Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/543gLIuaHak_Q0juDsQ0fzTF0tc.roa
File: 543gLIuaHak_Q0juDsQ0fzTF0tc.roa (raw, json)
Hash identifier: +jlKVx/GahmvmZ9QyWO7oZAi3VDrDpx3vzzXZI9DJG8=
Subject key identifier: E7:8D:E0:2C:8B:9A:1D:A9:3F:43:48:EE:0E:C4:34:7F:34:C5:D2:D7
Certificate issuer: /CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Certificate serial: 01856DA64B81A08AA2E185BA71F0A6C4EEC6
Authority key identifier: 7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/543gLIuaHak_Q0juDsQ0fzTF0tc.roa
Signing time: Sun 01 Jan 2023 14:04:52 +0000
ROA not before: Sun 01 Jan 2023 14:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:8300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:4b:81:a0:8a:a2:e1:85:ba:71:f0:a6:c4:ee:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbe9071939bfa3bcf7e6c6fbe54f004d1e49598
Validity
Not Before: Jan 1 14:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78de02c8b9a1da93f4348ee0ec4347f34c5d2d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1d:ed:2b:fe:9b:ff:7d:43:19:56:00:74:13:
af:e4:3c:72:dc:41:61:20:77:53:16:1f:fd:72:d1:
28:c8:d9:50:8e:01:e1:3d:b2:94:67:df:b2:87:2f:
f3:e3:61:77:82:13:ac:4e:40:b8:07:77:d8:8d:81:
9c:6b:e6:9c:af:3e:1f:33:c7:30:a6:f0:5d:4b:70:
b5:9d:a4:38:1c:f8:0a:48:5f:97:a1:3f:79:e4:b2:
e9:1f:5f:3c:1d:89:e2:8f:9c:7d:55:98:14:58:66:
69:b6:cd:4d:b6:82:e4:d7:ce:1e:93:0e:d6:4b:83:
ad:a2:81:61:21:85:64:16:d4:07:e1:e7:df:b1:14:
78:53:6c:08:a4:1c:f4:0f:2e:b8:cf:1e:2c:4f:f3:
43:9e:1f:97:94:64:71:8d:a6:ba:aa:ea:c7:6b:8f:
6d:ad:47:73:ef:9c:33:d8:6c:c4:ba:f9:75:9c:ef:
78:f2:58:ec:5b:f5:a7:4c:cf:e1:4a:10:d9:f1:9e:
b9:3f:37:37:fb:27:5c:30:3f:03:02:9a:f6:d0:d3:
3d:85:7a:b5:0f:83:94:7b:b2:16:6d:53:b5:32:63:
a3:cd:22:b0:3e:53:1d:16:cf:c2:5c:5e:27:8a:47:
cc:ad:8a:f3:a5:5f:11:cc:54:eb:dd:4a:45:7e:dd:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8D:E0:2C:8B:9A:1D:A9:3F:43:48:EE:0E:C4:34:7F:34:C5:D2:D7
X509v3 Authority Key Identifier:
keyid:7D:BE:90:71:93:9B:FA:3B:CF:7E:6C:6F:BE:54:F0:04:D1:E4:95:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb6QcZOb-jvPfmxvvlTwBNHklZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/543gLIuaHak_Q0juDsQ0fzTF0tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/73a4c5-92ce-4d9a-858b-bdcaddc1ecce/1/fb6QcZOb-jvPfmxvvlTwBNHklZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8300::/29
Signature Algorithm: sha256WithRSAEncryption
b0:a2:f8:8a:f1:84:15:06:d1:c0:35:89:ab:b0:59:98:27:8e:
95:fe:46:80:22:de:fe:6c:37:fd:e0:7d:1f:cb:15:60:99:9b:
9b:8c:7a:94:72:af:44:e1:64:04:36:c8:92:00:17:b7:03:32:
26:d7:24:65:fe:1e:51:60:53:72:ab:1b:79:77:e8:59:0f:06:
19:f6:b0:7c:54:6f:11:fb:5a:0b:66:8f:65:52:78:10:32:5e:
14:c9:6d:4e:85:a8:a8:b5:cc:99:5c:70:be:8d:1c:90:51:cb:
a5:75:cf:40:7b:53:aa:e4:44:87:7d:eb:c6:6a:5a:8f:6f:c1:
d7:90:5b:4e:6a:8c:a3:c9:a0:df:65:05:eb:f0:17:15:3a:6c:
b5:e0:ab:72:00:80:e0:57:ac:c0:7a:36:f2:a1:3b:62:54:bb:
cf:8b:ba:65:c8:d7:1f:49:56:80:20:c5:7e:cd:b8:40:55:78:
f0:62:fa:b6:15:31:81:81:23:3d:9d:75:11:00:9a:af:20:05:
af:0e:51:f2:07:34:ca:4b:60:e9:31:d2:34:16:76:99:98:96:
49:8e:5f:71:c1:44:ca:a6:31:e1:e8:5e:f5:a8:af:16:02:75:
9f:00:97:3b:e2:d5:f2:bb:dd:d6:2a:32:af:63:68:47:5e:50:
89:89:64:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:12 2025 by rpki-client