 01 Jan 2023 07:34:50 +0000
ROA not before: Sun 01 Jan 2023 07:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 2a12:8940::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:34:6f:21:60:49:a0:54:7e:81:8f:42:e7:79:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a550c8065bf6033fcc6a3b03813ef9271924196
Validity
Not Before: Jan 1 07:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edf4a94c537d3975afba5a7d144df6b6d274ec6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:62:72:87:db:38:6d:66:55:04:3e:0e:2f:
db:9e:ac:35:91:18:39:16:09:60:9d:81:f7:c0:3c:
98:4f:89:04:c5:50:2b:bd:89:d4:9a:44:2d:11:68:
24:f7:7d:88:f7:e1:bd:00:16:f9:8a:43:57:66:a7:
97:41:b3:6c:78:ce:b0:7c:ca:bd:f8:52:28:52:f4:
40:d4:5d:6f:e5:2a:76:b3:7a:2b:08:73:b3:94:45:
ec:dc:22:22:2a:de:03:82:e4:cd:2f:b5:68:cb:34:
0a:92:db:d3:d8:8e:ed:d0:2f:31:27:f7:b4:e0:c8:
73:76:f4:89:3f:69:de:c0:f5:3d:8c:30:22:11:a5:
3c:2f:29:92:10:bd:29:3e:bf:aa:d0:78:b6:83:82:
d3:cc:54:f9:ff:de:2a:70:fa:20:27:25:98:76:ab:
72:06:4b:f3:43:e4:2d:51:98:15:d2:7f:c5:76:6f:
c6:c9:e5:21:27:b6:d6:17:fc:62:39:bd:6d:55:83:
09:f2:b5:ad:f6:71:a9:5e:de:b0:fe:95:04:7b:99:
d1:e6:6b:d1:56:0a:f9:fe:f0:fc:f8:cf:3b:d6:2c:
e8:01:8f:2c:29:56:43:93:57:9c:b7:2b:04:c6:fb:
2b:6c:61:1a:31:dc:88:48:ec:76:03:85:cc:5e:a4:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F4:A9:4C:53:7D:39:75:AF:BA:5A:7D:14:4D:F6:B6:D2:74:EC:6C
X509v3 Authority Key Identifier:
keyid:7A:55:0C:80:65:BF:60:33:FC:C6:A3:B0:38:13:EF:92:71:92:41:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elUMgGW_YDP8xqOwOBPvknGSQZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/7fSpTFN9OXWvulp9FE32ttJ07Gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/52fb09-6a27-4369-bbdb-87bfc37f0ec2/1/elUMgGW_YDP8xqOwOBPvknGSQZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8940::/29
Signature Algorithm: sha256WithRSAEncryption
48:1b:5b:d9:b7:01:1e:fa:af:79:42:db:b0:b0:b1:d2:67:f3:
83:94:6a:56:09:f4:af:59:67:10:db:f2:70:41:0f:82:2f:b4:
ad:2c:37:4d:b0:1d:47:d7:25:67:cf:3f:e8:21:41:68:3e:b5:
4e:9b:af:ab:1e:68:e7:f2:9e:b1:e3:6c:01:2d:2e:a0:d9:ab:
d7:76:39:50:38:e5:1f:6a:1d:7c:f5:6f:16:89:1d:e4:f4:42:
12:49:a2:e0:77:61:86:17:e0:d7:60:15:70:10:15:6f:e6:41:
79:8d:76:1c:7e:c9:30:4d:74:f2:9a:71:18:88:c0:d5:69:f0:
85:9e:ed:88:f7:87:d0:d5:21:82:08:61:8b:b9:b8:b0:0a:75:
f7:c4:ee:fd:d8:be:a2:8e:3d:3f:eb:38:27:b9:7a:07:80:43:
bd:e2:77:f0:01:1e:40:66:27:74:6d:f8:3f:9d:6b:39:b6:b2:
d1:7a:d6:6d:05:66:2e:1c:bf:c9:3d:9f:ba:4d:43:09:67:c6:
62:4f:37:6c:ce:af:be:76:86:59:e7:ea:d2:d3:18:e0:14:f3:
be:e3:7d:04:4b:22:32:32:d4:e5:a6:4b:40:eb:6f:9c:18:21:
be:dc:27:e0:a8:7f:76:70:7a:74:30:fb:5d:86:51:46:41:9a:
50:f8:e4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:05:59 2025 by rpki-client