Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jG7lI0c2kizMJKnEicYz40869fo.roa
File: jG7lI0c2kizMJKnEicYz40869fo.roa (raw, json)
Hash identifier: xSup5MA7T9+eisCjleuSiAEKiW9G/vo30p6A4+cSKAk=
Subject key identifier: 8C:6E:E5:23:47:36:92:2C:CC:24:A9:C4:89:C6:33:E3:4F:3A:F5:FA
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 092F8F4C
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jG7lI0c2kizMJKnEicYz40869fo.roa
Signing time: Sat 01 Jan 2022 12:58:47 +0000
ROA not before: Sat 01 Jan 2022 12:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41661
IP address blocks: 2a02:2698:9000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154111820 (0x92f8f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 12:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c6ee5234736922ccc24a9c489c633e34f3af5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:b3:55:10:d3:f8:15:93:88:df:7d:6c:9a:
da:82:58:4f:02:b8:93:82:4e:f7:94:c0:bf:88:5a:
79:84:55:ec:25:38:d0:99:5e:62:de:54:c6:7b:79:
e9:1d:6b:ea:9b:32:50:53:62:50:11:1d:b9:2b:d3:
de:61:63:4a:64:89:ea:4f:a8:07:10:89:bd:2a:22:
82:9f:ef:8c:5b:12:25:70:5a:36:0b:9c:61:30:2d:
18:6c:70:25:1d:3b:b0:c7:95:e5:5e:28:37:06:e0:
93:93:da:74:77:2c:3b:ea:dc:68:b6:d3:f2:74:64:
16:ae:de:68:cb:75:91:2a:e6:b0:6a:3e:38:df:03:
68:ce:07:6f:f1:32:4c:5b:5c:aa:db:86:8a:33:86:
75:b5:aa:e6:19:47:0f:85:8a:26:0b:dc:af:3f:13:
e9:87:87:ef:76:94:4b:11:e7:db:18:47:b8:a2:ea:
2a:5a:80:42:40:bc:7a:82:23:25:41:c8:0a:38:1f:
d2:b2:44:be:61:1c:89:3b:21:9e:f1:1a:1f:3a:1f:
5d:16:6e:68:ab:ac:4c:b4:fc:9b:35:7e:fe:52:88:
64:74:25:d0:8a:13:45:30:44:47:b6:0b:dc:20:6d:
87:d1:be:ec:1d:e1:54:05:bb:eb:89:3a:8b:88:2a:
e7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:E5:23:47:36:92:2C:CC:24:A9:C4:89:C6:33:E3:4F:3A:F5:FA
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/jG7lI0c2kizMJKnEicYz40869fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9000::/38
Signature Algorithm: sha256WithRSAEncryption
66:36:82:99:52:33:40:8c:85:3a:46:1d:85:85:ae:ae:6a:5e:
0a:2e:bf:2c:60:0c:80:99:32:06:cc:01:05:5c:30:bd:99:02:
6e:6f:c3:f4:08:11:95:ac:9a:af:81:c2:06:f8:18:89:58:94:
0b:ae:00:f8:29:e9:83:eb:08:91:81:b2:2c:1c:ac:83:58:9d:
4a:5a:df:ce:48:d7:78:84:30:eb:2b:42:53:07:3d:f5:16:ff:
b5:89:99:ec:46:1a:98:3a:76:7e:fa:9b:b8:e3:0c:ad:56:9f:
d5:82:dd:b6:ae:a5:4b:80:8e:e3:a0:f0:bc:62:e4:5e:c6:85:
13:1f:90:00:3e:b7:12:ba:b8:ff:bc:42:8c:92:17:59:62:0d:
df:3a:c7:8b:ec:dd:88:8d:d6:df:60:64:63:94:06:d5:d0:56:
d3:76:fa:0c:64:c7:4f:61:7a:89:52:d2:c4:74:3b:03:2c:85:
b8:c4:f6:0a:a1:11:3d:50:47:b0:9d:2c:5e:ea:dd:20:e4:39:
67:d0:cc:c3:13:71:95:42:50:d4:ed:49:ac:51:26:54:6d:b2:
85:3b:f0:1d:06:e9:46:7c:67:34:d9:9c:bb:47:fd:c7:73:d6:
8f:84:96:82:44:df:42:0c:d5:86:a4:67:08:04:a1:a1:f5:26:
1c:45:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:06 2025 by rpki-client