Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/m5Y7V5oWzo_w1xOFCIUh9Gcca3Q.roa
File: m5Y7V5oWzo_w1xOFCIUh9Gcca3Q.roa (raw, json)
Hash identifier: fD3Jls61bojstJXesug20H/ikD89Jpwrm/q366sb/Mk=
Subject key identifier: 9B:96:3B:57:9A:16:CE:8F:F0:D7:13:85:08:85:21:F4:67:1C:6B:74
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 07E0B282
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/m5Y7V5oWzo_w1xOFCIUh9Gcca3Q.roa
Signing time: Sat 01 Jan 2022 01:55:50 +0000
ROA not before: Sat 01 Jan 2022 01:55:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206607
IP address blocks: 2a04:ff00:500::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132166274 (0x7e0b282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 1 01:55:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b963b579a16ce8ff0d71385088521f4671c6b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:25:4f:b6:4a:69:c8:a1:0f:50:ab:ef:ba:
4a:2a:1c:ad:05:48:d5:31:bd:4b:f0:23:67:86:21:
64:9a:c4:bd:08:08:6d:66:ba:5e:aa:ee:4c:f0:9b:
d3:84:89:37:f2:83:9b:a0:c0:5f:4b:d4:22:d6:2d:
35:89:e1:dd:0e:c1:33:32:7b:61:5c:aa:b5:55:4b:
27:ef:66:48:c0:39:55:a8:a9:7b:48:36:2d:6b:3a:
1f:c4:64:62:8c:e3:e3:cf:35:0c:52:ca:a2:a6:bf:
07:ab:27:4a:71:7b:f3:27:0f:57:e3:ef:bc:da:50:
07:1a:15:dc:71:51:95:0b:8b:67:b6:c8:b3:9a:c2:
e5:90:d9:16:05:42:fe:e6:c2:bf:52:f5:59:ec:54:
92:ad:ca:09:86:e9:1b:7a:08:b4:5f:b7:5c:1e:fb:
20:f3:09:22:6b:8e:e1:9a:aa:9b:7f:c3:7c:64:b5:
e9:83:5b:34:b6:5b:6c:c7:ef:89:8e:81:41:9a:0f:
c8:7f:cf:6f:29:82:92:e9:d2:6d:dc:7d:aa:94:ed:
89:30:13:b2:fe:2b:97:7f:83:0d:e0:2f:c7:b2:1f:
5c:7d:d9:e3:dd:93:52:34:a0:48:63:b0:2b:cf:07:
bd:b7:0d:ab:64:77:df:4f:33:8e:67:ea:5c:e7:e5:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:3B:57:9A:16:CE:8F:F0:D7:13:85:08:85:21:F4:67:1C:6B:74
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/m5Y7V5oWzo_w1xOFCIUh9Gcca3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:500::/40
Signature Algorithm: sha256WithRSAEncryption
6e:b7:8e:3c:cb:cc:d9:ce:9b:b6:80:0f:22:fe:78:46:72:0c:
50:1c:ed:5e:f4:e0:83:38:0b:f5:4f:04:fd:0e:c7:cb:4f:de:
0c:9c:38:09:b7:3b:af:e5:9f:39:a5:65:77:f0:6d:8e:c1:e2:
6e:c4:41:99:92:53:01:1c:d1:93:69:ff:1b:59:bf:54:da:a6:
cd:60:76:c2:7f:a6:31:97:30:d7:3d:62:83:93:f8:4a:3a:f7:
a9:f1:70:52:2c:8f:41:9a:58:b2:a7:f5:16:af:d8:93:ed:15:
1c:b5:82:d9:fa:0a:5e:57:11:bf:a4:b7:13:54:a2:4c:92:ad:
0a:97:0c:1b:7d:20:64:7f:f5:5f:8f:b3:05:3a:c8:d8:5a:90:
82:56:19:5e:8f:6a:93:64:7f:09:6e:87:9a:ba:09:1d:3a:70:
41:f5:e6:63:7f:9e:21:0f:e0:09:44:c8:7a:21:cf:32:6d:a5:
6c:58:e2:fd:d3:0d:05:37:8a:2c:27:55:85:97:7a:0e:0c:99:
46:80:2e:54:f9:cb:7b:93:2b:5d:af:bf:d7:79:a4:04:59:8f:
9f:7b:4b:4e:6a:bb:d0:30:f0:14:dd:90:ac:92:48:93:0e:df:
b9:00:85:c2:0b:1c:fa:3b:cc:21:60:76:eb:e0:cd:b1:a6:52:
23:c7:09:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:37 2025 by rpki-client