Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/L2scJ_jGt0k4t-V7NgXfICXztVY.roa
File: L2scJ_jGt0k4t-V7NgXfICXztVY.roa (raw, json)
Hash identifier: DA0Nd+wP6y9yC8CPIrL3jawQdNr+WB3/Y15FVIkpS54=
Subject key identifier: 2F:6B:1C:27:F8:C6:B7:49:38:B7:E5:7B:36:05:DF:20:25:F3:B5:56
Certificate issuer: /CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Certificate serial: 098170
Authority key identifier: BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/L2scJ_jGt0k4t-V7NgXfICXztVY.roa
Signing time: Sat 12 Feb 2022 05:46:05 +0000
ROA not before: Sat 12 Feb 2022 05:46:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210542
IP address blocks: 2a12:6f40::/30 maxlen: 30
2a12:6f44::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622960 (0x98170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffb6a3d8e2264f1058b12abfdebbea1c248c667
Validity
Not Before: Feb 12 05:46:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f6b1c27f8c6b74938b7e57b3605df2025f3b556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:b3:1b:65:fb:8a:06:5c:a4:af:e3:f2:41:
17:f0:3e:8a:bb:82:d4:89:65:1d:15:5a:7b:cd:e7:
e7:d2:0c:06:e0:30:c8:24:47:cd:e3:17:12:7d:46:
30:b7:60:84:78:3a:83:c1:b5:6f:56:f2:ba:d0:c8:
26:cd:15:df:ee:31:0e:d5:d3:42:40:6f:31:f0:7e:
af:56:61:00:43:22:d0:ba:37:b8:89:58:63:72:ce:
f8:2d:9c:b4:86:0e:c4:c4:a7:5a:41:c0:55:ee:ad:
d3:47:36:b4:59:b8:6a:81:76:10:de:ba:9f:56:ba:
ab:7f:dd:98:aa:3d:8b:57:9b:af:ff:88:a6:c6:88:
90:69:21:7f:20:ab:dd:a6:f2:3a:56:e0:12:cd:fe:
db:04:ea:1c:25:e4:7c:ac:36:20:c5:b3:05:a7:4e:
ed:55:98:1e:92:6b:25:15:5a:7e:5a:61:7e:44:85:
58:28:98:53:42:94:64:8e:df:a6:78:7b:92:15:af:
78:c2:ac:a3:48:85:47:94:ff:d6:d3:ad:e6:da:12:
a8:f8:e4:79:97:da:d2:ec:03:5c:5c:0d:29:03:9a:
a6:13:8b:eb:8c:04:42:dd:c8:ef:38:7b:bc:84:95:
9f:53:95:ee:8a:29:f4:0c:9c:9e:82:49:8e:ff:30:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:1C:27:F8:C6:B7:49:38:B7:E5:7B:36:05:DF:20:25:F3:B5:56
X509v3 Authority Key Identifier:
keyid:BF:FB:6A:3D:8E:22:64:F1:05:8B:12:AB:FD:EB:BE:A1:C2:48:C6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_tqPY4iZPEFixKr_eu-ocJIxmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/L2scJ_jGt0k4t-V7NgXfICXztVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/856ed4-9b5f-42e3-8d61-e4fbb9238ca7/1/v_tqPY4iZPEFixKr_eu-ocJIxmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6f40::/29
Signature Algorithm: sha256WithRSAEncryption
2c:2a:ec:10:d3:8c:92:a3:ed:5b:73:85:c8:c3:7e:6e:76:a9:
81:49:ed:1e:88:3a:1f:4e:f4:d1:24:8a:eb:d2:8a:0b:dc:46:
ea:d6:f3:c6:fa:3f:36:f2:16:4b:e2:0a:57:c1:dc:46:6c:6b:
c1:91:bd:08:35:18:83:d8:71:f9:08:f1:f0:18:02:5c:2c:55:
ab:46:e8:98:19:f2:7d:19:03:8e:1d:9a:43:6a:3b:b8:61:26:
48:a3:b4:75:1a:52:c6:34:f8:48:2e:0f:32:a5:4b:73:df:82:
34:ce:61:08:74:d9:4a:a6:72:b9:05:b7:73:20:f1:a6:a2:a9:
a3:0b:2a:a8:8f:a4:f5:6d:75:ba:85:50:03:58:e3:7b:2d:bf:
40:8f:72:e6:81:1b:21:d9:e9:c6:11:b1:f2:63:37:e8:e5:20:
84:42:67:46:ca:d4:73:60:0b:99:7d:f6:1d:ad:67:99:9c:e5:
2c:03:cf:94:75:62:44:db:cf:77:64:b6:81:65:6e:40:1b:2d:
e7:18:c2:86:6d:b7:00:30:48:71:60:7d:80:f9:8a:aa:55:c9:
29:81:d5:c8:d9:43:6d:b4:13:20:03:2a:53:3c:a9:71:1e:d7:
d9:87:fe:05:50:2a:07:73:67:15:c2:6f:a4:61:cc:21:1a:b6:
bc:53:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:03 2025 by rpki-client