Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/KC8rB-rl7Z7ZijZeEKMSfHITxXA.roa
File: KC8rB-rl7Z7ZijZeEKMSfHITxXA.roa (raw, json)
Hash identifier: X1ag6KIuLpGzrgsRYLI6OYlzb77UIzfgS4nuJ9PJ9cE=
Subject key identifier: 28:2F:2B:07:EA:E5:ED:9E:D9:8A:36:5E:10:A3:12:7C:72:13:C5:70
Certificate issuer: /CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Certificate serial: 026B4AE6
Authority key identifier: 78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/KC8rB-rl7Z7ZijZeEKMSfHITxXA.roa
Signing time: Thu 02 Jun 2022 10:13:20 +0000
ROA not before: Thu 02 Jun 2022 10:13:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207359
IP address blocks: 2a11:29c0:3dfe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40585958 (0x26b4ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=781684136124a5cacbe7bf7d9f69fa421eccfd37
Validity
Not Before: Jun 2 10:13:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=282f2b07eae5ed9ed98a365e10a3127c7213c570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fd:66:bf:dc:d2:ac:13:6a:55:6e:46:54:9a:
52:06:75:a7:bc:3a:da:16:e0:3a:c9:76:33:f1:38:
0f:6f:b5:96:db:a8:90:9a:30:05:36:f3:a8:e1:dd:
80:61:e5:80:4b:4f:b5:ab:5f:ba:2c:86:4d:ee:9b:
14:eb:6d:0b:2c:bc:05:08:18:30:9e:b8:cf:24:37:
83:e6:ed:b0:f0:9c:69:b9:7f:7e:2e:82:29:d6:b1:
d9:6a:b7:34:fd:89:35:c3:7d:06:55:3a:17:e7:1c:
23:8d:0f:38:35:23:29:d8:71:d7:bb:db:23:8b:a3:
7e:b7:ad:03:e7:b5:74:f2:03:45:91:b0:a6:b8:46:
ad:35:2a:04:c0:90:89:0d:84:8e:3b:99:cf:f9:0c:
72:fa:ad:2a:58:ae:12:e0:4c:a9:c8:42:9d:e5:f2:
c0:e7:b4:19:7d:3a:3f:01:f5:9a:c2:8c:ca:43:09:
be:2e:a4:1d:19:fb:ad:1d:ff:bc:2a:b8:d7:27:84:
76:95:ed:94:d2:84:c0:4a:7c:59:bc:34:58:45:cb:
cf:34:c8:ab:f2:c7:be:e4:19:0e:b9:86:ee:d6:09:
ba:ed:ff:76:54:78:fc:c6:3a:df:4a:3d:0c:78:bd:
28:21:69:87:9a:df:79:20:6d:ab:17:d5:f7:e1:95:
29:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:2B:07:EA:E5:ED:9E:D9:8A:36:5E:10:A3:12:7C:72:13:C5:70
X509v3 Authority Key Identifier:
keyid:78:16:84:13:61:24:A5:CA:CB:E7:BF:7D:9F:69:FA:42:1E:CC:FD:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBaEE2EkpcrL5799n2n6Qh7M_Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/KC8rB-rl7Z7ZijZeEKMSfHITxXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7e281f-405d-4437-8220-42c0b7561d29/1/eBaEE2EkpcrL5799n2n6Qh7M_Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:29c0:3dfe::/48
Signature Algorithm: sha256WithRSAEncryption
50:aa:8d:9a:10:86:24:cd:2f:99:be:b4:70:a0:14:a2:1d:eb:
81:65:80:39:11:bd:de:54:ca:f1:fd:5f:89:af:e8:ef:fa:20:
71:01:fc:6a:18:87:53:db:02:d5:09:16:84:b8:3c:18:64:3c:
1d:49:a9:7e:9b:90:12:51:ec:d3:24:82:a1:08:ad:29:3c:0d:
6b:9b:9c:04:68:83:b6:e3:7d:1f:04:67:ca:6c:fb:d4:3e:ad:
27:b4:6b:d2:7b:c6:b5:0e:60:c3:f3:e6:97:dd:68:e6:30:b3:
a2:5f:dd:71:cb:4d:d2:e9:aa:7b:fd:29:7b:e8:82:1e:27:e6:
8b:a5:82:05:2e:38:1a:f7:8a:f3:27:b7:1c:0c:3b:be:82:20:
1b:e3:dd:9f:a4:49:d0:c4:40:3c:43:a0:10:b3:b1:9c:07:76:
ca:d4:ca:9d:ea:40:a9:ed:f1:5b:d7:ca:7e:c1:7d:f7:19:16:
86:c8:6f:7a:48:ed:d5:8e:c0:c4:68:78:2c:53:8f:88:0e:82:
ad:74:7c:86:57:6e:a8:6c:d2:36:2c:72:1d:86:6f:8f:a3:1c:
c7:4b:98:4e:27:cf:86:fa:0d:24:ac:a4:ce:8a:ef:92:00:95:
ba:85:8a:bf:70:85:02:1e:d2:59:d9:83:06:a6:70:5d:1c:1f:
27:45:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:20 2025 by rpki-client