Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/tFDAbgGfcOVO8AKrp61pWaFBk68.roa
File: tFDAbgGfcOVO8AKrp61pWaFBk68.roa (raw, json)
Hash identifier: ceRcLqUg80LMTCWb5IE9qbkG1J1qlR+0QZczRBPI/M8=
Subject key identifier: B4:50:C0:6E:01:9F:70:E5:4E:F0:02:AB:A7:AD:69:59:A1:41:93:AF
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCADFBD7B35F12F8EAFB03196B0C671
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/tFDAbgGfcOVO8AKrp61pWaFBk68.roa
Signing time: Sun 01 Jan 2023 14:44:50 +0000
ROA not before: Sun 01 Jan 2023 14:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41682
IP address blocks: 2a02:2698:8000::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:df:bd:7b:35:f1:2f:8e:af:b0:31:96:b0:c6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b450c06e019f70e54ef002aba7ad6959a14193af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:30:09:b5:9e:0d:c0:86:cb:0f:6b:9b:e0:
24:10:0b:3a:84:4c:ed:5f:ed:a6:5e:bc:b6:b1:69:
1a:e2:a3:48:5c:26:ac:ba:3c:d4:c4:01:6a:c0:8c:
21:14:42:da:58:96:fa:0b:1d:51:96:28:a5:bf:44:
36:fc:eb:87:66:04:cc:36:1d:0a:65:70:3c:cf:eb:
ba:bc:12:87:1a:6c:63:bb:a5:37:80:8c:16:28:2c:
68:a0:08:53:5e:e6:3a:ef:67:cb:7a:18:be:70:31:
b7:89:b9:ce:2f:30:dc:80:04:0a:09:9f:bf:7e:e7:
c5:a0:c5:3b:5a:33:fe:dc:93:31:f5:19:8f:e5:19:
2e:34:0a:81:4a:ca:b3:c5:aa:1a:1b:fe:2f:a1:3d:
37:39:45:1a:9c:7a:71:2b:7e:41:2a:51:56:8c:a4:
99:5f:8b:02:12:cd:f9:29:d5:0d:b2:7b:7f:8d:8c:
fe:b3:f7:23:27:2f:23:b4:28:b6:d5:3c:cf:da:aa:
2b:9e:e0:54:c1:22:ef:a4:ff:59:5a:8e:b8:0c:ae:
d7:e0:1d:85:25:1c:6f:7b:1a:b2:d2:04:0a:a8:78:
94:c7:0f:50:56:cc:cc:6f:28:2b:91:82:41:fa:83:
72:be:00:c5:ff:8f:c1:a4:ea:71:ce:ef:82:5c:3f:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:50:C0:6E:01:9F:70:E5:4E:F0:02:AB:A7:AD:69:59:A1:41:93:AF
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/tFDAbgGfcOVO8AKrp61pWaFBk68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:8000::/38
Signature Algorithm: sha256WithRSAEncryption
c5:2b:e4:94:06:77:71:7d:d6:e9:53:26:c3:a3:78:2f:94:95:
93:50:b1:37:b2:5c:bd:18:b4:a5:9e:d6:23:f6:47:e3:8f:cf:
1b:47:10:f0:cb:5f:02:0b:6b:a7:33:45:79:e5:c4:d2:f8:d1:
52:e3:c4:bd:7b:33:80:fb:76:bf:19:32:27:14:da:8f:52:02:
56:5b:82:cd:41:80:ca:db:f1:0f:15:a5:35:43:3f:ce:eb:62:
a7:81:0d:ca:f3:e3:bd:7a:70:ce:20:3c:14:71:b6:ba:3d:d2:
2d:5a:2d:f1:39:fc:24:ab:0d:bf:ce:db:f4:9d:07:11:f8:c7:
91:19:fe:42:aa:21:39:bb:f4:3d:1f:98:b2:a2:d9:86:99:1d:
a6:89:3d:05:6d:b3:94:34:9a:9c:7d:bb:98:68:ed:ef:d1:c3:
d9:60:f2:14:e8:06:5d:dd:3f:76:19:d6:6a:5c:2d:ad:75:f0:
3d:cc:2f:01:8e:bb:f5:28:5d:c0:a5:1e:7a:9c:69:c4:d6:c8:
24:41:07:91:a2:26:9e:51:6c:e6:c9:98:24:87:83:53:7e:ee:
22:8a:73:19:e9:28:ae:23:85:2f:f8:b7:68:25:27:fd:94:07:
23:a8:71:39:92:09:c8:c2:65:43:44:b1:b2:42:b4:d4:1a:d5:
08:74:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:18 2025 by rpki-client