Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/R3QOeozlKAQonjd0bwOd7TxOrXg.roa
File: R3QOeozlKAQonjd0bwOd7TxOrXg.roa (raw, json)
Hash identifier: 1x/y5WP1CDKkY5l161Ng5PWVHHD8+CSiUEq7+OksrDM=
Subject key identifier: 47:74:0E:7A:8C:E5:28:04:28:9E:37:74:6F:03:9D:ED:3C:4E:AD:78
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 09448356
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/R3QOeozlKAQonjd0bwOd7TxOrXg.roa
Signing time: Sat 01 Jan 2022 12:58:58 +0000
ROA not before: Sat 01 Jan 2022 12:58:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56330
IP address blocks: 2a02:2698:3400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155485014 (0x9448356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47740e7a8ce52804289e37746f039ded3c4ead78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:4d:aa:4b:c2:f8:23:de:03:47:4f:25:85:
b5:a9:bc:dc:dc:81:73:f9:c3:59:00:dd:79:39:40:
0b:fe:73:e4:19:9b:06:b9:da:3b:b0:16:eb:bc:1d:
f2:0a:e1:f0:72:e5:7e:c4:59:c1:1f:70:40:f9:01:
9b:39:d0:0a:bd:40:3b:25:30:47:6d:e7:a3:0b:13:
4f:f2:81:e8:5d:47:e9:c3:40:f7:73:99:64:1e:21:
6c:f4:89:c3:f1:37:2a:23:d3:8e:18:07:bf:63:ca:
76:7d:70:4f:14:a1:6c:39:f2:c3:36:3f:14:dc:ee:
c5:32:9a:bd:43:2f:78:cc:16:f3:a4:ed:50:94:df:
9b:2d:87:b4:18:24:0b:be:30:79:2e:ad:e6:94:29:
1b:46:7e:0d:fb:19:be:33:7a:54:41:63:a7:99:e2:
ba:05:f2:5e:50:19:03:f0:a9:9a:cc:11:0b:82:29:
6a:cd:41:c2:47:95:10:b9:c0:e0:06:79:8c:94:e3:
a1:25:f8:bd:eb:b7:69:b4:d4:36:a2:cb:76:0d:63:
69:3a:5e:72:a6:9d:57:b3:31:0d:58:40:48:c0:a3:
52:e7:bc:c6:a3:bc:c3:97:07:28:af:f5:8d:8c:30:
c0:16:5e:75:0c:4f:1d:f6:7a:f1:dd:75:ed:1f:ec:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:74:0E:7A:8C:E5:28:04:28:9E:37:74:6F:03:9D:ED:3C:4E:AD:78
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/R3QOeozlKAQonjd0bwOd7TxOrXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:3400::/38
Signature Algorithm: sha256WithRSAEncryption
66:e3:6d:f7:00:5a:7c:5b:cf:ce:cd:1e:da:61:16:00:6d:aa:
61:c0:ab:36:b6:c2:ed:04:44:17:19:7b:b9:a4:b1:0d:bf:1e:
c5:99:62:7d:b9:47:f5:d5:e5:9b:04:03:db:7b:a1:36:c5:03:
70:fd:74:6e:14:3c:ee:6a:42:da:b1:04:2d:83:b5:69:6a:88:
86:d4:56:7b:34:b2:0a:0d:ba:52:f1:a2:df:93:40:87:0e:98:
28:4e:98:2e:fd:03:b2:6f:ff:1a:b3:18:69:6d:8b:20:7f:d8:
e1:d5:a2:0d:a2:7c:db:bf:59:10:08:64:f7:3e:e7:b7:4e:65:
bb:1a:7b:8d:eb:6b:33:e8:78:ec:d5:27:7c:1c:14:9f:d3:18:
e7:8e:6e:78:54:10:c7:aa:ff:5c:c2:b7:43:1f:ab:5d:7c:c9:
29:7a:f5:2c:66:e3:84:f6:ed:f0:36:fe:8b:7f:ff:24:f4:7f:
ed:0b:3a:8d:ac:17:d4:de:2f:bf:b7:3d:97:a4:0c:1f:36:dc:
d4:4c:c8:04:75:eb:93:ff:cf:fb:c5:2c:a2:f2:b7:cb:6e:51:
ab:d3:87:76:3b:00:4d:4e:b6:37:54:6b:80:af:fa:22:93:af:
15:ac:12:a9:7a:f0:02:e3:7e:45:0d:60:3c:76:4a:e6:1a:57:
60:0b:52:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:06 2025 by rpki-client