Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/9XOr4Ul1OtC8ZrbtSyLhzXtUBxs.roa
File: 9XOr4Ul1OtC8ZrbtSyLhzXtUBxs.roa (raw, json)
Hash identifier: 9V+2pamjOPM5SGFiAt9wMH+VFFL40k8WZBlz77TxwqU=
Subject key identifier: F5:73:AB:E1:49:75:3A:D0:BC:66:B6:ED:4B:22:E1:CD:7B:54:07:1B
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 093E6600
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/9XOr4Ul1OtC8ZrbtSyLhzXtUBxs.roa
Signing time: Sat 01 Jan 2022 12:58:55 +0000
ROA not before: Sat 01 Jan 2022 12:58:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50544
IP address blocks: 2a02:2698:3000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155084288 (0x93e6600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f573abe149753ad0bc66b6ed4b22e1cd7b54071b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:7f:c5:cd:24:75:46:b8:a8:0b:3e:cf:5a:
c6:99:2b:9d:42:03:d0:cf:48:87:cf:40:1e:5b:18:
84:a0:9a:af:39:db:21:79:09:0d:f2:ba:3b:c7:f4:
e3:25:64:bf:41:9c:99:80:84:94:2c:76:2a:a2:61:
55:1f:0e:df:23:dd:8c:80:59:de:2f:37:83:b5:17:
3a:f7:80:ce:55:7e:dc:27:e5:89:06:3d:8d:a3:23:
f9:1d:ab:7e:75:09:89:63:38:6c:35:d2:53:76:a8:
c4:46:e1:ec:37:d8:58:54:bf:9b:0f:64:ec:ab:e1:
8b:30:b4:43:c9:e8:b7:91:ce:d0:3f:96:cd:d1:9f:
77:06:a1:c8:2a:5e:52:7a:e9:45:f7:8d:46:b6:0d:
76:15:2f:42:6c:e2:25:8f:3b:63:5b:79:52:0a:11:
e9:72:eb:65:69:c4:cd:72:4b:5a:ea:62:8f:9d:11:
5d:84:29:41:6e:0b:96:d2:65:01:f6:60:20:b9:b8:
be:fe:bc:73:d0:ff:69:6c:79:03:77:a3:a6:8e:90:
4f:38:b0:77:ef:d4:bd:fc:92:b3:fa:37:fc:11:30:
26:f4:1c:21:bb:00:08:dd:3a:9b:d1:2d:0b:50:10:
32:52:88:a2:b6:ee:63:0a:fc:16:80:0a:4e:77:c1:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:73:AB:E1:49:75:3A:D0:BC:66:B6:ED:4B:22:E1:CD:7B:54:07:1B
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/9XOr4Ul1OtC8ZrbtSyLhzXtUBxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:3000::/38
Signature Algorithm: sha256WithRSAEncryption
dc:cc:7e:0c:81:1f:fb:9f:4b:68:ea:85:e3:75:16:2e:bb:e9:
ab:4b:ab:e4:c6:7c:7a:6e:10:20:cf:03:b8:c5:7a:a5:d3:7b:
57:b5:28:ca:8b:d4:23:6b:28:2c:b0:fb:46:c6:64:37:32:15:
24:6e:2f:8a:00:d6:8f:00:ef:ac:de:8f:bc:28:ac:b3:dd:fa:
f3:80:71:f7:3c:51:0e:66:eb:a8:3f:7e:06:92:9c:f1:60:95:
11:ce:d3:9e:1c:64:cb:6f:51:82:d6:d3:63:af:e2:2b:d9:32:
9a:4c:ee:25:a0:2e:00:b2:77:89:61:bb:7a:53:26:3b:74:4d:
37:25:28:95:a8:fc:a9:9f:35:91:70:bd:50:b6:f1:0c:d4:02:
27:34:47:6c:d8:80:6b:b3:77:53:21:06:5c:c0:9f:08:7a:4c:
6c:f1:2a:7c:83:9e:31:1a:f1:2c:44:ff:21:84:fd:91:99:7f:
a8:1a:ec:e6:57:eb:e4:bb:83:73:92:08:5d:85:ea:4b:cf:a8:
0d:9e:a6:b1:82:f1:b8:bd:32:99:50:a7:ad:cd:11:d2:9f:6e:
dc:98:ab:e0:dd:20:70:90:39:00:66:0e:fa:73:e6:6d:62:b7:
f6:03:b0:5e:c6:4a:3d:fc:01:8c:76:a2:7b:9a:f0:fd:ae:20:
64:fa:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:02 2025 by rpki-client