Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/M2HUzRTGQbNfkLjPyKaZtSUZQ7I.roa
File: M2HUzRTGQbNfkLjPyKaZtSUZQ7I.roa (raw, json)
Hash identifier: Om32thttq7skssgJuyf1m/E3fkY0DBRpEemtGmbECDY=
Subject key identifier: 33:61:D4:CD:14:C6:41:B3:5F:90:B8:CF:C8:A6:99:B5:25:19:43:B2
Certificate issuer: /CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
Certificate serial: 0182E86B6833DA2EA97BCAD6A098222A2F5E
Authority key identifier: 43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/M2HUzRTGQbNfkLjPyKaZtSUZQ7I.roa
Signing time: Mon 29 Aug 2022 07:05:29 +0000
ROA not before: Mon 29 Aug 2022 07:05:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:7b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:6b:68:33:da:2e:a9:7b:ca:d6:a0:98:22:2a:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
Validity
Not Before: Aug 29 07:05:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3361d4cd14c641b35f90b8cfc8a699b5251943b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:fc:81:8d:6d:38:e7:a8:2f:ee:f8:85:c5:
e1:e5:e4:3e:9a:08:09:82:c4:61:ef:3b:6e:69:fd:
fe:ab:f7:03:eb:6e:b7:42:65:93:60:12:af:b8:0c:
7e:d1:fb:40:c5:d5:ef:07:f4:37:7c:bb:85:cb:06:
1e:c9:a6:b0:54:f3:b3:6e:ab:b1:6a:cf:4c:ff:15:
38:de:89:5e:2c:a2:9e:30:d1:3a:53:7c:ec:49:d8:
7f:05:81:ca:96:68:c2:c5:a0:15:fd:ca:6f:9f:fd:
85:aa:68:70:45:06:3e:f5:10:b1:f9:e3:75:15:6a:
cb:58:2e:10:29:57:f6:ff:f2:d7:74:65:31:8c:59:
78:7c:02:21:7a:f3:e4:2e:48:a0:4f:7c:29:6b:55:
b3:1f:e9:37:35:b2:28:3b:35:c6:72:0a:1c:66:11:
0d:db:58:33:09:7f:46:db:01:d0:04:5c:03:4d:b4:
a1:98:72:de:5b:d8:e9:b9:dd:5d:8e:e7:7c:01:d6:
57:b3:39:38:90:76:59:88:59:c4:fc:a8:15:db:f0:
fc:3a:74:e0:8f:f6:5f:d5:c1:af:23:ad:34:45:01:
ab:75:2d:4e:5d:be:f8:d4:41:46:21:ff:fd:ab:49:
f5:29:cb:c5:f7:5b:79:32:95:00:f5:2f:b6:b3:7e:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:D4:CD:14:C6:41:B3:5F:90:B8:CF:C8:A6:99:B5:25:19:43:B2
X509v3 Authority Key Identifier:
keyid:43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/M2HUzRTGQbNfkLjPyKaZtSUZQ7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7b80::/29
Signature Algorithm: sha256WithRSAEncryption
47:98:54:5a:43:61:30:85:36:fa:e7:0a:a6:c9:f4:88:b8:08:
4e:62:58:c0:39:a6:1a:43:dd:5d:66:50:f4:05:f3:71:f4:ce:
f3:56:59:22:4a:ca:6c:5d:82:c4:61:b8:0e:f8:e3:11:10:23:
85:22:7f:24:ac:89:66:10:4b:16:55:20:75:78:bf:7a:69:c0:
8d:90:b0:fb:1d:e8:50:5a:08:f7:57:6e:c9:35:d4:82:d3:0d:
fe:d2:f2:18:65:fc:ec:5f:7e:92:89:16:22:65:00:5f:b3:9c:
1a:f4:8c:c5:af:dc:3f:ac:f5:b3:c2:1b:a1:12:ed:d0:f2:d2:
fd:b6:b6:85:0f:70:3e:db:cd:c1:84:b6:d2:66:5a:10:0e:75:
67:66:e2:b4:de:0b:0a:32:8f:d6:30:a9:95:0e:76:71:5f:55:
2f:80:48:0f:01:b0:2e:84:94:36:73:c7:79:90:37:c7:fb:89:
21:cd:fd:d5:9c:e1:7d:81:e6:4e:a2:69:ab:c4:92:1e:88:1a:
46:49:85:76:b2:f0:7a:63:54:58:ee:f6:ee:72:c0:d1:88:86:
e4:2d:3f:c2:78:31:1b:7b:f6:1a:6a:a8:c3:d9:be:44:73:fc:
ad:02:05:70:98:e5:3e:ba:99:9f:4d:01:e2:95:b5:c0:13:2f:
2e:cd:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:57 2025 by rpki-client