Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Es6Tko1T64AxwwgsxmH26mkHDsw.roa
File: Es6Tko1T64AxwwgsxmH26mkHDsw.roa (raw, json)
Hash identifier: oSw6DfhAeMKc/SVOMQ55VIwBq86/wDL/N0t6C6sko20=
Subject key identifier: 12:CE:93:92:8D:53:EB:80:31:C3:08:2C:C6:61:F6:EA:69:07:0E:CC
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018570B06661A0FEEF34C0281151213405DC
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Es6Tko1T64AxwwgsxmH26mkHDsw.roa
Signing time: Mon 02 Jan 2023 04:14:46 +0000
ROA not before: Mon 02 Jan 2023 04:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208078
IP address blocks: 2a05:b0c6:5500::/40 maxlen: 40
2a05:b0c6:5530::/48 maxlen: 48
2a05:b0c6:5520::/48 maxlen: 48
2a05:b0c6:5510::/48 maxlen: 48
2a05:b0c6:5500::/48 maxlen: 48
2a05:b0c6:5503::/48 maxlen: 48
2a05:b0c6:5502::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:66:61:a0:fe:ef:34:c0:28:11:51:21:34:05:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 04:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ce93928d53eb8031c3082cc661f6ea69070ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:e1:f5:62:98:0a:df:76:74:10:ec:c3:92:
df:a4:f1:5c:40:7e:93:a4:5b:d2:52:26:db:89:fd:
93:11:90:fb:65:80:39:60:64:23:52:b3:71:e3:fe:
bc:2a:0a:3e:fc:81:ad:f7:e0:58:cb:4e:1f:11:52:
cf:f0:5b:48:a3:bd:c4:96:2f:77:39:9c:cc:15:df:
75:ea:e7:b0:99:65:a8:17:6f:77:60:34:a2:ce:98:
f8:a0:5e:d2:c3:d8:04:65:b7:f7:3d:4f:8a:b6:a6:
99:ff:8a:77:28:ac:e3:0e:b6:23:06:37:e0:77:9a:
ee:a7:8e:18:8a:dd:14:4a:85:e6:07:d2:98:19:03:
bb:ce:fc:46:28:11:ea:f5:f8:07:a7:7f:10:4e:17:
86:31:ba:52:6a:8b:32:ad:be:c7:1b:5a:dc:1d:cb:
fe:12:59:dd:69:33:10:12:e4:e8:8c:bf:89:b7:65:
bf:38:29:5f:fc:ba:92:e3:92:31:43:5b:65:58:c1:
96:10:c5:6d:3c:b9:00:81:20:8d:09:70:b2:65:86:
9d:42:bc:4a:5c:b4:8c:5a:7d:23:17:41:5b:38:70:
14:b6:e8:b1:ff:e6:59:c2:ab:55:d3:b0:74:76:03:
c9:af:19:2f:14:90:b2:db:f1:3c:4e:84:15:c8:13:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CE:93:92:8D:53:EB:80:31:C3:08:2C:C6:61:F6:EA:69:07:0E:CC
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/Es6Tko1T64AxwwgsxmH26mkHDsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:5500::/40
Signature Algorithm: sha256WithRSAEncryption
7a:39:6f:df:b8:00:53:d2:e4:44:fc:40:d0:3c:fc:22:c8:14:
21:f0:04:32:77:55:c4:86:87:d8:76:9c:33:3b:c1:62:86:55:
70:1d:46:25:96:72:96:0e:cf:cf:3a:16:dd:f6:01:5a:1e:b0:
cc:74:32:77:86:d2:c9:7c:e5:3f:ac:b8:12:95:f9:b8:04:b4:
4b:9b:d4:91:54:b3:1d:01:67:7f:60:2d:f7:3b:26:a3:ad:ca:
6b:04:84:da:25:e0:00:0c:68:d2:61:4e:86:02:bb:e3:cf:9e:
f9:f3:07:c8:bb:8a:09:31:43:4b:49:76:00:06:47:8d:41:a6:
ca:79:74:83:33:4d:70:51:be:a1:27:f3:d4:0a:74:17:cb:5e:
f5:d0:e6:c4:24:ab:3c:70:d5:b3:33:1d:81:0c:45:1d:2c:de:
3e:7b:9e:0b:7d:82:e5:21:76:40:d0:6c:a5:1c:3c:a1:d0:54:
91:bd:7e:08:fc:4e:f6:a4:50:f9:bd:a0:dd:d8:c0:80:30:31:
1c:49:cb:e5:fa:3e:7e:6a:f4:31:cf:20:d2:c7:ee:04:22:58:
54:34:7f:aa:57:8d:50:4b:b1:fd:68:a5:fd:ee:66:69:d2:b2:
88:0c:0f:ef:2e:05:75:ab:55:1d:7b:83:b1:51:f7:88:56:05:
22:2a:85:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:03:31 2025 by rpki-client