Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/pk5wkSeAD_FfN2pfPAQSDc5LD7g.roa
File: pk5wkSeAD_FfN2pfPAQSDc5LD7g.roa (raw, json)
Hash identifier: 2ktcn+cPdl+UePA1cmOaXeZbvGakjzFfxN6q9euOq6I=
Subject key identifier: A6:4E:70:91:27:80:0F:F1:5F:37:6A:5F:3C:04:12:0D:CE:4B:0F:B8
Certificate issuer: /CN=9bfea0941a50151c80bd93a71658cb6f9135dbd5
Certificate serial: 0181F7F754FCBD377193987D0ED062BAEDAF
Authority key identifier: 9B:FE:A0:94:1A:50:15:1C:80:BD:93:A7:16:58:CB:6F:91:35:DB:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_6glBpQFRyAvZOnFljLb5E129U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/pk5wkSeAD_FfN2pfPAQSDc5LD7g.roa
Signing time: Wed 13 Jul 2022 14:29:50 +0000
ROA not before: Wed 13 Jul 2022 14:29:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203014
IP address blocks: 2a07:5900::/29 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:f7:54:fc:bd:37:71:93:98:7d:0e:d0:62:ba:ed:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bfea0941a50151c80bd93a71658cb6f9135dbd5
Validity
Not Before: Jul 13 14:29:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a64e709127800ff15f376a5f3c04120dce4b0fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d3:87:71:f3:79:c3:55:61:9e:9e:6d:1b:f2:
cc:f2:52:08:e4:07:0c:e3:26:dc:8f:d0:d9:7b:bc:
ab:dd:ac:ef:86:69:2f:fb:ab:b9:80:4d:3d:38:43:
54:4a:5b:68:3c:c2:d5:13:da:f7:f6:97:bc:fb:a2:
cb:bc:bc:08:49:72:eb:fc:13:81:95:26:4a:7c:98:
11:ff:79:b8:20:16:57:29:eb:e1:61:d0:22:a0:04:
ed:fa:c5:3c:54:55:28:56:be:2a:36:87:83:88:da:
4f:0b:9b:db:3c:db:b0:ba:c8:fc:6e:5f:9e:2f:2e:
bf:bb:f2:96:35:78:f9:86:48:82:6a:32:39:89:58:
9a:9d:60:4d:8c:55:e0:ef:60:db:59:89:da:1c:44:
b6:e6:20:11:93:d7:a3:20:f1:9b:1f:dd:8a:66:52:
6d:fe:b2:1a:3d:61:d1:d8:6a:51:ba:ab:a9:7d:80:
36:53:65:83:f2:0d:67:a7:ed:6b:a6:d6:93:98:8d:
ef:c1:d0:be:f6:70:a1:39:ad:64:c5:46:2c:8f:05:
bd:cb:8f:4c:b1:31:c8:57:ba:52:9b:1e:95:73:f8:
49:65:29:17:5a:bd:b6:af:1e:f5:48:2e:6a:49:c5:
cf:a1:8b:16:e5:8d:fc:0b:ce:7d:d0:59:a6:9a:5b:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4E:70:91:27:80:0F:F1:5F:37:6A:5F:3C:04:12:0D:CE:4B:0F:B8
X509v3 Authority Key Identifier:
keyid:9B:FE:A0:94:1A:50:15:1C:80:BD:93:A7:16:58:CB:6F:91:35:DB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_6glBpQFRyAvZOnFljLb5E129U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/pk5wkSeAD_FfN2pfPAQSDc5LD7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5487eb-91aa-40fc-87ed-0479b187c6fa/1/m_6glBpQFRyAvZOnFljLb5E129U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
67:8f:e3:b9:df:f3:6d:8a:3b:d5:62:00:86:95:31:ac:0a:da:
dc:10:a9:3d:51:92:e8:87:49:19:dd:32:ee:89:4f:bc:9b:03:
03:60:93:08:bb:b5:1e:d3:e6:1c:0a:61:b4:e4:04:5a:21:8d:
d7:a1:84:3e:bd:b9:e8:36:01:9b:57:be:63:b2:27:fe:34:81:
65:22:8e:7e:9a:3a:b5:b2:ad:94:27:dc:c4:e2:52:36:4c:50:
7b:9a:46:e9:3f:ba:48:7c:4b:2c:18:10:d4:e3:eb:c5:54:1b:
8e:4a:7a:b9:21:c0:2c:5f:ae:29:da:71:57:84:5d:58:7b:5a:
42:8f:5b:bc:f1:86:ed:19:9a:ef:bc:d3:09:2f:a1:9b:f3:82:
58:b7:ae:ab:f7:03:84:c2:e2:d7:4d:29:5d:d0:94:30:ad:3d:
1e:90:be:26:93:e8:d1:a4:98:3a:94:9b:69:a8:39:5d:53:13:
71:6b:8d:f0:d9:7d:4a:7e:7d:74:99:c3:5d:ad:b0:b4:50:78:
04:3a:91:9f:ad:7d:56:13:39:72:fc:4a:bc:01:51:13:16:3a:
65:9c:98:5f:7f:75:e7:16:58:2b:0f:76:6a:f1:fe:06:53:a3:
ee:a9:b4:67:f7:d8:7c:83:03:f3:5e:28:f4:a4:5b:98:38:85:
06:f5:cd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:33 2025 by rpki-client