Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Y1_dbHS2MjtWvZy44jbq11nsvO8.roa
File: Y1_dbHS2MjtWvZy44jbq11nsvO8.roa (raw, json)
Hash identifier: 8eh5uhHVPE4m9oNJGRl/Cdio1xKa3fqIwHDQ9ljkiTg=
Subject key identifier: 63:5F:DD:6C:74:B6:32:3B:56:BD:9C:B8:E2:36:EA:D7:59:EC:BC:EF
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 0941B8F7
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Y1_dbHS2MjtWvZy44jbq11nsvO8.roa
Signing time: Sat 01 Jan 2022 12:58:57 +0000
ROA not before: Sat 01 Jan 2022 12:58:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51819
IP address blocks: 2a02:2698:9400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155302135 (0x941b8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=635fdd6c74b6323b56bd9cb8e236ead759ecbcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:1b:1f:2b:87:ae:1a:3f:0a:75:a0:f4:04:
a7:17:d0:6c:58:a3:82:2c:e2:e2:18:fb:57:fa:45:
8e:c9:c4:b5:cb:3a:75:95:40:5c:6c:43:2b:b2:67:
a2:15:22:64:88:cc:ed:72:4c:0c:31:3a:2b:3c:45:
fb:08:de:95:d9:a5:b5:0e:1c:64:fd:d9:6e:21:0a:
b9:e9:1a:ab:15:c5:70:1c:a8:9c:c7:93:e1:15:68:
2c:79:6b:db:a0:80:32:56:84:be:e8:ea:d1:de:f6:
c2:66:f4:22:bd:02:db:78:15:4e:1f:a8:a7:52:43:
59:4e:71:9d:66:10:a4:0b:6f:36:34:3c:2b:54:f1:
95:f2:2e:a6:de:f3:d2:1a:ea:b7:1a:5a:df:86:9a:
16:11:bc:ff:4e:23:30:ae:74:30:c0:05:af:89:ce:
c1:48:1c:9f:be:cf:2a:c7:28:d0:82:3d:a3:d9:5e:
65:ec:30:b5:05:9d:b9:30:43:37:1b:74:b5:29:e4:
0e:5b:be:56:10:d5:77:03:0d:a3:f7:54:8e:00:38:
92:b6:86:7e:02:ae:60:36:a9:af:0a:39:d2:fd:a2:
f2:3b:9c:f7:cb:d1:24:b5:2b:9c:80:9e:f1:4a:d7:
a0:d0:c8:9a:49:60:2e:fe:40:2f:d5:b5:4c:3a:b9:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5F:DD:6C:74:B6:32:3B:56:BD:9C:B8:E2:36:EA:D7:59:EC:BC:EF
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Y1_dbHS2MjtWvZy44jbq11nsvO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9400::/38
Signature Algorithm: sha256WithRSAEncryption
a6:84:75:10:7e:52:0c:57:ae:5b:29:c3:30:a0:ba:15:30:75:
be:4a:8f:dc:a0:52:63:dd:95:9e:ee:cf:50:80:f5:98:eb:6d:
4a:6b:c6:40:41:73:0a:56:99:41:e8:77:20:ca:57:cf:e3:da:
32:5e:a3:80:65:ff:5c:1b:83:5d:f0:37:92:1d:98:b2:f6:2a:
04:7c:4c:0f:cf:ea:16:60:61:ae:bb:32:44:e1:d8:c1:67:04:
b4:2d:9d:67:28:f8:57:3f:35:7a:fa:5b:e8:dc:b1:d2:56:a2:
e2:c8:5d:e3:1d:a6:d0:a1:ff:11:30:4e:06:24:a9:8b:e1:0b:
45:aa:5c:6d:e2:c6:9b:b0:bd:70:f7:3b:c0:f3:4e:91:77:a2:
cf:6e:64:ef:a3:c3:a6:a6:ca:5c:7a:ee:d7:0a:e7:ce:4c:86:
42:ce:6d:d7:75:7f:52:74:76:c8:52:21:3e:6a:5b:34:d1:81:
cc:e1:5b:41:e6:46:2f:df:14:fd:7b:92:9a:40:40:2a:92:78:
54:59:1a:e9:81:f1:0c:f2:32:a9:40:ab:e1:63:3f:2d:15:0a:
3a:cf:bd:c5:8e:7e:45:c4:f5:b3:c1:7a:d1:3a:42:2e:12:db:
8d:d2:29:8d:b6:8f:7a:1b:81:45:50:6f:83:5d:37:8e:0b:e8:
11:9c:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:09 2025 by rpki-client