Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2dwSEZT9ZO7SsDl6RyptNsNaptU.roa
File: 2dwSEZT9ZO7SsDl6RyptNsNaptU.roa (raw, json)
Hash identifier: YeQqF3aGOloxYZLdz2MqM79KUB7GkH5GMgVEgyqN0aw=
Subject key identifier: D9:DC:12:11:94:FD:64:EE:D2:B0:39:7A:47:2A:6D:36:C3:5A:A6:D5
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAE6021821BF92531A9378D4F50BB4
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2dwSEZT9ZO7SsDl6RyptNsNaptU.roa
Signing time: Sun 01 Jan 2023 14:44:51 +0000
ROA not before: Sun 01 Jan 2023 14:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43478
IP address blocks: 2a02:2698:5000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:e6:02:18:21:bf:92:53:1a:93:78:d4:f5:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9dc121194fd64eed2b0397a472a6d36c35aa6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:9c:ba:23:5e:3a:8c:98:8c:26:ea:02:25:
70:a0:57:0c:81:1c:7d:84:7d:c6:fd:0c:9f:aa:aa:
83:3f:e8:54:ae:5e:e8:70:e2:2d:0c:32:03:97:41:
f1:a0:4e:8b:39:ec:2b:67:d9:5a:e7:6a:ee:3c:1c:
55:91:c2:6b:16:5e:2d:ea:75:a8:68:40:cd:99:1c:
a9:22:1f:c0:02:95:bc:78:83:a3:7d:d7:e1:43:0d:
65:e3:b0:b8:dc:3c:03:0b:47:d9:b9:50:c2:f6:0d:
cb:8c:62:f9:29:4e:0d:45:82:49:a4:a7:19:33:14:
fa:dc:de:38:4b:5a:bd:b1:31:9e:84:1f:dd:ed:0d:
ef:15:03:a7:9e:fd:cd:2a:a7:a2:b9:ff:b3:cd:8f:
52:c4:5b:85:c9:f4:c2:16:1b:64:0c:b5:fe:e5:dd:
db:9e:b5:aa:96:51:3f:c4:bd:09:a0:86:ac:a6:c2:
74:70:fd:a5:bc:9b:ab:0a:51:89:6e:32:8f:97:64:
c6:3c:1a:79:cb:59:f5:5f:e2:b5:ac:7a:1e:55:95:
47:6e:da:34:4d:ec:af:69:ad:99:ac:03:5a:b0:c1:
3c:b2:17:00:9f:c9:85:2d:ac:bc:e7:f5:cc:65:0b:
8b:c5:27:28:f4:d7:a6:84:5d:b0:25:ec:c3:84:df:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:12:11:94:FD:64:EE:D2:B0:39:7A:47:2A:6D:36:C3:5A:A6:D5
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/2dwSEZT9ZO7SsDl6RyptNsNaptU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:5000::/38
Signature Algorithm: sha256WithRSAEncryption
43:72:70:a7:0b:63:56:03:d5:c0:e4:21:3f:a2:4b:cb:84:4b:
d2:64:85:1d:5b:5d:5c:c6:80:cb:28:64:1f:98:32:66:29:4b:
8e:58:8e:6b:a1:24:6f:80:f0:5c:31:3a:79:99:d1:d7:0b:04:
95:06:9e:71:3a:0c:ff:4b:df:10:19:b3:c2:f8:4a:23:f5:28:
65:41:a0:75:b0:44:f8:ff:c3:e6:67:2c:77:63:5e:f7:9b:1d:
1a:2e:74:9c:23:22:c0:11:f1:ee:86:b3:4e:ce:a0:3b:66:e0:
37:2c:4a:b8:8e:f0:b1:a6:ba:a0:02:80:c0:59:d8:35:74:71:
e9:44:84:23:3f:70:0d:39:74:f0:0a:c7:df:a3:62:a9:36:69:
9c:c3:a0:81:f4:ab:f7:f4:bf:94:13:f3:7e:b6:3d:55:03:df:
5d:80:71:cd:72:50:5d:e3:6e:d0:06:d4:7c:49:f2:b0:c9:94:
fc:de:a7:63:a2:75:9b:f3:dd:75:47:37:26:67:0b:c6:e1:4b:
1d:da:8e:6c:62:a4:7f:99:48:76:28:57:95:fd:3f:87:ae:bd:
bb:af:73:df:80:ef:b7:fd:6f:6c:26:a2:c6:3c:06:de:cb:cc:
1b:ad:97:84:4f:fc:06:a7:9c:4a:97:44:85:25:3a:72:20:c2:
cd:63:82:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:00 2025 by rpki-client