Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ItJSmo-rZ-XIyZL9fJ-kUaltYJI.roa
File: ItJSmo-rZ-XIyZL9fJ-kUaltYJI.roa (raw, json)
Hash identifier: CyJz+F/RE47csowe78IT0r5LUHqrAhBWk22AOxql7a8=
Subject key identifier: 22:D2:52:9A:8F:AB:67:E5:C8:C9:92:FD:7C:9F:A4:51:A9:6D:60:92
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0947FAAF
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ItJSmo-rZ-XIyZL9fJ-kUaltYJI.roa
Signing time: Sat 01 Jan 2022 12:59:00 +0000
ROA not before: Sat 01 Jan 2022 12:59:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56981
IP address blocks: 2a02:2698:7800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155712175 (0x947faaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:59:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d2529a8fab67e5c8c992fd7c9fa451a96d6092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:ee:78:ba:a3:ca:8e:2c:2e:a5:9f:6b:3e:
d9:51:30:b1:55:fb:f0:fe:8d:91:65:08:25:9e:bc:
88:05:a7:1f:1b:d6:7e:87:64:fe:56:f5:9d:4e:2a:
fe:cb:00:20:97:e8:14:5f:d2:54:a3:7b:fc:3e:3c:
cf:4b:42:ef:4b:89:ed:bc:ab:9f:6c:cb:f1:07:84:
19:99:11:77:61:06:6f:a5:5f:f7:eb:25:db:36:20:
8f:de:ff:ad:8d:af:37:bc:ec:e0:84:3a:4f:f6:a9:
91:ac:cc:21:32:9b:03:c0:97:48:74:27:70:25:e2:
e1:5b:8d:9a:d0:79:8a:8c:9f:ba:f3:44:89:39:94:
46:c0:2d:8e:0d:22:37:06:e0:37:0c:82:99:1b:11:
b0:08:80:64:49:65:31:68:1c:6c:c7:e3:24:e1:aa:
a4:18:57:a1:c0:17:5b:7a:28:a0:91:f1:52:7a:24:
08:4b:c2:5e:aa:8f:80:7e:c9:5b:fd:6d:d1:a3:a0:
9a:da:6f:53:37:bd:ed:9d:b7:d7:f6:fd:4f:33:be:
42:a8:fa:66:5c:27:8d:27:f3:35:a2:9e:1e:8e:82:
38:e2:7f:69:9d:16:bc:1f:a6:47:69:f0:a6:f1:5c:
35:65:e6:58:f2:ac:da:4b:ad:05:aa:83:df:b8:ec:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:52:9A:8F:AB:67:E5:C8:C9:92:FD:7C:9F:A4:51:A9:6D:60:92
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ItJSmo-rZ-XIyZL9fJ-kUaltYJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7800::/38
Signature Algorithm: sha256WithRSAEncryption
41:16:b0:84:55:c7:63:38:b5:d9:cb:20:f5:9c:e7:5f:99:3e:
f2:a3:a8:c0:06:d9:64:f9:fa:78:47:ec:c9:5a:90:44:bf:64:
67:34:fa:a4:35:66:dd:54:f3:f0:df:55:2a:3b:46:2b:98:24:
62:46:bf:e7:3b:67:96:cb:35:5c:85:6b:55:6b:0a:24:50:86:
69:57:bd:5d:26:e6:58:1c:48:52:5c:55:1b:14:cb:44:d1:3e:
53:26:07:af:5f:f0:1f:f7:3e:a2:fe:f4:a9:e2:08:d5:42:20:
91:23:37:7b:02:39:d2:02:c9:e0:30:0c:03:1d:c0:63:ac:ad:
af:41:3d:75:98:bf:05:29:cf:d6:fd:30:7b:0f:18:fb:f7:85:
7e:03:35:e5:b4:62:e6:6b:80:04:94:04:b4:fe:da:56:57:ff:
a1:0a:a3:28:fe:ac:74:5d:6d:31:33:8a:40:ac:6f:3c:34:67:
8f:ea:50:84:da:3c:aa:ff:b9:23:cc:b2:b3:a8:2e:88:9c:76:
a6:7f:62:a4:f6:41:41:7b:3a:6d:ec:9e:e4:54:6b:6e:d4:09:
ed:10:bc:45:62:f7:e2:de:c6:95:19:cd:89:79:f3:c8:4a:6e:
d3:2a:2e:53:02:84:2d:7a:44:09:a8:d1:26:c3:4a:12:aa:96:
f6:18:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:27 2025 by rpki-client