Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/5xHJXgeduHRAKzUUD3O7qzziLQs.roa
File: 5xHJXgeduHRAKzUUD3O7qzziLQs.roa (raw, json)
Hash identifier: oSinJkTbh2GxBDt+im6JwpwbU6x1lk3fVl0AsIWRte4=
Subject key identifier: E7:11:C9:5E:07:9D:B8:74:40:2B:35:14:0F:73:BB:AB:3C:E2:2D:0B
Certificate issuer: /CN=af081823867d6ecba577cda401748ddfe6832a6d
Certificate serial: 01856BD37CFF12AE4A245881FB487817A50E
Authority key identifier: AF:08:18:23:86:7D:6E:CB:A5:77:CD:A4:01:74:8D:DF:E6:83:2A:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwgYI4Z9bsuld82kAXSN3-aDKm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/5xHJXgeduHRAKzUUD3O7qzziLQs.roa
Signing time: Sun 01 Jan 2023 05:35:00 +0000
ROA not before: Sun 01 Jan 2023 05:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 2a12:1f00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:7c:ff:12:ae:4a:24:58:81:fb:48:78:17:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af081823867d6ecba577cda401748ddfe6832a6d
Validity
Not Before: Jan 1 05:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e711c95e079db874402b35140f73bbab3ce22d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:11:bb:89:b2:82:eb:c2:d2:3f:3f:72:2d:
3f:82:1c:06:22:bb:19:83:a6:4d:6b:3b:63:49:0d:
0f:82:e9:08:38:f3:7a:07:2d:71:38:01:68:ac:89:
a0:4b:db:b6:70:31:8f:d7:9b:3f:71:0b:eb:a0:99:
d2:3e:29:45:f9:a5:c9:d7:0f:13:95:5f:c0:52:d7:
49:98:8c:e9:90:64:92:ed:8b:2d:f3:3f:f6:81:ab:
3e:ac:73:d8:3f:f9:03:6e:e4:36:93:9f:c6:e0:9e:
e1:e7:33:bf:b4:60:25:19:28:f7:78:b9:22:4a:c1:
34:0d:58:23:53:db:5c:58:5b:91:ad:d0:18:07:8b:
2a:63:f4:2e:89:17:2f:70:ee:37:16:a6:ea:0a:24:
1b:6e:bf:1a:4f:1d:e3:c9:3a:f8:01:61:ff:e4:38:
46:e2:a6:72:0d:0a:15:2f:d2:1c:a6:95:95:2a:81:
4a:30:de:2d:8c:2b:42:ce:47:fe:6a:37:8f:17:cd:
80:14:c1:59:f3:12:3e:53:5b:2d:3c:b2:38:7e:d6:
56:4d:58:96:a1:ca:ae:31:1d:c5:7c:76:38:34:c3:
e6:3e:0e:f9:91:66:09:49:be:79:b2:0b:b9:76:87:
18:4b:7c:2c:df:f6:13:56:9a:a8:19:df:07:a7:2f:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:C9:5E:07:9D:B8:74:40:2B:35:14:0F:73:BB:AB:3C:E2:2D:0B
X509v3 Authority Key Identifier:
keyid:AF:08:18:23:86:7D:6E:CB:A5:77:CD:A4:01:74:8D:DF:E6:83:2A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwgYI4Z9bsuld82kAXSN3-aDKm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/5xHJXgeduHRAKzUUD3O7qzziLQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c7c46a-b29b-4ec2-af88-dc767e3c100f/1/rwgYI4Z9bsuld82kAXSN3-aDKm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1f00::/29
Signature Algorithm: sha256WithRSAEncryption
80:01:6d:23:e4:6f:69:ca:e3:bc:59:90:cb:9e:39:94:e9:e1:
dd:67:71:0e:8d:a8:b0:fb:89:9e:a3:12:ba:af:b9:ed:54:d5:
95:cb:92:d5:e2:69:c2:28:ca:71:6f:27:03:5d:b2:0f:a4:e1:
e1:16:ec:52:8f:7d:67:ed:79:82:f9:1e:8e:6e:4e:0d:89:ca:
ce:cf:1c:6d:b8:fb:66:40:b8:ba:d2:ce:f8:e7:b2:d8:d2:87:
bd:dd:25:11:15:f9:38:77:e2:7d:61:87:40:62:8d:e1:b1:4f:
bd:c3:02:8f:ee:71:12:46:48:df:7c:18:64:5e:10:d5:70:88:
14:af:e1:4f:96:7b:c3:ba:df:5c:1f:f1:00:3d:11:c0:ae:bb:
c6:de:8b:28:01:f7:21:48:26:e2:40:f5:ae:7f:08:8e:35:c6:
8f:6a:79:7a:55:90:67:82:b8:23:7c:7c:1d:de:95:74:f2:4a:
c1:ad:fe:06:93:fb:88:1f:a6:db:5a:4a:72:27:d5:7b:d3:44:
d5:11:07:c5:cf:8c:64:7b:25:ae:0b:05:89:97:4d:bd:e9:96:
3e:b7:79:ca:d1:aa:ff:37:ad:b8:50:51:7b:9e:b5:c4:98:be:
50:a5:39:be:51:a5:99:38:bd:dc:9a:fb:af:33:8d:cb:dc:a5:
1b:44:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:21 2025 by rpki-client