Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/9TyzArgHmhmIh2HP-VeEVTrV-Aw.roa
File: 9TyzArgHmhmIh2HP-VeEVTrV-Aw.roa (raw, json)
Hash identifier: XdL5vBKLZoOgWW5mOX2LrtGFrwxA5n8VOc+pa6cxeDg=
Subject key identifier: F5:3C:B3:02:B8:07:9A:19:88:87:61:CF:F9:57:84:55:3A:D5:F8:0C
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 093CC0C2
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/9TyzArgHmhmIh2HP-VeEVTrV-Aw.roa
Signing time: Sat 01 Jan 2022 12:58:55 +0000
ROA not before: Sat 01 Jan 2022 12:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50542
IP address blocks: 2a02:2698:1400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154976450 (0x93cc0c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f53cb302b8079a19888761cff95784553ad5f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:f3:f5:a3:dd:8b:eb:41:51:4f:68:7a:65:
f2:7e:61:a4:76:10:bf:d0:96:e7:92:2b:f9:13:d9:
cc:b7:58:d6:dd:64:0d:4c:22:4f:87:15:cb:ff:f3:
86:94:26:96:fe:1f:c8:50:53:5a:14:75:5f:9f:8c:
58:a5:a5:45:d0:50:b8:b0:d0:c2:d9:f2:d4:66:e7:
f1:96:48:31:14:c9:3b:54:5a:07:c0:29:23:1b:8f:
9e:bc:be:93:0b:b2:dd:43:49:67:1b:0c:b7:94:2b:
e4:44:32:7e:34:0b:47:4a:99:24:b2:22:4a:74:11:
ea:28:c9:93:81:75:02:a2:58:a5:ab:74:cf:85:1c:
1c:2e:6f:22:f8:8c:19:65:81:3a:4c:4e:d3:93:2a:
c7:08:70:ad:61:bd:dc:67:f2:5f:52:a9:2f:b0:41:
16:93:36:15:d3:92:4a:2d:ac:c4:66:fe:d0:fa:7b:
89:f5:31:4e:35:36:6a:c7:25:c2:a8:ea:99:f9:ec:
65:2a:e4:5c:e6:40:44:5b:41:c1:3d:b7:15:bd:ed:
f6:b8:33:e8:3f:1b:6e:cb:40:6e:03:85:1c:0a:f3:
26:d4:54:fa:43:df:c9:fc:e1:50:41:8c:ee:6e:6b:
9f:ce:fb:59:d2:8b:b1:22:bc:e3:72:d1:93:15:85:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3C:B3:02:B8:07:9A:19:88:87:61:CF:F9:57:84:55:3A:D5:F8:0C
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/9TyzArgHmhmIh2HP-VeEVTrV-Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:1400::/38
Signature Algorithm: sha256WithRSAEncryption
27:72:5f:5f:9b:4b:2c:b2:6c:32:0d:c6:11:42:4c:e3:c2:36:
4f:a8:9c:64:58:15:40:23:aa:2b:d6:1c:7e:30:f0:53:58:07:
3a:9e:76:aa:dd:b1:ad:01:6d:a6:f0:42:37:57:cf:87:d5:63:
4a:2f:f7:83:7a:76:3c:0b:15:b2:a4:75:17:c8:b7:b6:39:3b:
28:f5:8e:23:e0:49:e3:41:9d:58:7b:cc:c7:13:2a:a7:fd:fe:
64:4b:1c:0f:7f:23:79:3b:ae:3f:d1:54:a0:c6:fa:7e:19:db:
43:51:e2:b3:a1:d8:07:55:81:6d:4f:86:4d:57:5e:0a:ae:40:
64:e9:06:0a:28:0c:4b:a1:8e:aa:f4:72:b3:0a:8f:bf:40:0a:
b4:cf:d8:be:62:3e:bc:36:8b:6a:e4:73:05:60:b8:1b:f3:f8:
37:58:fc:ed:12:a8:26:18:f8:51:51:2b:15:05:b6:5f:bb:d8:
25:28:ae:8d:e0:fa:4c:8a:0b:86:ad:af:e8:b7:0e:5c:ed:b2:
fa:ec:ef:02:a7:ca:3e:20:af:41:b3:69:24:2d:f9:d6:ba:ee:
ce:cc:a3:63:9f:04:da:3f:38:ea:96:dd:e1:0b:9a:bb:f3:3a:
1a:56:63:c7:6e:3c:a9:9b:0c:d1:af:02:94:02:0e:23:42:85:
cb:98:c6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:49 2025 by rpki-client