Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/gA7FHRErboyr9Z-wZtWUYfb7YOM.roa
File: gA7FHRErboyr9Z-wZtWUYfb7YOM.roa (raw, json)
Hash identifier: q1R87dU0GhnmGwFIaKnv3eFRwRbLgHEpE32zpZdys5M=
Subject key identifier: 80:0E:C5:1D:11:2B:6E:8C:AB:F5:9F:B0:66:D5:94:61:F6:FB:60:E3
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 0185710C3D015AF0A64908DBEC57B7F3F4FD
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/gA7FHRErboyr9Z-wZtWUYfb7YOM.roa
Signing time: Mon 02 Jan 2023 05:55:05 +0000
ROA not before: Mon 02 Jan 2023 05:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206607
IP address blocks: 2a04:ff00:500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3d:01:5a:f0:a6:49:08:db:ec:57:b7:f3:f4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 05:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=800ec51d112b6e8cabf59fb066d59461f6fb60e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:12:6f:96:f2:d0:3d:43:dd:df:77:55:4c:d7:
5a:fe:d5:c5:c1:61:2c:98:8c:1d:5d:12:3d:18:22:
94:a0:2a:6b:53:80:e2:3a:7e:f3:18:b0:f3:af:54:
00:74:12:8c:aa:e7:f1:9e:a8:cb:f4:11:91:a3:24:
0d:ba:87:13:b2:74:9b:4c:fc:4a:d5:d7:48:59:da:
46:cf:ee:0f:42:2e:5e:ec:8d:4a:6f:69:58:14:88:
ff:4d:a0:34:fb:59:f0:ff:08:d9:38:82:84:76:e1:
e2:6d:5a:e3:a3:7a:fb:39:fa:05:6a:d3:73:e0:cd:
c3:a4:56:80:e8:37:2a:bb:d1:a5:be:c5:02:05:2c:
a9:b0:0f:78:93:cb:b0:38:2c:ce:fd:62:8f:68:e4:
89:b2:07:f4:41:43:86:6c:59:e6:80:79:83:33:f5:
66:af:1c:9f:e0:74:0d:fd:99:b2:dc:58:4f:85:90:
6b:2b:ba:c8:c6:d7:79:c6:96:0c:8e:2a:8e:65:1c:
33:be:d6:61:45:c3:1f:53:3a:16:4e:7b:17:83:5d:
40:e0:5c:11:3e:7f:0a:f5:36:8b:19:e8:34:3b:6e:
3d:92:3b:d4:3e:b4:f8:af:e0:76:72:1c:20:ef:fc:
45:14:96:84:05:4e:aa:94:90:1d:17:92:22:ef:1e:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0E:C5:1D:11:2B:6E:8C:AB:F5:9F:B0:66:D5:94:61:F6:FB:60:E3
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/gA7FHRErboyr9Z-wZtWUYfb7YOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:500::/40
Signature Algorithm: sha256WithRSAEncryption
3e:ec:59:eb:0d:04:70:c3:2f:38:ab:29:01:22:58:f1:8f:53:
d8:46:91:96:70:55:11:f4:7d:92:6a:58:2d:08:22:e3:b8:40:
69:60:8c:c0:ca:fc:42:fe:c4:38:96:ef:4d:8e:26:43:bb:70:
27:62:ec:e7:d3:e1:59:e6:5e:01:b5:6f:d7:df:fb:5c:37:75:
36:d0:7d:1f:e4:3d:b7:af:1e:41:dd:4f:9d:5b:72:ac:05:4e:
71:a2:68:75:ad:36:3d:a1:d4:ff:69:06:bc:28:04:e2:cd:a3:
5b:ad:54:e6:b3:4e:1d:74:f7:b4:90:12:30:42:bd:e5:29:80:
e9:aa:c3:6d:a9:36:d0:cd:37:9d:19:d1:97:85:11:65:5a:38:
2f:08:16:18:35:2d:44:0d:6a:d0:30:bc:40:cb:0f:3d:a5:12:
d4:b3:29:95:09:24:52:f1:9c:fd:82:9b:12:7a:36:11:23:d3:
66:b4:95:dc:8c:b0:63:9d:aa:9a:5f:75:ee:60:de:26:c4:3d:
02:1f:b6:09:05:97:e4:ec:40:24:59:c2:1b:c9:7f:2b:68:f2:
ce:3e:e9:1f:c9:af:f6:77:71:96:5f:b0:ee:de:d9:2d:a9:c8:
93:b9:1b:31:fb:1b:a7:e9:49:13:0f:68:20:42:7e:bb:3e:82:
5a:f0:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:55 2025 by rpki-client