Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/vx0RFxCChrw063smNdiNiE85SMo.roa
File: vx0RFxCChrw063smNdiNiE85SMo.roa (raw, json)
Hash identifier: aOxWY/zDH3THXOWDAjrmKgtAfv8yFrh+yZch6spftAA=
Subject key identifier: BF:1D:11:17:10:82:86:BC:34:EB:7B:26:35:D8:8D:88:4F:39:48:CA
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 01856DCAF051142C381FDFEF46BA671072F9
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/vx0RFxCChrw063smNdiNiE85SMo.roa
Signing time: Sun 01 Jan 2023 14:44:54 +0000
ROA not before: Sun 01 Jan 2023 14:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56981
IP address blocks: 2a02:2698:7800::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:f0:51:14:2c:38:1f:df:ef:46:ba:67:10:72:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 1 14:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf1d1117108286bc34eb7b2635d88d884f3948ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d0:47:35:ed:d9:fa:63:ea:69:45:c2:5e:b0:
c8:67:40:ce:0b:6a:6a:72:e6:4b:c2:9a:a9:04:b0:
9b:82:22:6c:c7:98:3d:9e:94:e6:54:54:00:5d:b5:
df:b0:36:a5:4b:19:0a:7b:d2:33:f1:f4:54:2f:f9:
d1:6b:b0:92:33:c0:4b:4e:02:5d:c3:28:70:30:b1:
6b:01:b2:ef:c3:3d:9d:c2:be:f0:eb:8c:b8:cc:75:
11:56:a2:c7:79:d7:bc:e5:b5:af:2e:89:7c:23:5c:
d1:d4:80:fc:49:0b:1f:80:f7:93:ae:2d:cd:41:17:
8a:08:22:55:55:c4:cb:50:86:f9:84:3b:36:e4:28:
f7:d3:31:1e:70:35:df:ef:16:20:02:bd:82:e9:d6:
04:50:e8:0b:f0:aa:57:ba:3b:4e:61:c1:0c:90:54:
ac:95:27:b9:7c:05:85:c9:9a:95:1f:24:d1:7e:1a:
c5:9b:dd:99:09:55:ed:6a:28:79:dd:58:fe:31:ad:
91:7e:39:e4:68:64:2a:fd:eb:3d:8c:19:eb:92:9c:
03:f0:12:e6:db:75:f0:1b:a6:44:1c:5b:58:d7:a2:
d3:dc:1b:cc:45:a0:d7:28:9d:23:c3:1f:5b:1e:fc:
7e:e1:a2:d0:2b:8d:50:1b:fa:f9:81:a7:8f:e5:ac:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:11:17:10:82:86:BC:34:EB:7B:26:35:D8:8D:88:4F:39:48:CA
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/vx0RFxCChrw063smNdiNiE85SMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:7800::/38
Signature Algorithm: sha256WithRSAEncryption
c9:18:6b:16:85:de:86:3e:c9:2d:1e:cc:a1:a9:2b:f3:82:2c:
88:68:0f:19:ed:c2:8a:c2:ca:eb:17:e0:2a:36:90:73:af:df:
a1:ca:d4:77:26:b0:9a:4d:f2:b9:66:71:e5:05:50:ed:c4:a7:
66:d7:85:14:a9:b4:a3:4f:86:b9:e9:b4:5e:db:b5:c0:80:71:
97:de:a1:e4:0f:ed:e5:87:1c:44:1e:8c:dd:45:1e:d0:4a:dd:
69:0c:b2:17:62:6b:3c:ed:dd:51:06:09:17:ae:73:c7:99:e3:
7b:99:ec:14:e9:be:9e:70:57:03:99:83:79:b4:ec:cc:ac:e8:
c9:fa:e7:a5:fa:9a:04:da:99:f4:a5:60:b5:a2:e7:22:ea:bb:
47:b6:4f:e7:6b:f7:17:3c:36:ac:9c:91:cf:16:b3:2f:7e:2d:
e7:59:46:2a:70:18:c8:e9:5c:cf:f5:cf:2d:27:5a:90:28:47:
96:86:ca:22:ea:9e:5a:d9:7d:c1:f3:56:d4:94:3f:57:c1:82:
a6:73:4e:56:86:f3:1e:93:49:f2:f0:2a:dc:b0:8d:c5:27:96:
cb:6e:f8:64:52:c8:76:57:e4:e0:b7:5f:f8:66:f9:b1:b2:f9:
db:e8:bc:1c:28:a6:de:3f:29:08:c0:e2:d8:3b:0d:a2:dd:47:
e2:a2:3b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:14 2025 by rpki-client