Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/982w0Cixrm9m-UZCBTEPQnwY2RU.roa
File: 982w0Cixrm9m-UZCBTEPQnwY2RU.roa (raw, json)
Hash identifier: Si2R3NtW+Prjr1lDXRtUxJ+4d31iqiKmli8yw8CTfiI=
Subject key identifier: F7:CD:B0:D0:28:B1:AE:6F:66:F9:46:42:05:31:0F:42:7C:18:D9:15
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0937687A
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/982w0Cixrm9m-UZCBTEPQnwY2RU.roa
Signing time: Sat 01 Jan 2022 12:58:51 +0000
ROA not before: Sat 01 Jan 2022 12:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42683
IP address blocks: 2a02:2698:5800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154626170 (0x937687a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7cdb0d028b1ae6f66f9464205310f427c18d915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:fd:93:6d:8e:35:30:41:1a:8d:49:1e:56:
a0:57:dd:47:6f:b2:74:51:f3:72:89:5b:22:81:01:
da:e8:3f:9b:e8:cf:a2:07:c6:53:50:35:0a:0c:82:
60:04:9b:a3:b1:f8:94:05:b1:a0:cf:39:1c:4e:eb:
75:b0:b5:eb:ff:e5:79:c9:a2:81:c6:3d:a5:92:6a:
7a:b4:6f:fc:ca:96:26:96:c7:54:c1:42:e5:d1:e4:
06:22:ae:c4:8e:fc:02:29:ec:0b:01:74:00:e2:61:
95:bc:60:27:77:32:24:21:84:a6:db:fe:48:09:e0:
63:cd:f1:dd:ed:eb:bd:cc:ae:31:97:c6:2d:5e:6e:
42:b5:8d:56:9a:ba:ce:4b:02:41:20:f9:cc:8a:14:
41:fa:b7:66:64:f8:08:84:88:cb:50:21:4f:41:fc:
20:d6:59:cc:62:e4:42:cf:d4:bc:72:2d:6f:d9:1f:
7f:81:66:3f:11:98:0a:97:f1:e6:0b:81:f1:09:4c:
1f:81:3a:dc:77:c4:ff:ee:c8:ab:f8:9d:1f:77:23:
a0:8b:00:f7:53:cf:61:f6:5a:55:24:c1:91:ec:9e:
d3:c2:9c:e3:e0:92:9a:28:1e:46:d3:71:68:c1:9e:
56:37:3d:14:0e:b2:28:e2:d9:b2:db:a9:6e:93:3b:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CD:B0:D0:28:B1:AE:6F:66:F9:46:42:05:31:0F:42:7C:18:D9:15
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/982w0Cixrm9m-UZCBTEPQnwY2RU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:5800::/38
Signature Algorithm: sha256WithRSAEncryption
7b:ed:6a:81:34:a8:4b:e7:49:ab:1e:40:7b:78:35:67:a4:c1:
2f:18:bb:04:57:f6:15:e9:14:f5:bb:e8:af:b6:12:43:5f:ff:
94:dd:b7:d7:30:95:4c:a3:58:43:e5:44:82:8d:f0:f7:d2:61:
ac:df:64:60:40:d5:48:eb:8d:11:95:a6:03:27:79:1b:65:9d:
a0:a8:0a:06:b6:97:9b:c3:05:e9:31:5b:7b:d1:d7:3f:6a:fb:
e1:57:be:39:1a:d2:d5:cc:a5:64:10:87:71:70:89:5a:63:dd:
0f:2a:6f:0e:44:f9:6e:30:2e:f3:ae:9b:88:8d:40:1f:eb:49:
40:33:0c:3d:3e:91:06:4c:87:ac:44:87:d8:75:68:18:1e:96:
32:f2:ce:8b:7e:25:c6:c3:3a:1d:21:e7:67:a4:28:4d:87:02:
fc:b9:3f:f0:e5:24:d6:b0:ac:4a:14:0c:12:a7:5b:ba:bd:9c:
52:57:63:cb:ba:95:77:6b:6d:6b:d3:4d:db:f6:39:de:7e:ad:
b1:9a:48:6a:90:28:7f:37:35:da:88:99:fb:2b:91:a6:9f:aa:
3c:b5:2a:f0:c3:07:38:f8:23:ca:21:6c:93:1f:f5:cb:3b:66:
5b:bb:d4:cb:34:87:25:5f:d0:d8:17:75:5f:ec:b6:19:e7:9c:
42:0b:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:37 2025 by rpki-client